
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/afe903d1-f078-3d7b-86cb-b6e93b074093.roa
File: afe903d1-f078-3d7b-86cb-b6e93b074093.roa (raw, json)
Hash identifier: 3wyYj0RUYrccvUsgs0ZdYkuX1IHmqArZpUShEmmc7JI=
Subject key identifier: 89:F6:E8:27:F3:AF:E1:03:08:41:0C:62:4D:37:35:1E:B0:8D:39:54
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CFDE9B10016869F00466F8200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/afe903d1-f078-3d7b-86cb-b6e93b074093.roa
Signing time: Thu 26 Feb 2026 14:00:40 +0000
ROA not before: Thu 26 Feb 2026 14:00:40 +0000
ROA not after: Wed 27 May 2026 13:00:40 +0000
asID: 33490
IP address blocks: 70.91.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:fd:e9:b1:00:16:86:9f:00:46:6f:82:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 26 14:00:40 2026 GMT
Not After : May 27 13:00:40 2026 GMT
Subject: CN=53efae3f-2b85-4439-b3e7-4b74fbad002c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7d:94:7b:9b:75:e8:f5:64:3e:5f:20:4c:28:
65:af:39:48:ac:4e:4b:c6:76:1a:59:fb:d5:62:af:
31:32:b3:eb:0b:e0:bc:b6:5a:9a:6b:46:67:66:38:
b9:73:bf:11:fe:6a:0e:de:d8:1b:2a:a8:c7:1d:3b:
70:3b:d1:d2:81:ea:26:9a:95:e7:bc:ea:b1:a6:28:
cb:d6:f7:33:d2:4e:de:05:55:76:05:8c:7e:46:9a:
2b:41:9b:47:38:76:11:81:63:d3:cd:1b:e8:f1:d3:
ed:8a:97:7b:ad:9f:b7:7c:31:49:a5:47:76:c6:be:
1a:b3:3f:82:2d:09:c6:a3:90:5e:6c:f7:e2:c8:8a:
36:62:dd:c0:d8:3f:25:cc:06:a0:9a:de:e5:94:7e:
c5:d6:b3:00:a9:2e:60:0a:43:04:bc:f9:6c:ed:4c:
4e:3c:7c:e7:4c:c4:ae:25:85:74:39:6d:49:a4:1d:
8a:e6:b6:21:a0:c8:66:dd:6a:84:d2:fe:86:31:a5:
0f:ba:3a:8c:bc:58:6d:61:2b:8f:ef:ec:f5:19:84:
d6:ad:74:fb:46:12:37:22:92:31:e6:24:b5:e3:36:
92:f9:a7:42:4d:57:2a:ca:3f:c4:fa:21:a7:4d:43:
7c:a7:a3:77:7f:a5:d4:39:aa:d3:36:6b:51:fe:19:
2c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:F6:E8:27:F3:AF:E1:03:08:41:0C:62:4D:37:35:1E:B0:8D:39:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/afe903d1-f078-3d7b-86cb-b6e93b074093.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
70.91.222.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:6a:ba:6e:f4:88:9c:b1:00:0c:44:ae:f9:c7:18:eb:79:e8:
f6:8d:e8:00:32:34:25:74:0c:32:65:6e:2c:21:cf:43:3f:6a:
da:d7:e5:24:25:3c:e1:07:55:7b:89:14:ef:5e:df:33:44:63:
bc:55:3b:ba:2c:b2:b9:02:98:58:a0:f0:89:be:dc:d5:cb:4c:
af:24:54:50:16:a2:55:5f:8f:78:bc:76:a6:9e:f0:c5:b8:67:
c3:94:fa:b1:c6:9a:fc:5f:3c:bf:7e:ff:93:24:aa:45:33:61:
e6:3d:c3:8e:86:5b:20:86:04:c2:ba:ed:82:08:71:25:81:f0:
7e:12:41:29:cb:89:8d:23:c8:06:cf:7d:b9:9e:fe:31:4f:08:
83:8e:bb:44:d6:62:e1:01:f8:e6:a3:1a:48:e0:ad:f0:07:d9:
f4:e7:6a:5b:a9:bc:2f:65:8e:a2:71:cf:38:07:84:a0:5e:5b:
a1:92:a9:9a:17:53:13:1d:f1:fd:96:3d:6b:d6:1a:81:ee:05:
d8:ee:2e:1b:ac:0e:04:9c:bc:c4:62:29:03:2c:99:f2:45:a5:
4f:c8:04:f7:e9:27:39:3f:1f:c3:05:26:be:6b:70:c0:c9:3f:
fb:04:dc:1c:09:ea:cc:8a:5d:d7:21:38:84:9d:c9:cf:71:f6:
68:50:be:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 19:17:22 2026 by rpki-client