
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/0e58b5f4-d235-31a9-8461-9d4dd4e3a926.roa
File: 0e58b5f4-d235-31a9-8461-9d4dd4e3a926.roa (raw, json)
Hash identifier: vkmvmLE51iCmvy4avWDnprJkFlAQjDMIrAoNt6K5JnA=
Subject key identifier: 61:2F:07:88:D3:A2:80:D2:3F:43:3A:AB:DC:20:C3:BE:E1:9A:EC:96
Certificate issuer: /CN=24c31307-e10d-4537-aa7a-6bbf3692c5d6
Certificate serial: 010D0C9F4328584CCFD730E1AFE29EF5731875C0
Authority key identifier: 53:48:D6:8D:23:DE:C9:1F:62:B7:F0:97:56:05:53:9B:42:52:3B:9C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/0e58b5f4-d235-31a9-8461-9d4dd4e3a926.roa
Signing time: Tue 10 Feb 2026 02:00:31 +0000
ROA not before: Tue 10 Feb 2026 02:00:31 +0000
ROA not after: Mon 11 May 2026 01:00:31 +0000
asID: 21568
IP address blocks: 170.149.240.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/24c31307-e10d-4537-aa7a-6bbf3692c5d6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/24c31307-e10d-4537-aa7a-6bbf3692c5d6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Feb 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:cf:d7:30:e1:af:e2:9e:f5:73:18:75:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24c31307-e10d-4537-aa7a-6bbf3692c5d6
Validity
Not Before: Feb 10 02:00:31 2026 GMT
Not After : May 11 01:00:31 2026 GMT
Subject: CN=8ffadb2c-d00e-4a5b-ba26-bc6a431eb251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:54:ad:9c:c8:e7:a3:a4:52:bc:87:0e:ea:e9:
60:7d:3b:63:ff:c8:7d:7d:cd:e1:c1:08:cd:f7:e0:
8b:ac:76:e3:10:1a:41:95:78:8f:29:84:b1:47:10:
85:52:a9:5e:4a:7e:ce:3d:5e:ef:ba:37:52:90:de:
44:86:80:b4:52:3d:7e:67:5d:33:8c:f6:f4:33:b7:
9f:74:b2:44:35:ca:30:73:4e:21:0f:37:a0:57:f2:
7a:e0:ef:e0:79:04:d5:ae:7e:8a:c2:82:a1:dc:3e:
9a:17:13:8f:9d:aa:da:77:97:38:f6:a7:5b:5c:7b:
f2:c6:66:e7:ac:b4:ef:82:b8:b6:0f:24:19:08:50:
bd:8d:06:f4:7c:85:00:0b:04:98:b5:fa:21:51:58:
01:3a:da:1a:42:09:cf:38:7f:93:d2:99:ec:90:d6:
0c:1d:1b:c8:4f:90:47:10:f2:e8:55:21:c1:3b:17:
b5:64:7d:cd:90:da:c7:96:59:6a:52:73:b5:6e:52:
da:02:e4:76:26:a7:bf:95:56:4d:5e:1f:cd:76:f5:
2b:62:2e:28:e7:06:46:be:1e:8f:c1:aa:21:6a:e8:
1d:75:9e:9a:46:24:50:d6:bb:b9:50:7d:85:e7:7e:
fd:eb:32:ff:5a:fe:89:28:68:da:75:38:73:ba:e0:
a0:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:2F:07:88:D3:A2:80:D2:3F:43:3A:AB:DC:20:C3:BE:E1:9A:EC:96
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/0e58b5f4-d235-31a9-8461-9d4dd4e3a926.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/24c31307-e10d-4537-aa7a-6bbf3692c5d6.crl
X509v3 Authority Key Identifier:
keyid:53:48:D6:8D:23:DE:C9:1F:62:B7:F0:97:56:05:53:9B:42:52:3B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6.cer
sbgp-ipAddrBlock: critical
IPv4:
170.149.240.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:af:74:53:08:32:e4:ee:3a:92:6b:5c:97:f3:d7:06:87:18:
7c:dd:c5:07:b4:9a:79:c9:29:d7:58:bf:81:b1:f2:41:99:aa:
8a:1d:01:51:87:82:2e:57:13:e5:83:0e:58:bb:c5:c4:9e:d3:
e1:27:f8:ea:9a:3e:85:b4:e6:44:f7:2e:d4:64:52:30:a6:b2:
72:14:eb:d5:0e:5b:a7:08:7b:90:9c:09:7d:f3:0a:35:32:78:
96:6e:80:7f:8c:0d:e6:9c:ad:04:2f:23:93:9a:19:0d:05:8a:
97:f3:01:69:4b:b3:9e:6f:d5:34:49:a8:5c:57:47:82:23:d9:
ea:39:7a:32:82:db:a6:07:a6:f7:69:8f:c5:c7:10:95:b3:18:
d4:d6:eb:3d:f8:d1:7b:35:62:34:f6:07:d7:84:17:e3:b1:98:
b0:aa:be:3e:86:c8:d4:d8:76:38:0e:a8:12:57:9e:52:87:f0:
eb:e9:9a:80:dd:9f:62:05:1b:e9:c4:25:e1:96:7c:8a:82:d7:
c5:2a:5b:0f:23:bc:0f:17:42:2f:1a:d0:a1:50:6e:0c:3e:1d:
a0:af:a3:a2:2c:5b:d5:50:29:92:45:2e:18:6f:86:7d:73:18:
fd:3a:ed:37:eb:ea:a6:c4:a3:89:92:e7:de:30:6e:de:e7:2e:
85:21:dc:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 22:52:15 2026 by rpki-client