
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/132bdfca-908a-373e-94f1-acedba809c54.roa
File: 132bdfca-908a-373e-94f1-acedba809c54.roa (raw, json)
Hash identifier: ovpSvjOBrMTszbV8O+zHJiUUPPJ+I8w2FzkhxBPi20Y=
Subject key identifier: CC:60:1F:F4:BC:EE:EB:03:B8:34:29:2D:11:78:53:15:E4:26:10:DA
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CFDE86883BE17FC5AF2F2B900
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/132bdfca-908a-373e-94f1-acedba809c54.roa
Signing time: Thu 26 Feb 2026 14:00:40 +0000
ROA not before: Thu 26 Feb 2026 14:00:40 +0000
ROA not after: Wed 27 May 2026 13:00:40 +0000
asID: 33668
IP address blocks: 70.88.166.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:fd:e8:68:83:be:17:fc:5a:f2:f2:b9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 26 14:00:40 2026 GMT
Not After : May 27 13:00:40 2026 GMT
Subject: CN=771a6740-035c-4e65-85dc-a7e77aea839e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3b:fa:3d:e4:61:6a:9f:c6:6e:a8:bf:0f:65:
49:82:72:11:f2:63:5e:b0:a1:90:a7:ca:a6:e6:c0:
44:ba:cb:36:41:ed:3d:a1:fb:14:9f:81:65:22:4c:
bd:cd:b3:c2:9d:7d:12:96:ef:dc:f8:b2:bf:ea:61:
ce:f4:3f:7d:39:70:b9:b1:d8:fb:ec:16:f6:0b:9e:
8d:60:a2:fa:5d:f6:f6:3e:70:5f:ad:d5:31:3c:c4:
be:26:9b:c8:48:b0:d2:6d:4b:6e:00:a6:6c:b3:b1:
4d:f2:c6:64:a8:4c:79:3d:f5:d8:98:0f:4d:27:86:
55:1b:d7:f6:c8:43:b8:64:f0:7d:7b:d1:f1:46:9c:
0d:c4:d0:fd:57:77:bb:77:e0:7c:c1:84:2f:70:65:
72:28:d3:db:39:8e:f1:a9:40:54:53:9a:21:c3:7c:
9d:9a:24:c8:07:a0:71:a4:e1:b1:be:8b:f2:bc:03:
7e:56:2f:e1:0b:a4:f2:a8:ac:63:9f:4e:ca:d2:af:
38:f8:d6:f8:4d:1d:8b:68:f3:3f:42:c1:26:31:18:
31:01:87:89:d0:df:fd:e0:d4:57:21:f5:5c:24:97:
37:f1:d7:27:55:a8:96:3b:f3:11:7c:64:c8:13:19:
38:c2:77:50:0a:ac:34:c8:c3:dd:86:14:33:9a:c6:
fa:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:60:1F:F4:BC:EE:EB:03:B8:34:29:2D:11:78:53:15:E4:26:10:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/132bdfca-908a-373e-94f1-acedba809c54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
70.88.166.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:3f:40:3b:bb:b7:aa:4d:4b:de:98:73:c1:15:d2:62:39:3f:
87:3b:ef:30:ae:c1:05:51:26:13:59:56:f5:7a:d7:ca:8b:04:
b7:fa:29:b0:ea:9b:97:4b:8d:fb:ca:d5:6b:87:f5:57:c8:06:
60:89:a4:a4:17:50:3c:58:b3:c4:a3:7d:a6:84:4d:78:a6:62:
82:b4:40:38:1a:27:cb:0f:01:b8:b7:dd:ae:44:5c:c0:37:0e:
94:37:e2:b6:74:fa:73:7d:dc:d1:95:02:59:f9:ca:af:32:12:
46:32:f2:c3:d2:d8:ba:fb:12:72:01:82:b1:e3:73:0a:92:e9:
56:71:80:55:6e:fb:c8:98:97:29:72:57:6d:28:43:5a:fa:02:
ed:bb:d2:3d:3c:e8:13:f4:50:64:83:91:74:e5:d3:6e:45:35:
7e:4e:25:df:63:ae:de:78:5f:62:4d:f2:75:79:03:7b:1d:05:
cc:67:97:21:87:23:ae:4c:ed:ae:86:75:7a:50:9d:35:5c:5e:
18:76:42:b9:1e:ce:40:38:b9:d7:c4:20:44:55:d6:53:bf:95:
1a:29:78:1e:25:39:0e:32:5d:21:f2:74:b6:f0:ce:fe:0b:b2:
d6:64:37:c1:68:7c:40:39:5f:15:bd:9c:ab:c1:83:c9:24:be:
fa:29:67:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:43:33 2026 by rpki-client