
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/d8715c0f-d4b7-387d-9b13-8b219b245618.roa
File: d8715c0f-d4b7-387d-9b13-8b219b245618.roa (raw, json)
Hash identifier: 69SAREaykheALfrYnBnLECmW5LiA6RGWdmHlowtZM6Y=
Subject key identifier: AF:35:AA:12:7E:98:C8:F4:D6:D3:4E:B1:A7:14:53:39:20:64:37:EF
Certificate issuer: /CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf
Certificate serial: 010D0C9F4328584CF4221A4E5C345CF2B58A5080
Authority key identifier: D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/d8715c0f-d4b7-387d-9b13-8b219b245618.roa
Signing time: Mon 23 Feb 2026 02:00:31 +0000
ROA not before: Mon 23 Feb 2026 02:00:31 +0000
ROA not after: Sun 24 May 2026 01:00:31 +0000
asID: 35908
IP address blocks: 72.172.85.0/24 maxlen: 24
72.172.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:f4:22:1a:4e:5c:34:5c:f2:b5:8a:50:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf
Validity
Not Before: Feb 23 02:00:31 2026 GMT
Not After : May 24 01:00:31 2026 GMT
Subject: CN=adf2d2cd-aff7-4195-bad8-9920a5785f0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:88:00:38:91:2b:36:ff:3c:f8:98:ab:2c:10:
fb:00:37:e4:b1:96:28:df:f1:24:b3:e0:83:e1:10:
87:2a:e8:cf:40:d2:8e:cd:51:17:dd:e9:e7:34:1d:
83:6f:64:be:5d:12:50:20:a6:53:2c:55:8d:10:35:
d5:23:c4:c4:32:3f:f0:95:89:ae:a4:8d:d6:10:fc:
71:c7:66:af:78:87:d2:6a:fd:b6:41:93:35:89:36:
57:a6:73:66:cc:de:7f:72:f4:99:44:8a:ee:21:18:
5c:15:0c:56:3e:46:97:6a:f1:04:10:83:77:8b:19:
b8:a4:bf:30:20:6f:7d:41:6b:e0:65:92:44:9e:7c:
be:b6:6c:d4:98:50:e1:b5:ac:97:38:75:d7:40:60:
5f:50:c6:36:a0:65:a0:64:93:39:6a:ef:1d:31:81:
05:e3:45:d1:82:9c:2c:8e:4d:97:fb:21:94:aa:bd:
d7:89:30:9b:d6:4a:9a:a2:c6:1f:1f:b4:3d:50:71:
07:82:68:66:13:0d:46:8f:9c:8c:99:03:b1:23:4a:
49:2a:08:e0:2d:06:af:ee:f0:40:7a:e2:e7:1d:91:
12:41:4d:6a:40:4a:3b:7e:c3:86:67:98:2c:c6:64:
d8:42:33:8f:b3:a7:21:e2:10:5b:88:8a:70:ed:4e:
f2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:35:AA:12:7E:98:C8:F4:D6:D3:4E:B1:A7:14:53:39:20:64:37:EF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/d8715c0f-d4b7-387d-9b13-8b219b245618.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl
X509v3 Authority Key Identifier:
keyid:D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer
sbgp-ipAddrBlock: critical
IPv4:
72.172.85.0/24
72.172.88.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:74:33:a6:a9:b9:2c:6e:99:fd:cc:2f:ce:37:a8:b7:11:da:
89:5c:3c:2e:f5:74:fb:96:fd:8c:3a:7a:81:81:5a:19:66:83:
15:2c:df:41:3e:18:ac:55:11:92:65:82:51:7e:3c:ca:77:d6:
8d:64:d3:c9:18:ac:e7:99:57:c5:9c:ae:ff:bf:b4:b5:38:4d:
42:34:0a:69:ca:fb:5f:8c:f2:d0:56:ae:19:1f:6a:eb:0b:de:
7e:e0:75:73:0f:fd:40:e3:12:65:86:f1:6f:22:84:57:a9:59:
cc:24:16:8f:e6:1d:aa:2f:a2:05:e1:f8:f9:ef:9b:0c:2b:e3:
f0:ed:96:0f:b0:8f:3f:4f:80:f0:26:85:34:0b:a4:02:63:5d:
ed:a4:96:9c:bb:72:d0:09:af:db:86:4f:7c:97:df:ae:9f:26:
60:0e:06:a5:d6:b3:e3:8c:84:e0:9e:17:d3:a9:0f:84:cd:84:
ca:d0:5d:c4:d5:7a:0c:d4:68:02:95:34:9a:70:7c:8c:2f:69:
ea:df:c2:c7:53:d7:a8:d4:96:42:f0:f5:7c:c7:73:86:35:de:
a3:84:aa:29:e5:69:9b:c9:60:35:9d:70:cb:d6:c2:b6:0b:e8:
80:5c:f3:46:63:9c:d5:e1:64:a7:3e:91:51:86:d5:05:83:14:
63:4a:1d:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:00:25 2026 by rpki-client