
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/434e23e8-27f1-3dc8-9a8a-f527e7384e0e.roa
File: 434e23e8-27f1-3dc8-9a8a-f527e7384e0e.roa (raw, json)
Hash identifier: +g57/8eOwMhPPIp6Qx79fUoVXyHTYX8IYwvFnL54rC4=
Subject key identifier: 12:3B:6D:C5:32:1F:22:F5:3B:3A:F6:29:05:12:92:5F:77:0A:B8:06
Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial: 010D0C9F4328584CF5B298D2D4C85FB2EED02F80
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/434e23e8-27f1-3dc8-9a8a-f527e7384e0e.roa
Signing time: Mon 23 Feb 2026 15:27:32 +0000
ROA not before: Mon 23 Feb 2026 15:27:32 +0000
ROA not after: Sun 24 May 2026 14:27:32 +0000
asID: 5650
IP address blocks: 107.158.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 25 Feb 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:f5:b2:98:d2:d4:c8:5f:b2:ee:d0:2f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Validity
Not Before: Feb 23 15:27:32 2026 GMT
Not After : May 24 14:27:32 2026 GMT
Subject: CN=5a4479ec-2045-4d9c-8ad5-3144003ba99c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9d:aa:a8:2e:a3:dc:26:eb:b0:ae:4c:31:23:
63:c3:8d:e7:bc:a1:1a:1d:a6:1a:0a:ee:e1:3a:37:
4d:f0:c3:e0:d6:fd:e2:ba:e7:c8:a6:9a:3d:0b:76:
74:f5:bd:d3:0d:bb:81:29:c8:63:52:dc:d1:b4:d2:
20:1c:95:49:00:ca:fa:13:03:ce:49:6a:45:e5:91:
78:c8:53:a7:28:f2:99:6b:56:d1:f4:47:af:76:c8:
5f:9b:e2:68:8d:58:7f:ab:5a:79:19:5b:18:6a:f0:
c9:9a:09:9d:b8:7f:1e:5c:06:e3:3b:19:94:ba:b4:
18:37:fe:f7:4b:5c:79:e5:4b:78:af:0c:71:2d:f3:
b2:b3:8b:3e:56:82:6d:62:43:de:f4:d6:f0:f5:9d:
ac:ba:c0:f5:2a:c5:5c:66:59:2c:d2:30:32:7e:9f:
3d:0a:19:42:1d:e9:3c:0f:72:04:32:c3:d8:e9:0a:
42:8b:f3:b1:e2:fa:46:a3:86:b4:42:77:7c:30:43:
6f:a4:39:ef:49:15:df:1d:24:0a:5a:81:ea:61:ac:
9a:f8:86:2c:16:bc:e0:41:49:27:75:b6:02:d1:83:
26:e3:16:f2:d7:67:15:0d:b0:dd:d1:29:ee:29:44:
23:ca:b7:e4:33:bc:e6:49:7a:f2:fa:25:32:14:83:
6f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:3B:6D:C5:32:1F:22:F5:3B:3A:F6:29:05:12:92:5F:77:0A:B8:06
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/434e23e8-27f1-3dc8-9a8a-f527e7384e0e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
X509v3 Authority Key Identifier:
keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
sbgp-ipAddrBlock: critical
IPv4:
107.158.152.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:5f:26:fb:a3:ac:76:41:88:30:9c:8b:ff:ab:23:86:b9:c3:
89:ce:b3:f5:90:99:56:32:d1:2c:be:ea:df:64:05:ff:89:c8:
3b:71:3e:0e:d0:f9:76:f6:4c:98:21:fe:f4:00:8a:71:8c:bb:
03:13:d6:53:0d:39:17:1f:50:20:6c:85:a0:88:02:cd:44:38:
b4:53:9e:17:6f:08:3d:23:75:4c:80:5b:30:31:31:ea:e7:d5:
94:56:ec:22:7c:ec:7b:b1:28:2d:a8:d6:23:e3:5c:d8:26:5e:
f7:7a:5b:c2:69:1a:84:70:ad:0f:55:51:a6:64:83:12:5e:de:
ca:59:57:eb:3a:e2:88:1a:5f:bc:93:c9:1a:67:3d:68:55:2f:
d4:a2:6c:e5:99:0d:f7:c3:3f:1c:74:e7:8b:ab:13:7a:dd:76:
68:53:e7:26:b0:30:58:4c:d3:4a:20:3a:52:81:8c:93:9a:fe:
0c:45:8a:68:7d:9d:bf:6f:43:a4:ed:b4:36:3d:c3:2c:70:40:
82:7f:18:5a:23:33:f5:92:1b:4e:c8:b1:46:36:cd:f1:70:3d:
77:ae:60:3b:36:77:a8:b8:a1:68:d7:db:e4:c1:31:45:09:8d:
9e:00:ae:db:3c:28:d3:b8:80:f9:27:bc:9c:c2:6a:27:61:3c:
7e:06:16:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 18:39:48 2026 by rpki-client