
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/f2ea7a29-a99e-398c-827c-bca5ebb15628.roa
File: f2ea7a29-a99e-398c-827c-bca5ebb15628.roa (raw, json)
Hash identifier: 3O93Ck86d7Z7CotEdwyahY79feOqyRbtKvu/jgX57oU=
Subject key identifier: 22:DF:24:5C:C0:2E:98:B0:44:E3:E1:E2:69:E5:C7:9D:11:82:0F:DF
Certificate issuer: /CN=112c6636-0b34-4e47-95cc-29a6b53a3388
Certificate serial: 010D0C9F4328584D24DFA0C867379B6240261A80
Authority key identifier: E5:26:64:A3:77:43:CC:BD:49:D5:1E:16:43:82:15:8F:D7:87:BA:EC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/f2ea7a29-a99e-398c-827c-bca5ebb15628.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 3257
IP address blocks: 161.195.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/112c6636-0b34-4e47-95cc-29a6b53a3388.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/112c6636-0b34-4e47-95cc-29a6b53a3388.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 24 Mar 2026 09:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:df:a0:c8:67:37:9b:62:40:26:1a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=112c6636-0b34-4e47-95cc-29a6b53a3388
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=e3d4d4f8-5236-4b85-adcf-358d0fc9c5d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:78:13:e6:00:05:cb:93:20:90:47:e7:12:f8:
52:90:7c:f3:ec:33:58:32:53:6a:bd:fe:e6:24:7f:
64:aa:79:37:70:d8:99:ae:99:48:9b:10:1e:0c:d1:
42:16:18:ba:e4:38:47:ac:51:a1:9a:e7:85:65:ef:
66:d4:65:2f:cd:8e:c3:72:ca:a0:44:28:8c:f2:3b:
40:42:8c:64:32:18:84:2f:73:f3:6b:a4:0c:da:fb:
f4:bf:c3:21:62:7c:f3:15:6e:a1:ae:9f:69:2b:1a:
f3:4b:ab:a1:78:e1:cd:a1:46:9d:fe:13:7a:38:81:
fc:8d:6c:9c:99:01:6d:2f:2a:91:53:c7:4c:cc:5d:
16:ac:f9:e2:cf:ce:62:a1:78:70:e2:79:3e:5e:c7:
b0:24:d3:21:a9:5a:5b:f1:03:df:5b:81:a5:61:8d:
20:8b:6b:5c:d8:9c:ed:7f:e7:10:fa:82:bb:3f:1f:
14:7a:e0:c9:14:de:33:a6:69:e2:f6:92:1e:9d:f1:
8e:e0:93:19:39:89:99:29:1d:7d:26:8b:a6:89:04:
de:54:d4:69:45:14:b3:a5:36:22:28:4c:fe:f4:9c:
4f:78:6a:0c:e6:d1:17:de:b3:6f:52:2f:b3:1e:ee:
d6:56:4c:4f:a1:e6:a0:23:78:1d:d0:b8:a8:56:d1:
ed:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:DF:24:5C:C0:2E:98:B0:44:E3:E1:E2:69:E5:C7:9D:11:82:0F:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/f2ea7a29-a99e-398c-827c-bca5ebb15628.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/112c6636-0b34-4e47-95cc-29a6b53a3388.crl
X509v3 Authority Key Identifier:
keyid:E5:26:64:A3:77:43:CC:BD:49:D5:1E:16:43:82:15:8F:D7:87:BA:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388.cer
sbgp-ipAddrBlock: critical
IPv4:
161.195.157.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:92:ea:84:17:77:de:13:79:63:79:97:f6:b7:3b:06:ff:f1:
78:c1:65:10:5e:64:94:b8:f6:6c:82:0a:fd:81:3c:28:98:e5:
29:c4:f1:18:12:82:b0:ef:68:2e:bc:0b:30:d8:ff:ea:ae:f7:
91:0b:0b:4b:eb:91:6c:67:98:47:0f:ff:c5:b9:bb:9c:ea:3e:
ed:10:ff:07:b6:cc:1d:0b:d8:f0:04:90:29:5a:39:be:f4:a4:
bc:92:67:f7:39:5b:9b:80:4c:c5:bd:e6:2d:01:a9:1e:64:7d:
4f:49:24:c7:d4:d5:d0:ee:c3:bb:68:bf:d2:43:20:9c:cf:a3:
b9:fc:56:96:7f:b3:4c:d1:2e:86:c3:9f:8b:ed:5d:08:56:91:
70:7a:32:9d:5e:d4:44:a9:f7:5c:26:f6:ad:e0:75:a1:1f:d1:
11:3c:ac:1d:13:c8:1c:c0:7d:56:8f:e0:8f:42:73:eb:3f:50:
1d:db:96:a1:7f:fd:14:7d:f9:32:d8:c4:49:75:24:f8:c2:e8:
3e:5b:25:5e:38:ea:cb:36:f9:ba:42:6d:f8:3c:31:ff:8a:76:
5f:f1:65:c4:c1:6f:cb:57:0f:37:e9:58:c0:6b:dc:ab:1c:a9:
9e:37:2a:6c:6f:fc:47:f0:e8:71:06:e5:8c:97:d5:98:ab:33:
58:cb:0b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 23 11:07:55 2026 by rpki-client