
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/3e297adb-169e-3352-bbb2-8260355bfd1a.roa
File: 3e297adb-169e-3352-bbb2-8260355bfd1a.roa (raw, json)
Hash identifier: QazoT/e66dZL3r6fMQ5lfZJ2WMwA+DRIsbkYfinfOtw=
Subject key identifier: A2:41:18:87:E4:46:EA:BF:31:04:B8:D1:E7:C6:DA:62:FD:9B:D0:C9
Certificate issuer: /CN=458adead-fc85-4377-ae8f-70e00c42b223
Certificate serial: 010D0C9F4328584D2D3F7A61030CDD9D909E0D00
Authority key identifier: 80:5C:2F:92:04:FE:79:17:F1:E1:B2:9A:E1:A2:A5:42:46:8B:45:0A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/3e297adb-169e-3352-bbb2-8260355bfd1a.roa
Signing time: Sun 15 Mar 2026 13:00:41 +0000
ROA not before: Sun 15 Mar 2026 13:00:41 +0000
ROA not after: Sat 13 Jun 2026 13:00:41 +0000
asID: 16509
IP address blocks: 157.248.218.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/458adead-fc85-4377-ae8f-70e00c42b223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/458adead-fc85-4377-ae8f-70e00c42b223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 20 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:2d:3f:7a:61:03:0c:dd:9d:90:9e:0d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458adead-fc85-4377-ae8f-70e00c42b223
Validity
Not Before: Mar 15 13:00:41 2026 GMT
Not After : Jun 13 13:00:41 2026 GMT
Subject: CN=fe096fcf-c8e9-4e1e-bb9c-92bb4ca026f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:13:51:71:c8:66:e3:43:4b:2e:47:aa:89:06:
55:c8:ff:ae:1d:d3:5a:e1:b7:5c:0e:73:34:59:ea:
92:1e:fc:fa:19:23:7b:eb:44:e3:ed:d3:a8:c4:a1:
73:52:04:11:0e:16:1f:f4:fb:5f:dd:82:32:10:b2:
61:3a:ea:75:19:41:8d:08:69:67:a8:73:86:cb:80:
46:93:ba:18:85:ad:0f:33:f2:b6:50:d0:d6:70:cd:
14:34:00:c9:44:b0:b1:c1:ba:7f:5c:c1:8f:67:c0:
a2:3c:72:b4:4b:60:f0:70:5d:32:cb:8a:52:4a:05:
f5:ac:02:52:03:ce:aa:a2:84:5f:ae:1d:62:85:47:
b3:21:7f:c1:6c:a4:28:01:aa:22:35:74:1f:c0:47:
7e:1e:7e:2e:51:33:ce:3c:ae:6d:cf:8e:c7:94:fd:
b9:2c:9a:f2:e4:54:5f:ee:2b:a8:42:6d:b6:b7:a3:
bd:29:20:4a:fe:63:e6:3b:e0:8d:cd:9b:5b:14:d5:
6b:c5:42:5b:53:d5:54:3a:80:65:e5:76:19:77:b9:
22:fb:cf:fa:b1:ee:0a:d7:63:ff:27:30:a0:cc:d3:
fb:76:9f:54:74:fb:e4:4e:75:ba:35:a6:28:00:e9:
59:8a:b7:28:a8:02:69:ee:f1:b9:c4:c0:05:40:5b:
85:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:41:18:87:E4:46:EA:BF:31:04:B8:D1:E7:C6:DA:62:FD:9B:D0:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/3e297adb-169e-3352-bbb2-8260355bfd1a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223/458adead-fc85-4377-ae8f-70e00c42b223.crl
X509v3 Authority Key Identifier:
keyid:80:5C:2F:92:04:FE:79:17:F1:E1:B2:9A:E1:A2:A5:42:46:8B:45:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/458adead-fc85-4377-ae8f-70e00c42b223.cer
sbgp-ipAddrBlock: critical
IPv4:
157.248.218.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:4d:06:03:5f:6f:91:6c:31:20:d4:2f:fd:e6:b6:af:15:a0:
54:74:67:90:7e:7b:d2:b9:09:eb:30:96:ee:26:24:81:49:34:
73:31:aa:13:6c:72:4c:be:ea:47:8e:3f:84:7f:11:3a:09:e4:
d6:8d:81:e3:77:a1:c1:30:51:cc:d9:65:dc:cf:8a:a5:2b:ef:
93:5d:4a:6f:34:6b:3c:be:a5:5c:77:3a:06:79:7b:fd:a4:2a:
27:0b:28:ee:f4:e0:07:73:f0:14:58:b7:07:24:06:4a:4e:19:
b2:1a:78:95:fa:23:15:ef:13:91:0f:11:1a:92:ae:d9:82:b8:
46:ac:e7:90:df:81:a4:e0:61:4c:98:f7:0a:e2:e9:1b:6d:f1:
7e:54:ce:13:6b:64:d6:ac:22:29:e6:e0:26:e0:07:19:a8:27:
66:97:92:e5:f4:e0:b6:7b:01:a2:5e:c6:5f:54:9e:2e:e4:0f:
ed:2a:bc:b0:39:02:72:db:9c:a9:59:a3:29:ca:36:6f:f1:8d:
99:03:e9:6e:f0:37:2b:66:ad:68:43:1e:a1:16:dd:a2:55:2f:
d9:68:22:d6:79:59:e1:20:eb:0e:e9:fc:9a:b1:d0:26:da:80:
78:7e:fa:2d:19:38:3e:c5:a1:47:52:bc:60:cc:45:14:09:37:
d7:b6:84:c6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0tP3phAwzdnZCeDQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDU4YWRlYWQtZmM4NS00Mzc3LWFlOGYtNzBlMDBjNDJi
MjIzMB4XDTI2MDMxNTEzMDA0MVoXDTI2MDYxMzEzMDA0MVowLzEtMCsGA1UEAxMk
ZmUwOTZmY2YtYzhlOS00ZTFlLWJiOWMtOTJiYjRjYTAyNmYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxNRcchm40NLLkeqiQZVyP+uHdNa4bdcDnM0
WeqSHvz6GSN760Tj7dOoxKFzUgQRDhYf9Ptf3YIyELJhOup1GUGNCGlnqHOGy4BG
k7oYha0PM/K2UNDWcM0UNADJRLCxwbp/XMGPZ8CiPHK0S2DwcF0yy4pSSgX1rAJS
A86qooRfrh1ihUezIX/BbKQoAaoiNXQfwEd+Hn4uUTPOPK5tz47HlP25LJry5FRf
7iuoQm22t6O9KSBK/mPmO+CNzZtbFNVrxUJbU9VUOoBl5XYZd7ki+8/6se4K12P/
JzCgzNP7dp9UdPvkTnW6NaYoAOlZircoqAJp7vG5xMAFQFuFKQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKJBGIfkRuq/MQS40efG2mL9m9DJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80NThh
ZGVhZC1mYzg1LTQzNzctYWU4Zi03MGUwMGM0MmIyMjMvM2UyOTdhZGItMTY5ZS0z
MzUyLWJiYjItODI2MDM1NWJmZDFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNDU4YWRlYWQtZmM4NS00Mzc3LWFl
OGYtNzBlMDBjNDJiMjIzLzQ1OGFkZWFkLWZjODUtNDM3Ny1hZThmLTcwZTAwYzQy
YjIyMy5jcmwwHwYDVR0jBBgwFoAUgFwvkgT+eRfx4bKa4aKlQkaLRQowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80NThhZGVhZC1mYzg1LTQzNzctYWU4Zi03MGUw
MGM0MmIyMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnfjaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH9NBgNfb5FsMSDUL/3mtq8VoFR0Z5B+e9K5Ceswlu4mJIFJNHMxqhNs
cky+6keOP4R/EToJ5NaNgeN3ocEwUczZZdzPiqUr75NdSm80azy+pVx3OgZ5e/2k
KicLKO704Adz8BRYtwckBkpOGbIaeJX6IxXvE5EPERqSrtmCuEas55DfgaTgYUyY
9wri6Rtt8X5UzhNrZNasIinm4CbgBxmoJ2aXkuX04LZ7AaJexl9Uni7kD+0qvLA5
AnLbnKlZoynKNm/xjZkD6W7wNytmrWhDHqEW3aJVL9loItZ5WeEg6w7p/Jqx0Cba
gHh++i0ZOD7FoUdSvGDMRRQJN9e2hMY=
-----END CERTIFICATE-----
Generated at Thu Mar 19 12:33:59 2026 by rpki-client