
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/9a988aa2-af46-3b1b-ab85-f5b5c11170ab.roa
File: 9a988aa2-af46-3b1b-ab85-f5b5c11170ab.roa (raw, json)
Hash identifier: ZzPDYzb0oB7zad2ZLHin44UnQiM5b2WF20thqsI9x98=
Subject key identifier: 85:D6:3E:7E:4D:08:20:73:D4:36:86:17:C0:B4:3F:AB:95:C5:3B:87
Certificate issuer: /CN=eb36756e-e433-4732-a707-a9fa13965624
Certificate serial: 010D0C9F4328584C9D96E970FD4FB9087F42C9E8
Authority key identifier: 88:0D:F8:F5:8F:1C:0A:4E:6A:14:98:4D:4F:8F:E7:8F:C4:0F:D1:32
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/9a988aa2-af46-3b1b-ab85-f5b5c11170ab.roa
Signing time: Fri 23 Jan 2026 02:00:30 +0000
ROA not before: Fri 23 Jan 2026 02:00:30 +0000
ROA not after: Thu 23 Apr 2026 01:00:30 +0000
asID: 11101
IP address blocks: 167.171.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/eb36756e-e433-4732-a707-a9fa13965624.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/eb36756e-e433-4732-a707-a9fa13965624.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 19 Feb 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:9d:96:e9:70:fd:4f:b9:08:7f:42:c9:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb36756e-e433-4732-a707-a9fa13965624
Validity
Not Before: Jan 23 02:00:30 2026 GMT
Not After : Apr 23 01:00:30 2026 GMT
Subject: CN=0cc80ad4-2eb2-4b13-88b5-928e94497be3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:80:2d:c1:21:2d:e0:47:61:d5:58:a6:a0:31:
c1:d1:0a:ae:a4:09:f5:ac:7a:d7:f9:dc:8a:5d:33:
31:1d:a7:30:ea:9f:4e:52:97:58:59:56:c7:eb:84:
b0:98:b5:44:12:1a:b9:fa:1a:b6:81:c2:79:d8:fb:
4b:11:0c:41:42:80:31:80:a1:18:1d:77:2d:34:24:
3e:7a:ad:14:43:60:e2:0b:08:12:b7:75:b4:23:3e:
f9:f4:c5:69:fb:38:8c:1f:aa:cd:c6:d7:b5:ab:02:
f9:45:15:e0:12:84:ed:63:3d:a7:15:c8:c2:a0:b4:
97:1a:38:fe:28:f5:51:77:38:0d:35:9b:aa:88:21:
fe:15:79:c6:15:bc:03:01:5d:4c:f9:02:7a:cb:b1:
4d:31:25:ec:cd:ae:ac:c5:5c:4f:e8:60:cf:e6:e7:
87:1f:ab:ff:99:75:34:57:e6:08:52:bb:ad:11:33:
f9:fe:07:fc:13:56:e3:5d:1f:91:97:a3:c7:00:6c:
61:64:b9:80:70:f1:82:44:fc:ac:9c:30:32:e6:1d:
68:3f:dd:df:3d:46:13:cb:9f:34:d1:6e:f5:ab:96:
a2:89:12:56:94:bd:8e:c9:22:b7:cd:4b:6d:63:11:
f6:79:75:d1:aa:cb:10:ef:ea:fd:8c:0c:3c:15:d7:
74:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:D6:3E:7E:4D:08:20:73:D4:36:86:17:C0:B4:3F:AB:95:C5:3B:87
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/9a988aa2-af46-3b1b-ab85-f5b5c11170ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624/eb36756e-e433-4732-a707-a9fa13965624.crl
X509v3 Authority Key Identifier:
keyid:88:0D:F8:F5:8F:1C:0A:4E:6A:14:98:4D:4F:8F:E7:8F:C4:0F:D1:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/eb36756e-e433-4732-a707-a9fa13965624.cer
sbgp-ipAddrBlock: critical
IPv4:
167.171.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:ac:f9:6c:40:78:af:65:2c:47:79:ae:ec:28:ea:c7:87:80:
eb:dc:27:68:e8:b0:10:00:48:b7:97:3f:da:1d:4c:21:49:b9:
a5:e6:d4:cf:94:c9:29:54:46:49:9e:44:c3:af:31:39:ca:8d:
3c:9f:5a:2b:44:36:69:89:11:9e:86:93:4a:22:ec:f2:d5:ae:
df:b0:4e:b3:64:8b:d8:38:a1:5d:54:98:24:f2:24:52:92:de:
62:f3:0d:63:94:f6:92:ec:b5:3a:e4:43:e4:9a:63:da:b2:25:
e3:1f:b7:44:ba:d2:53:f2:83:50:ec:c5:ff:41:a4:45:bc:bd:
dd:d2:f8:d0:b1:3a:63:56:9e:86:61:50:21:25:d6:c9:ce:61:
63:f8:ce:c4:21:eb:27:92:02:36:fb:f2:9e:98:d0:78:f7:d4:
af:0b:88:84:e4:8a:38:20:80:36:24:e8:fe:80:79:80:1f:71:
ed:4b:71:e7:65:47:c0:db:d6:df:00:c9:ad:1a:7e:51:4d:14:
19:72:28:46:47:5a:0d:a5:fa:65:34:e0:5c:4b:1f:00:c3:6d:
f4:e4:1e:e4:bb:35:a6:d3:2b:87:40:56:fe:ef:61:9e:ae:cd:
27:b9:36:0a:11:f4:f7:9e:a8:82:9c:9a:e7:43:94:fe:b6:5e:
7a:b4:ce:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 18 04:11:10 2026 by rpki-client