
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/d2a9c5c6-cc0e-3a2d-8039-f197749b2bae.roa
File: d2a9c5c6-cc0e-3a2d-8039-f197749b2bae.roa (raw, json)
Hash identifier: 1t5sHqWeCERZ5sSXAMfK0QjfVGenR8ideC/zL+rHYWg=
Subject key identifier: 47:0F:A7:86:AE:05:A8:85:A1:F3:7B:E0:F9:2D:42:3D:BE:20:13:0E
Certificate issuer: /CN=4f0f46db-c9e6-4d47-9134-20963eb1dbbf
Certificate serial: 010D0C9F4328584CB2871AAFF30975DA139B6F00
Authority key identifier: 72:F3:A8:2E:01:18:63:F2:2C:BF:DB:58:E3:40:F7:3B:86:7A:97:A9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/d2a9c5c6-cc0e-3a2d-8039-f197749b2bae.roa
Signing time: Fri 30 Jan 2026 14:00:40 +0000
ROA not before: Fri 30 Jan 2026 14:00:40 +0000
ROA not after: Thu 30 Apr 2026 13:00:40 +0000
asID: 11426
IP address blocks: 64.84.116.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:b2:87:1a:af:f3:09:75:da:13:9b:6f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f0f46db-c9e6-4d47-9134-20963eb1dbbf
Validity
Not Before: Jan 30 14:00:40 2026 GMT
Not After : Apr 30 13:00:40 2026 GMT
Subject: CN=0f070d39-2444-4659-bc84-0d254f19c01a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:48:18:bb:8a:2c:b5:68:99:15:7e:71:e4:46:
a5:44:d5:56:61:95:f2:ae:ad:fe:65:3e:8d:23:09:
73:18:9e:74:52:b3:01:1e:05:93:87:9e:cc:f9:d9:
ef:ee:42:4b:04:10:1e:fe:7f:99:5a:34:5d:13:35:
84:2b:92:b7:9b:0f:c8:67:1a:df:d0:ff:6f:38:af:
07:d6:a0:ac:72:a4:f9:56:f7:ce:28:3a:66:97:43:
6b:0f:da:89:e0:27:32:c6:c6:4e:79:a0:d0:ab:63:
2d:b4:93:04:99:14:aa:14:1c:83:05:11:49:74:85:
c5:c2:e8:06:09:d9:43:95:35:85:48:24:5f:80:19:
09:8f:ed:a7:cb:17:30:b4:87:c5:7c:bb:fc:cd:8a:
d8:a3:ec:47:a8:ae:f3:31:a6:87:52:5b:b2:f1:14:
08:9a:e5:4d:34:10:c4:c2:75:86:27:cc:47:ad:6b:
73:05:a6:61:e7:79:f9:09:cc:0e:0d:2f:5c:b6:39:
d5:47:e4:e9:aa:20:e5:02:da:59:1c:bb:63:b7:e5:
60:26:9b:0d:4b:ff:e1:91:29:01:f6:01:8f:45:ca:
61:d8:1f:59:d5:d3:6f:3a:a1:d5:c7:49:01:14:68:
97:7f:08:33:15:75:12:ab:1e:60:ad:bd:7f:51:71:
0c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:0F:A7:86:AE:05:A8:85:A1:F3:7B:E0:F9:2D:42:3D:BE:20:13:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/d2a9c5c6-cc0e-3a2d-8039-f197749b2bae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.crl
X509v3 Authority Key Identifier:
keyid:72:F3:A8:2E:01:18:63:F2:2C:BF:DB:58:E3:40:F7:3B:86:7A:97:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.cer
sbgp-ipAddrBlock: critical
IPv4:
64.84.116.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:b3:c4:e5:d3:7d:9e:ae:3d:4f:8f:8e:c9:0a:d0:62:9c:27:
c3:c7:b3:4d:19:a8:d1:b6:66:15:dc:4b:0d:6a:c0:6b:6a:32:
32:fd:e5:85:22:9e:58:01:17:10:5c:cd:5c:4b:b8:33:72:f6:
00:ca:fa:92:f0:eb:57:c8:f1:25:d3:3f:37:be:ea:dc:f6:eb:
51:47:5b:f3:0b:3a:71:74:fe:c1:3a:aa:ed:dd:31:a3:ee:07:
4a:b8:f5:1d:52:1d:20:17:a1:d8:07:92:91:af:85:c5:45:a0:
66:08:56:70:4f:5c:39:b1:3c:c7:34:48:d2:22:94:bd:2a:51:
13:95:24:0e:56:7f:10:df:b6:52:4e:d3:4b:cf:a5:bb:ce:e5:
13:b7:e4:42:4f:1c:f7:64:a7:ba:1b:78:a2:5e:9a:ba:00:5f:
a6:c8:cf:a8:17:d3:56:ab:3c:7b:b9:e7:c1:22:91:4e:55:4c:
1e:6a:a0:d3:4d:40:36:30:24:14:85:ed:05:7e:c4:42:7a:27:
a9:ee:8a:a9:7d:a9:28:14:b4:d6:b4:db:97:1e:b3:c2:04:75:
4b:4e:c7:b5:5c:26:c7:8a:a2:c1:93:c2:b0:57:3b:8e:b4:f0:
35:01:60:6c:40:f4:04:16:c0:3b:7b:f6:62:95:06:8f:4b:48:
23:18:66:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:24:52 2026 by rpki-client