
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5bf45fa2-8fb4-39be-abb5-533303397e5c.roa
File: 5bf45fa2-8fb4-39be-abb5-533303397e5c.roa (raw, json)
Hash identifier: WiDGCIfJ1eVH1VtuLFp0V/nXqgc/Wpfv7UbvbT8oXuY=
Subject key identifier: 66:A9:44:6B:3E:08:85:1F:9C:2D:01:E5:D1:54:EC:C4:B2:0C:4D:EF
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CFDE9B872168083BAA8AECA60
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5bf45fa2-8fb4-39be-abb5-533303397e5c.roa
Signing time: Thu 26 Feb 2026 14:00:40 +0000
ROA not before: Thu 26 Feb 2026 14:00:40 +0000
ROA not after: Wed 27 May 2026 13:00:40 +0000
asID: 33650
IP address blocks: 96.119.36.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:fd:e9:b8:72:16:80:83:ba:a8:ae:ca:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 26 14:00:40 2026 GMT
Not After : May 27 13:00:40 2026 GMT
Subject: CN=3fd9f7ae-11ab-4a93-9255-3db464459917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:0f:e9:48:bf:ff:9c:20:a3:4f:c8:2c:3a:06:
af:3e:e8:0f:76:83:e0:42:76:17:2c:83:f3:29:ad:
c7:5d:a8:cf:9c:c0:c9:92:80:ec:ef:50:79:7b:d0:
4b:cf:0f:e7:62:02:4e:8a:74:91:e5:b3:63:95:3c:
68:3e:df:17:2b:dd:6a:ac:af:9e:be:54:df:98:fe:
5c:9a:8e:8a:43:64:30:ec:ab:85:03:78:96:06:dd:
f5:4a:45:28:e4:5c:70:eb:7b:87:8e:ca:5b:87:3c:
43:e2:1a:53:ba:34:1a:6c:64:96:c2:2e:36:31:c7:
1d:52:5a:22:da:0c:2c:cf:c5:6f:1c:16:da:f2:7c:
cb:61:93:34:78:f1:97:da:1a:30:a3:11:21:3f:a6:
f2:2d:2d:42:16:10:56:6a:25:1c:40:63:47:99:27:
8f:6f:51:32:2e:2b:c8:4e:59:ee:8b:b8:e4:af:a5:
5b:49:b0:e6:82:ad:ea:17:31:9a:e0:a9:9f:31:b2:
9b:25:0e:b6:86:d4:7b:d4:f7:9a:c8:3a:55:3e:8b:
5a:69:88:87:28:42:87:15:63:d3:00:08:23:17:05:
53:fc:a9:9a:f4:7b:e0:68:6c:2d:66:c2:70:53:f9:
2c:b9:bc:68:c8:bb:3a:d6:a1:a3:37:a0:af:e0:de:
09:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:A9:44:6B:3E:08:85:1F:9C:2D:01:E5:D1:54:EC:C4:B2:0C:4D:EF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5bf45fa2-8fb4-39be-abb5-533303397e5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
96.119.36.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:f5:b3:76:ed:b2:ef:91:8e:c8:98:46:f7:fa:a4:84:27:1a:
1e:52:c2:92:3c:5b:69:cc:46:2a:68:97:ee:d1:db:5b:47:84:
32:3b:0c:44:80:ca:2a:ce:ec:18:89:9f:84:57:6a:63:d1:2d:
71:81:22:c3:10:cc:57:d7:53:c3:f9:0d:eb:b9:be:67:ba:fd:
9c:2a:7e:dd:de:9a:8e:88:3c:fc:fb:ac:09:8f:c2:a1:25:50:
f2:0f:78:c8:18:22:6b:18:f6:23:ff:99:ba:38:99:2b:c9:bf:
9c:e9:68:3f:83:9a:c5:29:ab:9a:9b:87:11:75:e5:6d:0c:9e:
5c:f8:43:87:04:2e:4b:c8:68:a9:cc:9f:46:4b:89:02:fc:bf:
31:30:17:9b:c1:ba:3a:d1:45:5f:4e:f7:e5:7a:42:4a:8a:84:
c1:bf:94:5b:da:0d:ef:2f:49:73:1e:55:30:db:8f:60:82:8c:
f0:2b:2b:7c:ae:c6:91:1d:41:6b:c8:b1:12:9b:21:66:ff:b9:
db:cb:c3:8e:1f:08:61:89:a5:e2:dc:4d:11:15:e6:4c:a0:03:
aa:3d:e0:34:97:01:f1:88:c7:dc:f4:4a:21:f5:a4:5b:c6:ae:
7f:4f:54:82:f0:ba:af:02:55:8b:3a:0b:68:ff:2d:b1:2c:94:
9a:97:f6:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:59:46 2026 by rpki-client