
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/a14bef6f-3d0e-311d-9920-4d558906aa24.roa
File: a14bef6f-3d0e-311d-9920-4d558906aa24.roa (raw, json)
Hash identifier: GxX5zDaJAt85mXosYSuDeQbmb/zOcwkAbH7xP06R00s=
Subject key identifier: B0:F9:42:71:72:6F:E0:D8:45:B7:36:2E:9C:42:2A:9A:D4:51:2E:88
Certificate issuer: /CN=d001dd1f-946b-457b-98d8-41701665309e
Certificate serial: 010D0C9F4328584CF4222631B0D99065D11C4EC0
Authority key identifier: 3E:C3:2E:ED:AD:93:A1:53:A6:1C:A5:62:9A:F1:95:4A:F2:60:33:2E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/a14bef6f-3d0e-311d-9920-4d558906aa24.roa
Signing time: Mon 23 Feb 2026 02:00:31 +0000
ROA not before: Mon 23 Feb 2026 02:00:31 +0000
ROA not after: Sun 24 May 2026 01:00:31 +0000
asID: 23465
IP address blocks: 70.96.204.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:f4:22:26:31:b0:d9:90:65:d1:1c:4e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d001dd1f-946b-457b-98d8-41701665309e
Validity
Not Before: Feb 23 02:00:31 2026 GMT
Not After : May 24 01:00:31 2026 GMT
Subject: CN=fdab8ac4-7883-4133-9c1c-427c8b0e926f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:7f:9c:c4:b0:1a:d3:f8:44:0d:9e:f3:6a:9b:
8d:af:54:eb:e6:54:d7:59:1c:20:66:a7:d1:c2:e2:
68:09:16:14:c2:02:92:21:26:8a:7e:62:c5:95:0e:
96:ca:9a:50:fa:e5:9a:ac:61:e2:69:05:6c:96:45:
7b:e3:b4:17:82:0e:de:0a:b3:da:99:98:b2:91:6d:
6f:f6:94:65:f3:f5:07:cf:ce:ce:b8:16:d1:88:5d:
06:35:51:82:c0:62:b4:72:57:22:d5:54:fe:42:31:
f5:5f:59:0c:f0:c3:f1:ff:33:41:09:ee:86:be:24:
a2:73:94:13:d6:69:a2:9d:4b:8b:25:e8:11:08:49:
aa:f3:c0:f2:50:a0:13:76:cf:38:51:e3:c7:b5:ad:
e3:03:46:5e:2c:2d:d9:3d:04:55:04:0b:4f:d6:e6:
2d:c5:ae:70:95:1e:4f:5a:87:40:81:b3:25:cb:f9:
ce:df:ad:e7:24:ba:98:20:a1:47:8f:73:a2:8a:a7:
81:2a:3e:b2:fb:36:92:a4:2f:ae:93:02:76:0c:fa:
47:b6:d0:69:dd:14:31:52:85:74:b1:ee:99:2d:78:
e1:41:32:87:24:8c:90:71:c9:bb:96:84:e1:36:b2:
c9:3c:7e:87:62:16:4b:07:f4:6f:a4:72:b3:eb:c8:
8f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:F9:42:71:72:6F:E0:D8:45:B7:36:2E:9C:42:2A:9A:D4:51:2E:88
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/a14bef6f-3d0e-311d-9920-4d558906aa24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e/d001dd1f-946b-457b-98d8-41701665309e.crl
X509v3 Authority Key Identifier:
keyid:3E:C3:2E:ED:AD:93:A1:53:A6:1C:A5:62:9A:F1:95:4A:F2:60:33:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d001dd1f-946b-457b-98d8-41701665309e.cer
sbgp-ipAddrBlock: critical
IPv4:
70.96.204.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:bb:45:2a:e5:63:00:29:b6:d3:d3:61:8a:3c:de:c0:f3:41:
9e:ec:2b:7c:90:58:74:1d:76:ea:19:ac:92:fc:c3:c4:01:58:
35:1c:8e:58:ce:13:83:d8:c8:a1:c3:eb:e5:28:f0:e3:c3:0a:
1c:ae:37:9e:56:08:4c:5b:9c:c5:b0:e3:c6:ed:fe:38:cd:66:
49:e6:6e:0f:65:b8:f5:eb:23:68:6d:da:17:c2:fb:00:e6:60:
e4:c5:65:ea:44:24:20:3f:83:72:54:86:2a:06:fc:d7:0c:87:
27:3f:aa:94:2d:41:5f:46:0b:20:e0:a0:ff:75:72:23:58:8b:
46:5b:3e:4a:66:f9:22:7b:78:ab:55:5c:4a:e7:61:c0:11:dc:
1d:6c:1e:50:8b:13:86:8d:1c:bc:7a:72:93:79:07:30:e8:91:
49:d5:d7:1c:9c:7a:2d:84:34:76:64:da:35:dc:ff:71:4d:01:
e3:ec:14:19:81:55:09:9c:1b:4b:d6:7c:1b:cb:3c:1e:82:3e:
88:68:72:63:e3:90:e8:66:d9:e0:93:33:a0:23:7f:b2:4e:46:
4c:f5:91:f6:76:4d:89:63:60:73:7d:08:89:4a:ca:37:0a:16:
b7:c7:09:cf:81:97:38:02:a5:a9:a4:93:d7:ed:8d:11:58:0c:
73:7a:ec:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:10:23 2026 by rpki-client