
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d7b8624b-f005-3d1d-bbd3-a6364cdd0374.roa
File: d7b8624b-f005-3d1d-bbd3-a6364cdd0374.roa (raw, json)
Hash identifier: oSJx2Yt3bqAUlwVtrttQmoAEzHrYLvDQnbWSKeTgPiA=
Subject key identifier: B2:83:E4:C7:A4:9E:12:BE:CF:A1:58:37:3F:99:90:33:9A:23:47:48
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CFDE860DE323693E9A37371C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d7b8624b-f005-3d1d-bbd3-a6364cdd0374.roa
Signing time: Thu 26 Feb 2026 14:00:40 +0000
ROA not before: Thu 26 Feb 2026 14:00:40 +0000
ROA not after: Wed 27 May 2026 13:00:40 +0000
asID: 33667
IP address blocks: 72.55.8.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:fd:e8:60:de:32:36:93:e9:a3:73:71:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 26 14:00:40 2026 GMT
Not After : May 27 13:00:40 2026 GMT
Subject: CN=8af653b2-ae94-4c74-b8b2-b7f933780d87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:bc:32:20:da:d3:d9:16:53:48:93:1d:9e:e0:
94:0c:81:48:1d:f9:77:80:d9:2b:e2:c8:48:52:88:
3e:5b:c0:e7:a6:c1:f3:a0:9d:a5:ec:c3:dd:f8:20:
4d:f1:c9:38:18:c0:b9:45:85:8d:f7:b7:85:d8:3a:
4c:46:e3:c0:d4:59:19:94:d7:3d:e6:1a:c0:7a:d3:
c6:d5:9e:2c:69:f0:67:d6:df:33:c9:1d:a4:af:75:
0d:3a:b3:85:e5:1a:98:e2:e2:8b:a5:27:2f:16:cf:
b3:2e:73:c2:97:27:96:64:9c:c2:ac:04:16:07:84:
cf:cb:4f:39:d5:a1:f1:54:32:6d:b3:d4:a3:b1:8d:
d1:11:40:5e:3b:77:c0:d4:c2:6f:7c:7e:7d:d9:7a:
68:a0:88:98:ff:44:be:40:02:08:f8:e7:81:90:6b:
45:56:3c:d0:c6:6c:28:b1:d5:95:e0:7b:8e:8d:80:
ef:13:34:ff:9d:2f:87:aa:52:d2:49:8a:82:a9:3b:
c9:b9:dc:fc:f0:f2:62:01:c0:c5:59:f8:35:95:9e:
19:17:ec:b7:3d:58:de:a4:47:cc:e0:af:6b:45:e4:
a1:43:00:67:39:89:54:92:7b:a9:b9:cc:5f:8b:0f:
f1:e6:f5:4b:2a:e3:0e:1e:97:16:ec:28:d6:b2:63:
69:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:83:E4:C7:A4:9E:12:BE:CF:A1:58:37:3F:99:90:33:9A:23:47:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d7b8624b-f005-3d1d-bbd3-a6364cdd0374.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
72.55.8.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:73:e1:ec:3a:0b:86:e0:c1:dd:a2:3c:4a:b6:2d:e0:b6:1a:
c7:98:c0:4d:6c:b1:a4:97:26:a2:c3:68:bc:c6:88:f8:6c:58:
62:5a:5b:cd:3c:7d:c3:16:68:f1:62:c6:4d:89:cc:88:28:fc:
ce:21:8b:1f:53:86:52:07:83:ce:d5:ce:79:89:da:0c:fd:03:
42:17:05:e6:bc:ae:4d:91:d3:47:d2:71:34:49:d3:49:df:2e:
f7:5d:4d:38:57:ad:36:52:50:09:fc:03:ec:04:01:04:4b:81:
f9:6d:b9:a4:77:51:42:4a:38:84:fc:04:f8:a5:f0:6e:3f:e6:
79:b9:4d:4e:8d:8a:93:6f:20:16:94:5a:fa:6a:1f:d5:3c:26:
dd:0a:e7:47:f1:9f:0c:4e:10:65:95:d2:d0:95:60:90:70:a8:
c0:1c:db:19:a0:86:63:43:aa:ee:2b:30:63:14:2a:eb:65:6b:
84:0d:9c:a0:e4:2d:91:b4:82:83:92:f3:8a:ca:c5:0f:d7:a5:
cc:ed:cd:4d:38:5c:6e:28:77:5e:63:1d:f9:fb:b2:71:97:df:
29:af:70:b8:95:45:de:05:ec:9d:d6:12:93:a0:b2:d0:66:31:
ec:87:8a:52:bf:8a:71:3b:4e:0a:e2:93:2f:86:b3:0d:35:da:
96:3f:44:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:24:18 2026 by rpki-client