
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5/2e72d5be-f9f2-3339-b33b-4c1ba2f358de.roa
File: 2e72d5be-f9f2-3339-b33b-4c1ba2f358de.roa (raw, json)
Hash identifier: Hw+5zdRVHM5Nl1ALYhu570we/9eZPPakPOEcDX3USG0=
Subject key identifier: C4:3E:B6:90:E1:7B:CE:35:ED:5B:AC:81:8C:22:5C:84:1D:99:C2:25
Certificate issuer: /CN=3e511aed-c666-436d-b4a4-947790e6c9e5
Certificate serial: 010D0C9F4328584CED2792DCB0A345E8B3991F00
Authority key identifier: 2B:09:92:FE:D9:83:29:F1:0A:85:00:0B:19:34:F0:DD:87:A9:17:60
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5/2e72d5be-f9f2-3339-b33b-4c1ba2f358de.roa
Signing time: Fri 20 Feb 2026 14:00:41 +0000
ROA not before: Fri 20 Feb 2026 14:00:41 +0000
ROA not after: Thu 21 May 2026 13:00:41 +0000
asID: 16509
IP address blocks: 216.120.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5/3e511aed-c666-436d-b4a4-947790e6c9e5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5/3e511aed-c666-436d-b4a4-947790e6c9e5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 22 Feb 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ed:27:92:dc:b0:a3:45:e8:b3:99:1f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e511aed-c666-436d-b4a4-947790e6c9e5
Validity
Not Before: Feb 20 14:00:41 2026 GMT
Not After : May 21 13:00:41 2026 GMT
Subject: CN=0f4c31e7-023c-4bad-894d-447652738f57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d1:f7:e3:a6:21:4b:9d:87:22:bf:90:c7:08:
57:a3:0c:89:ce:5b:9e:72:b7:04:27:57:17:fd:ed:
c5:9e:64:4a:fb:9b:00:3f:a5:4f:ae:cc:7c:12:13:
29:51:c1:a2:3b:8c:c3:d0:fb:ba:38:f5:5e:5f:24:
f2:a9:f9:81:b9:aa:8f:c5:f3:29:a5:e6:d2:7e:09:
64:f3:2b:b1:af:2f:a1:33:b1:33:92:69:f1:2f:6d:
f9:bf:e4:52:02:6a:ec:50:27:6e:0c:90:6c:d0:47:
be:cf:5c:dc:e1:70:df:e1:fe:b6:01:ea:d7:ad:97:
a0:48:e4:ce:09:2f:d4:74:46:34:49:df:ce:68:44:
16:9f:2b:0b:48:b0:6b:8f:70:20:53:f9:8e:b4:2e:
07:0f:4b:bb:12:1a:30:32:ee:c3:84:09:5e:b7:5b:
03:56:bb:98:0f:ca:25:ab:19:99:f4:1a:ab:64:80:
7c:96:fa:31:8d:c8:24:59:1f:48:00:76:88:80:7b:
fc:f1:f9:53:32:0c:d6:10:27:69:cf:43:81:8f:93:
09:83:89:d3:2f:54:76:34:11:9f:f9:4a:a0:f7:0f:
c1:96:58:91:83:93:bd:44:96:8d:c3:89:07:d0:9c:
71:6d:23:f1:70:d6:2d:94:7f:47:b9:68:bb:ec:72:
fb:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:3E:B6:90:E1:7B:CE:35:ED:5B:AC:81:8C:22:5C:84:1D:99:C2:25
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5/2e72d5be-f9f2-3339-b33b-4c1ba2f358de.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5/3e511aed-c666-436d-b4a4-947790e6c9e5.crl
X509v3 Authority Key Identifier:
keyid:2B:09:92:FE:D9:83:29:F1:0A:85:00:0B:19:34:F0:DD:87:A9:17:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3e511aed-c666-436d-b4a4-947790e6c9e5.cer
sbgp-ipAddrBlock: critical
IPv4:
216.120.165.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:06:c1:28:a7:8a:2e:07:90:5a:8e:ec:e7:ff:00:84:1a:ac:
9a:70:f9:7b:f2:58:2b:5c:5d:46:1a:ba:98:d8:6c:d8:f0:6c:
48:19:f5:f8:53:da:58:11:66:d5:c9:55:e9:8b:9d:a6:60:2e:
ac:45:5f:cb:a8:be:b9:8b:8a:5a:8c:e2:82:75:66:36:1d:f7:
3f:d2:8e:ea:d1:86:c7:1c:5e:b8:47:d0:b8:51:7c:01:4c:8c:
c3:1f:13:b7:c9:bc:9e:40:56:7c:71:59:67:d1:12:45:fc:50:
8d:e1:d2:5b:14:11:15:21:57:fc:3e:d3:1c:c6:99:7d:69:e6:
59:ed:e7:81:57:2e:ef:a1:4a:3a:07:f6:5d:e6:2c:4f:da:e8:
ed:4f:62:af:2f:8f:59:3a:51:cf:b4:f2:c4:83:3f:3e:8d:02:
ea:be:15:06:9b:32:bf:da:cc:6a:ef:06:d5:d0:c4:46:f6:5c:
a0:cb:b5:53:f6:3f:10:90:56:cd:74:0f:1a:57:23:66:12:1d:
4c:61:92:cb:12:7b:dd:82:ee:91:55:2c:80:7f:f7:67:8e:42:
c1:8e:f2:b1:21:ee:1a:98:83:a2:87:14:07:86:37:0e:13:56:
ae:7d:10:37:07:e5:ba:ac:7a:f0:98:1d:e1:05:0d:c1:49:cb:
7a:dc:0f:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 07:28:40 2026 by rpki-client