
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/141d92d4-996c-39d3-8fbe-2d67d6f2a189.roa
File: 141d92d4-996c-39d3-8fbe-2d67d6f2a189.roa (raw, json)
Hash identifier: JiJIEKXI37DtQza0Zkw/7m5OJmOV190XtWSnlFpDi/g=
Subject key identifier: 10:87:6D:23:AF:A7:8B:C9:E1:E4:EF:C8:F1:06:F0:12:A4:F4:AD:73
Certificate issuer: /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial: 010D0C9F4328584CCD0C8EB2FC804A7C3D0E5F80
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/141d92d4-996c-39d3-8fbe-2d67d6f2a189.roa
Signing time: Mon 09 Feb 2026 02:00:31 +0000
ROA not before: Mon 09 Feb 2026 02:00:31 +0000
ROA not after: Sun 10 May 2026 01:00:31 +0000
asID: 21859
IP address blocks: 128.1.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 24 Feb 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:cd:0c:8e:b2:fc:80:4a:7c:3d:0e:5f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Validity
Not Before: Feb 9 02:00:31 2026 GMT
Not After : May 10 01:00:31 2026 GMT
Subject: CN=b449b4fb-6d4e-41ff-9000-bd2df90d9a6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:d1:88:5e:4f:8e:fd:24:43:fe:74:51:ea:73:
5e:11:c1:20:f5:d7:7a:98:dd:40:97:79:e0:c8:1f:
11:7e:f3:07:e0:60:39:b5:18:fd:9f:10:b7:cf:e3:
63:a1:08:a8:a5:1a:1d:ac:4a:e6:09:f7:7b:00:e3:
e7:21:f8:84:f7:57:29:26:0c:26:38:42:b1:6b:c8:
b7:f3:b4:2b:e1:93:c3:5e:f8:68:92:bf:d0:d6:ce:
f7:ff:15:eb:72:7e:d3:14:64:10:d3:7e:4a:00:cc:
e4:c2:6d:aa:17:7f:02:a9:fb:90:98:de:b2:b0:7a:
2c:11:55:d7:1e:6c:91:eb:79:4b:ca:78:7c:ba:d7:
fa:49:f2:1b:8e:65:95:f1:02:92:9d:9f:32:a4:33:
9e:1c:1c:31:f6:e1:ec:9f:aa:47:08:48:c6:9d:cd:
b2:1c:33:5d:88:b9:e6:e6:6a:ae:9e:e3:68:28:51:
a0:fb:e2:cd:05:ce:93:a4:8b:1f:12:70:49:85:7d:
21:68:be:ef:ce:b1:11:d3:82:85:7a:28:b6:8a:08:
4c:8c:a5:76:df:66:26:e8:54:c8:b8:fd:eb:34:90:
1a:5a:e3:15:41:cf:0c:f8:ec:c4:1b:0b:76:24:17:
d9:27:26:ac:f9:6a:ca:05:57:18:5c:91:57:9a:7f:
bb:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:87:6D:23:AF:A7:8B:C9:E1:E4:EF:C8:F1:06:F0:12:A4:F4:AD:73
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/141d92d4-996c-39d3-8fbe-2d67d6f2a189.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
X509v3 Authority Key Identifier:
keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
sbgp-ipAddrBlock: critical
IPv4:
128.1.147.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:c8:dd:d9:76:92:fe:ee:05:3c:ba:69:83:af:89:48:1d:96:
af:74:11:96:13:27:01:f5:bd:5a:eb:ee:15:f6:aa:e7:91:59:
b7:68:cb:b8:85:b1:fc:9a:99:88:e2:90:93:f8:27:de:91:ab:
88:cc:87:03:f3:f1:23:5e:5d:25:b8:92:94:99:ea:24:4e:15:
23:61:20:30:39:d5:58:68:0b:f5:4f:b9:31:d8:10:b7:25:58:
41:bf:51:bc:2d:34:ac:02:ea:38:32:87:a8:4f:94:6e:ea:bc:
b6:3d:99:43:83:ba:00:b8:e4:e2:24:7e:c8:3d:d8:55:fb:e7:
40:36:b9:0b:0b:4c:75:28:d1:8f:96:c5:e9:92:a7:6a:13:43:
e3:57:79:39:00:56:40:75:af:d9:6b:55:3b:04:f1:d0:e1:ea:
c5:31:7d:a6:68:07:76:5e:bb:44:0c:51:b8:b3:10:0a:43:e9:
19:fc:de:ae:d3:c6:1a:aa:58:1a:dc:9d:b3:f1:ae:71:96:be:
4e:73:dd:31:f5:59:a3:2c:37:f2:20:07:4a:90:59:8f:86:bf:
38:99:de:25:e0:ca:cc:c6:42:1e:32:8e:92:b9:ab:a9:28:d6:
f5:50:c4:47:74:cf:ec:c6:ca:f9:9e:3b:52:86:73:bf:bf:48:
fd:9a:df:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 22 22:02:57 2026 by rpki-client