
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/79b1fe7a-eca9-422f-9043-5a93ca5145c8/e8c83e5e-3160-3da3-9508-5decf5e3c0b7.roa
File: e8c83e5e-3160-3da3-9508-5decf5e3c0b7.roa (raw, json)
Hash identifier: 7kI1mfXvLYujfzTrQvchYqLDJ7dKs2whfCMFnBB05ms=
Subject key identifier: D3:B0:CA:96:4D:C3:4A:17:25:AB:01:C6:45:CC:30:FA:1C:C0:3D:3F
Certificate issuer: /CN=79b1fe7a-eca9-422f-9043-5a93ca5145c8
Certificate serial: 010D0C9F4328584D0EA7BE5C0727CA65E208A100
Authority key identifier: 0C:61:A1:93:6A:44:3C:E2:11:31:FA:40:42:68:F7:A6:E7:34:84:14
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/79b1fe7a-eca9-422f-9043-5a93ca5145c8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/79b1fe7a-eca9-422f-9043-5a93ca5145c8/e8c83e5e-3160-3da3-9508-5decf5e3c0b7.roa
Signing time: Wed 04 Mar 2026 14:00:41 +0000
ROA not before: Wed 04 Mar 2026 14:00:41 +0000
ROA not after: Tue 02 Jun 2026 13:00:41 +0000
asID: 14618
IP address blocks: 149.48.128.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/79b1fe7a-eca9-422f-9043-5a93ca5145c8/79b1fe7a-eca9-422f-9043-5a93ca5145c8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/79b1fe7a-eca9-422f-9043-5a93ca5145c8/79b1fe7a-eca9-422f-9043-5a93ca5145c8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/79b1fe7a-eca9-422f-9043-5a93ca5145c8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 14 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:0e:a7:be:5c:07:27:ca:65:e2:08:a1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79b1fe7a-eca9-422f-9043-5a93ca5145c8
Validity
Not Before: Mar 4 14:00:41 2026 GMT
Not After : Jun 2 13:00:41 2026 GMT
Subject: CN=03f27830-56dd-4144-86cf-dde41df0f72d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:83:63:2a:75:b6:3a:f0:84:1e:77:96:c1:7c:
43:bb:ee:3f:c3:af:7a:f2:10:9d:68:ad:7f:73:3e:
1b:80:96:ab:6b:1b:f1:f2:15:24:ae:86:df:04:5c:
47:85:8f:34:f4:e0:a3:21:d3:ca:f0:38:12:f9:79:
97:48:a9:ad:f3:dd:9c:ac:3b:ac:83:76:23:36:63:
ed:ad:20:21:f8:50:91:55:3e:5a:bb:6d:90:f6:ee:
f4:61:b2:e7:eb:d2:15:16:d6:44:8f:38:f8:9f:20:
50:24:24:2d:c9:4b:2d:91:8a:7b:84:fd:75:d0:ad:
f7:6f:bb:21:9e:0d:ea:ea:39:8e:c2:8f:b0:0d:ae:
03:2b:d0:45:f3:b8:7a:c2:6e:92:13:8a:23:c5:66:
d1:e1:6b:bc:62:3d:d2:73:30:20:76:01:e4:d6:69:
2c:54:f7:25:84:48:87:80:4f:6f:c1:9f:ca:c0:a5:
2f:9e:00:ca:67:b9:31:6f:39:92:94:c4:c1:d4:eb:
0a:e5:64:94:f8:ed:3b:9a:6a:bd:19:58:ef:31:b6:
f4:c6:bf:7b:d5:b9:9c:41:08:2a:bb:55:f7:42:12:
4c:61:04:9c:8e:49:17:27:29:82:4e:96:6a:3c:9d:
a6:a4:33:b5:2c:24:25:03:13:74:3d:b4:46:62:7a:
21:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:B0:CA:96:4D:C3:4A:17:25:AB:01:C6:45:CC:30:FA:1C:C0:3D:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/79b1fe7a-eca9-422f-9043-5a93ca5145c8/e8c83e5e-3160-3da3-9508-5decf5e3c0b7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/79b1fe7a-eca9-422f-9043-5a93ca5145c8/79b1fe7a-eca9-422f-9043-5a93ca5145c8.crl
X509v3 Authority Key Identifier:
keyid:0C:61:A1:93:6A:44:3C:E2:11:31:FA:40:42:68:F7:A6:E7:34:84:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/79b1fe7a-eca9-422f-9043-5a93ca5145c8.cer
sbgp-ipAddrBlock: critical
IPv4:
149.48.128.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:47:c8:a9:9c:d2:2d:ec:04:dc:9a:3d:d0:2c:e6:4e:1e:94:
b3:65:ce:2d:d8:34:0f:1e:9c:b6:a5:d3:51:7b:ef:20:e6:f1:
97:d5:20:cd:95:35:2f:57:e1:2f:40:1b:bc:57:cb:70:ed:1d:
15:85:12:ce:ac:80:90:3f:82:e4:8f:51:0d:e9:80:21:13:9a:
46:c5:7b:4b:33:04:be:17:65:28:bc:3e:27:d5:7f:e3:d4:f1:
b4:4e:df:06:16:5d:0a:c2:4a:3b:ce:1d:25:4a:9e:ac:8e:4b:
a0:9a:26:74:52:f0:58:5c:6c:9f:8b:91:cb:d2:fd:d6:d7:7e:
5f:0d:5b:79:60:ed:ca:58:1d:f0:0f:b9:02:a9:87:78:7c:04:
ec:99:1a:ab:4a:81:32:f0:45:fe:4b:ab:ef:07:96:f7:6c:14:
09:db:73:41:00:70:98:68:0b:ba:65:b1:b7:b3:42:cc:00:d8:
ce:46:1e:02:38:d2:b3:bf:84:1a:fd:8b:f2:c4:f8:44:fd:6b:
d2:b9:f2:0a:dd:64:9e:9f:59:9e:98:ba:08:18:09:33:4c:7b:
04:7a:ce:78:a5:11:2c:2d:b9:b2:19:15:c1:33:12:f7:75:58:
bb:2c:68:3b:a5:e9:36:28:e3:47:1d:88:c7:6f:0d:e2:21:ec:
0e:4a:1e:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 10:53:17 2026 by rpki-client