
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/28d5ed5a-717b-35dc-b627-203d741bc9dc.roa
File: 28d5ed5a-717b-35dc-b627-203d741bc9dc.roa (raw, json)
Hash identifier: +u4A8jT+pZmVgpnA8g0oQLPpLiMhRRfcuWnrLg3/BC8=
Subject key identifier: 3F:30:79:82:2A:E7:85:A0:C0:6C:59:2F:51:EA:72:97:ED:95:5D:FA
Certificate issuer: /CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955
Certificate serial: 010D0C9F4328584CD407698E05AB959A6A716000
Authority key identifier: 73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/28d5ed5a-717b-35dc-b627-203d741bc9dc.roa
Signing time: Wed 11 Feb 2026 14:00:41 +0000
ROA not before: Wed 11 Feb 2026 14:00:41 +0000
ROA not after: Tue 12 May 2026 13:00:41 +0000
asID: 5662
IP address blocks: 157.166.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 22 Feb 2026 07:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:d4:07:69:8e:05:ab:95:9a:6a:71:60:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74335fa0-6c3f-4878-9f3f-95c5ce0fb955
Validity
Not Before: Feb 11 14:00:41 2026 GMT
Not After : May 12 13:00:41 2026 GMT
Subject: CN=370fbf33-2ed6-453a-978b-7141a5ebd48b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8f:68:c2:83:8f:8d:ad:72:45:36:ab:c6:1d:
01:75:40:f4:76:67:55:9c:43:4a:c1:fc:9c:b5:a2:
78:bc:31:5c:24:47:25:b5:cd:38:72:c2:06:0d:6f:
46:7c:2e:af:ad:54:b4:1e:39:bb:16:61:ee:d2:73:
a0:f8:a3:91:b0:59:dc:28:be:c8:03:a9:94:63:0c:
2c:68:43:87:2f:85:62:93:62:b6:9d:67:16:89:ee:
d3:e9:a3:a0:7c:bf:05:14:f5:ae:a6:1a:71:66:5d:
e1:56:28:dd:74:25:ee:e7:83:bc:dd:7d:81:dc:74:
aa:17:0e:5e:e9:37:7a:91:a5:ea:13:b0:fa:b1:91:
a5:27:cb:4d:2b:47:69:6e:9e:a4:f4:d8:bc:3a:f2:
86:94:da:06:28:e8:5b:09:f3:24:be:92:7c:f3:b8:
4d:d5:6a:da:21:ba:b6:33:0d:35:4a:1c:db:ad:b9:
bc:32:4a:f1:dd:7c:cb:dd:7a:44:a0:80:47:78:d6:
6d:be:2b:a3:1e:9a:e3:8f:3b:98:8c:87:ea:92:97:
cb:62:b3:e1:5c:21:13:64:4d:36:ba:82:5a:3c:ac:
75:27:bc:9a:27:3f:ac:ce:b6:e0:f4:75:b5:21:48:
b8:5f:c4:56:d9:9f:2d:8e:81:82:91:e5:1e:e2:e7:
bd:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:30:79:82:2A:E7:85:A0:C0:6C:59:2F:51:EA:72:97:ED:95:5D:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/28d5ed5a-717b-35dc-b627-203d741bc9dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.crl
X509v3 Authority Key Identifier:
keyid:73:C7:23:67:8A:1E:51:1F:DC:64:E6:F4:88:18:B6:08:D1:1E:E5:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74335fa0-6c3f-4878-9f3f-95c5ce0fb955.cer
sbgp-ipAddrBlock: critical
IPv4:
157.166.142.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:19:1e:05:78:81:f7:8d:d2:95:4f:68:1f:7f:fc:db:5f:12:
7a:64:fb:8a:e2:dc:c7:24:bd:21:72:15:7b:4c:ec:78:80:cc:
58:95:86:9d:54:04:fb:90:b3:11:9f:7a:7a:05:df:a9:06:9d:
ef:2c:c3:50:0b:86:48:73:d0:cb:6b:2f:77:df:5a:9c:36:c6:
01:25:41:e6:51:ea:a1:d0:b8:f3:c6:f1:d0:1f:be:fd:e1:e2:
57:97:d5:aa:18:a7:d2:45:93:99:94:c7:fb:9a:7e:51:83:af:
bc:e7:90:a1:cd:2f:d6:3f:15:70:e8:f7:97:95:41:3e:a2:52:
02:dc:98:e3:8f:17:44:5c:25:05:5c:30:66:5b:ee:52:45:db:
c1:f9:87:52:c2:bb:01:a0:d5:a2:39:10:81:f6:53:d4:c8:d8:
6c:97:5a:e1:bd:55:33:16:ca:bb:ba:1a:4a:38:2d:db:6d:66:
06:90:e7:95:d7:78:67:1f:bc:9e:9d:9b:75:95:d0:ad:1d:87:
9a:84:fa:b9:51:b0:22:9d:d9:84:52:d8:af:09:b3:5e:ee:bb:
23:36:12:8d:6e:db:b3:ce:c3:f4:bb:bb:b4:ca:f4:a5:aa:e3:
6c:4e:28:98:50:e8:a1:04:cb:55:50:09:3a:6d:40:b4:b2:47:
28:7c:58:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 07:27:52 2026 by rpki-client