
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/839dad59-be78-3944-a9b6-1a9b73dd6403.roa
File: 839dad59-be78-3944-a9b6-1a9b73dd6403.roa (raw, json)
Hash identifier: xeaSJQY+dJqVKHgzqH+1M/1XKs+r6GjjKeAY+8Ps3Og=
Subject key identifier: E6:15:E2:75:63:5F:69:66:66:E7:60:B0:98:D9:23:3E:0E:DA:58:63
Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial: 010D0C9F4328584D0A7790719432F818FE044040
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/839dad59-be78-3944-a9b6-1a9b73dd6403.roa
Signing time: Tue 03 Mar 2026 02:00:32 +0000
ROA not before: Tue 03 Mar 2026 02:00:32 +0000
ROA not after: Mon 01 Jun 2026 01:00:32 +0000
asID: 15169
IP address blocks: 136.126.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:0a:77:90:71:94:32:f8:18:fe:04:40:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
Validity
Not Before: Mar 3 02:00:32 2026 GMT
Not After : Jun 1 01:00:32 2026 GMT
Subject: CN=8df184d3-d5c2-4edb-85a8-c7eeb33b4c6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2d:c2:cb:99:27:c3:27:ed:b4:9c:0d:23:75:
0c:e5:55:39:fe:4d:bf:9c:c1:39:21:9a:c0:c6:89:
8f:b6:b4:4b:9f:a4:4c:6a:1b:f6:cf:c2:4a:d9:1a:
c1:97:10:58:c4:88:3e:7c:a4:06:0f:26:8f:d7:f7:
1f:bb:a4:a1:65:18:62:bd:d7:86:a4:57:be:66:ec:
5a:f9:4a:70:9f:2a:95:f6:d7:68:7d:c2:e6:85:61:
d5:90:31:73:28:a7:af:17:d9:43:96:88:89:46:fd:
36:3a:0a:7a:46:da:b0:56:44:24:ea:bc:4e:d1:6f:
c0:f6:ab:7e:00:8e:c3:09:1b:b0:a1:a1:ac:60:ec:
c8:64:21:9d:7a:c9:55:db:20:00:a3:92:55:4e:6a:
96:f0:79:f2:8f:66:53:c9:33:d5:2f:48:b7:1b:e0:
20:52:ee:34:e3:86:40:67:f1:04:df:6a:60:f2:f3:
98:95:ef:a3:df:b0:a0:6e:21:a3:dc:0c:f7:ce:1c:
71:10:a0:da:f9:3b:9b:a5:58:16:2c:4e:25:45:e4:
46:11:71:a4:11:1c:db:85:e3:9a:af:60:5d:6f:6d:
1b:01:97:24:6a:c9:d0:98:de:57:ab:7d:e2:b4:fc:
1f:50:fd:25:ac:ab:a4:be:65:c3:32:0b:94:5f:83:
2f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:15:E2:75:63:5F:69:66:66:E7:60:B0:98:D9:23:3E:0E:DA:58:63
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/839dad59-be78-3944-a9b6-1a9b73dd6403.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
X509v3 Authority Key Identifier:
keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
sbgp-ipAddrBlock: critical
IPv4:
136.126.226.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:8f:bd:87:5d:a3:e8:09:d4:06:30:76:e7:f2:eb:1c:94:ca:
55:ae:4c:87:fb:97:a7:b0:be:14:32:0c:f4:65:fa:f1:fa:df:
e9:e2:be:66:24:37:80:7d:fd:a8:51:4e:80:c3:ed:cb:e4:c2:
05:ad:cc:73:72:cd:a9:aa:b8:0f:81:d7:f4:80:5f:eb:0e:15:
c0:ed:cc:8e:63:53:ea:50:c6:c7:aa:c6:69:d8:e3:4a:c3:4b:
36:6d:3f:2f:da:d6:dc:84:96:9c:3a:68:ae:4b:e3:62:5d:32:
f9:e9:03:e1:09:40:1a:2d:9f:8b:c4:a1:0c:1e:2e:d1:90:93:
3f:74:17:18:ec:5f:85:54:3f:bf:10:c2:f0:41:df:c3:cf:e3:
ff:11:b0:e5:46:6b:79:63:88:81:8d:91:d8:28:8e:0c:10:67:
fc:94:3a:9e:64:cd:86:14:52:b1:26:46:d8:27:db:7c:78:5d:
05:f4:dd:d1:ef:64:5e:c8:eb:9f:8e:1f:0a:c6:bc:6c:a8:96:
59:7b:54:66:0b:d2:a5:02:81:46:36:88:46:03:ac:e1:6e:a7:
f7:67:8b:04:9c:52:b5:54:b3:44:50:e1:52:4e:d4:37:61:dd:
56:c9:c7:5d:e1:48:51:12:4b:37:81:d4:a0:c9:42:a9:39:af:
97:71:e3:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 10:54:06 2026 by rpki-client