
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9f66c656-31ca-3bf9-be7b-5157d7dad991.roa
File: 9f66c656-31ca-3bf9-be7b-5157d7dad991.roa (raw, json)
Hash identifier: l2fV5sPhs47mhM06LJf2PifTp2Gz20l8PiHHBthMwx4=
Subject key identifier: 9F:A0:9B:CD:2F:41:D4:CF:20:00:2A:1E:18:DE:76:30:BE:79:DF:A2
Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial: 010D0C9F4328584CA78CE7B026BAF06BC1694780
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9f66c656-31ca-3bf9-be7b-5157d7dad991.roa
Signing time: Mon 26 Jan 2026 15:38:32 +0000
ROA not before: Mon 26 Jan 2026 15:38:32 +0000
ROA not after: Sun 26 Apr 2026 14:38:32 +0000
asID: 13536
IP address blocks: 108.171.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Feb 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:a7:8c:e7:b0:26:ba:f0:6b:c1:69:47:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
Validity
Not Before: Jan 26 15:38:32 2026 GMT
Not After : Apr 26 14:38:32 2026 GMT
Subject: CN=76f55e91-8368-4c76-b52f-76eb41ec3f73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e0:c9:5a:c0:f3:65:9b:4c:8c:d4:a8:22:0d:
de:d0:99:75:7e:c7:b8:b5:06:75:e2:5d:fa:63:56:
e2:66:c4:06:78:f7:c4:24:f3:81:5b:3c:4f:24:78:
01:0e:81:91:a8:03:b2:5d:2f:49:e2:03:79:a9:f2:
53:c6:5e:74:68:ba:29:4f:a5:09:90:62:6f:f3:a2:
9c:38:f1:91:c6:dd:34:01:4a:64:f2:77:56:98:3f:
13:af:4a:16:76:2c:b4:a5:fb:d4:68:a3:a9:32:d9:
cd:3c:a7:a1:9e:d6:8a:ba:09:26:1b:b0:52:ee:89:
67:75:b4:c1:33:e9:68:7e:f6:79:20:26:b0:41:31:
3a:11:6d:60:31:4e:e1:54:5d:c0:01:72:44:5d:84:
4d:6e:a4:b9:ce:bf:10:44:a4:e1:d7:89:97:05:8d:
c1:24:73:f7:a8:cb:bc:bd:58:65:8f:9d:e1:d2:05:
c9:5a:fb:55:c1:a5:50:22:cf:00:5d:cb:e9:b8:5f:
7c:9c:30:b5:01:bd:c4:ef:9a:31:94:22:3f:3b:be:
18:e6:2f:7c:f6:a8:92:48:a1:64:99:a7:5a:55:e5:
82:d4:9b:fc:a3:73:85:91:ac:a3:31:13:c0:e2:c1:
d7:89:3f:15:b1:54:ae:4b:3f:53:af:80:ea:be:06:
cb:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:A0:9B:CD:2F:41:D4:CF:20:00:2A:1E:18:DE:76:30:BE:79:DF:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9f66c656-31ca-3bf9-be7b-5157d7dad991.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
X509v3 Authority Key Identifier:
keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
sbgp-ipAddrBlock: critical
IPv4:
108.171.47.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a2:32:14:9c:26:25:74:1c:6d:63:ec:22:80:13:30:63:5a:e0:
6d:44:86:c4:57:95:1c:5d:c2:48:68:5c:5b:b6:d7:6f:14:2d:
78:0d:73:48:a0:4d:33:6b:eb:68:fd:bd:19:d6:f3:f8:7e:51:
89:9f:5e:6d:b6:74:7f:20:c3:6d:44:db:f5:6d:9e:3b:14:2e:
69:76:03:12:8b:73:bc:0b:a2:ac:bf:51:89:cc:64:26:52:ce:
4a:43:1d:f7:ef:d1:1c:32:5e:c8:99:5f:d8:bb:96:e1:34:11:
b1:3c:6c:cd:4d:36:cb:f1:26:ca:c8:3b:84:93:1a:aa:19:df:
47:d7:93:39:7a:94:44:da:e8:6d:44:60:52:ed:48:4a:cb:05:
11:d7:94:89:41:ee:1c:32:8a:21:9f:61:1d:3a:e4:e7:ac:d8:
3d:1f:45:16:b2:aa:4e:b9:6e:81:76:98:c6:e9:e7:a5:f2:c5:
0a:20:21:a5:1d:97:40:95:ba:c6:ae:d3:71:c3:43:c4:8b:0b:
23:3a:08:83:ea:eb:0e:5c:0f:11:12:0a:47:b9:ab:95:db:05:
7b:84:e8:44:f9:e3:77:db:b3:9f:b5:1a:42:68:b9:c9:e6:1b:
ba:9d:3c:80:d7:77:03:da:13:dc:76:29:10:9a:0b:a1:a7:0a:
a5:95:67:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 09:23:46 2026 by rpki-client