
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4/450d3d9a-4a43-3196-a1a2-f1e06f7da447.roa
File: 450d3d9a-4a43-3196-a1a2-f1e06f7da447.roa (raw, json)
Hash identifier: bMrPXEabwAEut4/0n01uCcpxmRy5LEReuD1d4LOEdmM=
Subject key identifier: A3:9C:2A:2F:6F:29:FC:61:EB:C4:7F:37:E4:59:19:DA:ED:27:B3:92
Certificate issuer: /CN=2ca6b6f9-a056-471c-bf96-f2fd5330dac4
Certificate serial: 010D0C9F4328584D0D4266B4B77B48C4661E33C0
Authority key identifier: D0:68:F6:DA:CB:76:BB:9A:34:F3:3B:2F:84:8B:CE:0D:2E:49:94:38
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4/450d3d9a-4a43-3196-a1a2-f1e06f7da447.roa
Signing time: Wed 04 Mar 2026 02:00:32 +0000
ROA not before: Wed 04 Mar 2026 02:00:32 +0000
ROA not after: Tue 02 Jun 2026 01:00:32 +0000
asID: 13347
IP address blocks: 167.253.8.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4/2ca6b6f9-a056-471c-bf96-f2fd5330dac4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4/2ca6b6f9-a056-471c-bf96-f2fd5330dac4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 08 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:0d:42:66:b4:b7:7b:48:c4:66:1e:33:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ca6b6f9-a056-471c-bf96-f2fd5330dac4
Validity
Not Before: Mar 4 02:00:32 2026 GMT
Not After : Jun 2 01:00:32 2026 GMT
Subject: CN=d90a7871-2bf6-4bf2-bf5b-5f3eeed824e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d1:52:68:9f:66:d4:ad:36:03:e9:04:04:12:
68:0e:cf:6e:b9:5d:4a:a4:f9:f1:bd:b0:89:93:34:
aa:0c:2c:88:54:d5:34:91:2f:87:7c:5b:ba:e4:3e:
1b:07:77:b5:c5:a3:3e:de:31:77:b9:ba:69:e6:bb:
93:8b:57:61:d8:9f:b4:3a:1f:2c:a2:b0:eb:dd:1f:
1c:74:cb:ff:d1:04:bb:2a:24:64:88:bd:62:80:3b:
1b:d9:d2:60:64:63:a4:55:ec:bd:0e:e9:8a:88:cc:
e0:aa:4d:be:49:73:16:ec:6f:59:95:c4:c8:ea:4c:
9c:f7:b1:c2:72:0d:42:a9:5a:7b:77:0d:87:5c:e0:
4f:0b:95:8e:79:f2:cb:aa:ab:cb:3b:6e:f3:f9:9d:
ee:52:de:83:8d:50:56:75:54:b0:96:31:1e:1d:52:
1a:47:a5:65:8f:73:ba:c7:bf:a6:85:aa:80:76:1e:
86:33:60:4c:a0:5d:50:5c:13:df:12:fc:e9:60:6e:
3b:f7:be:e4:74:75:af:df:3a:02:c3:47:48:d7:53:
75:2d:9d:bf:67:99:ff:bb:ae:2f:df:e5:d3:a2:e9:
90:91:cc:26:99:46:c8:04:d6:8c:44:d9:6f:88:87:
8a:63:61:9b:df:e3:b5:de:44:d4:34:e1:b3:58:75:
ee:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:9C:2A:2F:6F:29:FC:61:EB:C4:7F:37:E4:59:19:DA:ED:27:B3:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4/450d3d9a-4a43-3196-a1a2-f1e06f7da447.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4/2ca6b6f9-a056-471c-bf96-f2fd5330dac4.crl
X509v3 Authority Key Identifier:
keyid:D0:68:F6:DA:CB:76:BB:9A:34:F3:3B:2F:84:8B:CE:0D:2E:49:94:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2ca6b6f9-a056-471c-bf96-f2fd5330dac4.cer
sbgp-ipAddrBlock: critical
IPv4:
167.253.8.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:43:26:0b:bf:20:b8:ae:2f:ba:53:29:ed:84:fc:70:91:ff:
78:22:aa:0c:54:de:23:c6:a9:c5:b1:0a:7f:b5:32:47:d3:e3:
dc:11:4d:ec:47:1a:d3:b2:dd:c1:98:8b:9d:5f:56:da:21:42:
f7:c0:08:7f:25:df:cd:57:54:12:1f:7d:fd:01:9e:45:68:ed:
c5:2a:cb:3f:fe:07:1e:78:e9:46:92:c7:66:82:2e:fe:b6:9b:
8b:f0:6e:e3:b9:45:1d:4a:56:fa:3b:80:66:03:5f:07:40:b6:
6e:48:10:5f:04:d9:02:47:08:be:25:c7:ad:65:fa:90:4e:08:
39:84:13:8a:61:f0:5f:47:83:a9:d9:37:8d:5e:7d:98:c0:52:
16:fc:6d:29:a0:00:fe:38:1f:7b:c8:97:ed:43:f7:7d:ea:44:
cd:4f:4d:8b:fb:19:3d:1e:d6:ed:c4:b4:02:35:d2:50:ad:37:
c5:c0:29:67:57:48:22:fc:9e:ce:03:a0:9a:89:e0:f9:46:3a:
b4:0b:2e:51:be:1c:21:31:3a:89:e6:d4:9c:dc:63:d3:2a:8e:
43:f3:6e:43:93:72:8b:e6:ff:ea:52:8e:54:c6:8c:ba:e8:a5:
ae:6a:3c:0b:1f:d6:35:9d:c1:d6:7c:2d:18:c2:7c:4d:57:e4:
7f:e4:ce:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 09:03:16 2026 by rpki-client