
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39b2626e-a40d-46fc-b3c3-ff5a12195939/baee71ad-3baa-3dab-8533-57d28b98781b.roa
File: baee71ad-3baa-3dab-8533-57d28b98781b.roa (raw, json)
Hash identifier: LS7UZC0q9gdEg4mDwsSw4QHhhlHAthR7X+DRBt7Ickw=
Subject key identifier: 9E:C4:E6:4D:E6:1C:56:36:73:EA:02:60:7A:C6:1F:FF:06:79:4C:66
Certificate issuer: /CN=39b2626e-a40d-46fc-b3c3-ff5a12195939
Certificate serial: 010D0C9F4328584CAB8C48D56A367CE181C23C80
Authority key identifier: 16:59:36:2C:AA:41:38:1C:63:4E:EE:05:52:47:C0:80:DC:C0:D9:80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39b2626e-a40d-46fc-b3c3-ff5a12195939.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39b2626e-a40d-46fc-b3c3-ff5a12195939/baee71ad-3baa-3dab-8533-57d28b98781b.roa
Signing time: Wed 28 Jan 2026 02:00:29 +0000
ROA not before: Wed 28 Jan 2026 02:00:29 +0000
ROA not after: Tue 28 Apr 2026 01:00:29 +0000
asID: 401707
IP address blocks: 104.232.11.0/24 maxlen: 24
2602:f899:fe::/47 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39b2626e-a40d-46fc-b3c3-ff5a12195939/39b2626e-a40d-46fc-b3c3-ff5a12195939.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39b2626e-a40d-46fc-b3c3-ff5a12195939/39b2626e-a40d-46fc-b3c3-ff5a12195939.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39b2626e-a40d-46fc-b3c3-ff5a12195939.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 04:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ab:8c:48:d5:6a:36:7c:e1:81:c2:3c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39b2626e-a40d-46fc-b3c3-ff5a12195939
Validity
Not Before: Jan 28 02:00:29 2026 GMT
Not After : Apr 28 01:00:29 2026 GMT
Subject: CN=9408ae43-239b-42af-a556-3ccef459b045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:f9:b4:8f:26:b2:af:b5:4d:f5:53:d9:d9:26:
e6:f5:be:db:40:c6:96:57:c1:bd:c9:7b:dc:10:ae:
7d:88:f3:b9:b4:37:bb:ee:ce:fe:41:ad:22:6c:1f:
15:90:7b:58:c8:dd:cc:58:8f:2f:03:c2:9a:43:9e:
95:b0:1c:6e:56:e4:9e:ff:ed:70:c6:2d:8e:40:8a:
6a:73:7b:6d:da:5f:a4:60:bb:26:ef:42:6c:87:25:
76:1b:c5:6c:c3:b7:aa:cb:e0:08:b9:6a:6a:99:53:
00:c2:a9:f8:20:2b:e6:a1:9e:b3:6d:5d:34:48:81:
26:61:c5:5c:9a:ae:aa:df:31:92:5b:c7:e7:30:d7:
80:1f:5a:7a:bc:2c:7a:e7:62:d2:d6:ae:dc:5c:5f:
14:4d:cc:9d:5e:b2:9d:57:33:ad:df:fb:93:2e:9e:
f0:e5:c6:9d:cb:11:0f:e0:e4:f3:94:6b:b7:0f:73:
c7:10:aa:46:78:29:bb:9c:a9:a7:56:19:a8:81:41:
fa:37:d9:2f:d2:96:a9:00:e6:50:2b:0e:10:58:57:
7a:f5:ae:f3:f7:68:48:b3:01:6f:05:08:4d:f3:d2:
e9:c2:ae:9e:c7:16:c5:59:36:9b:08:2f:fe:96:49:
7d:06:ee:7d:75:c1:32:33:de:02:ce:db:49:98:c6:
31:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:C4:E6:4D:E6:1C:56:36:73:EA:02:60:7A:C6:1F:FF:06:79:4C:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39b2626e-a40d-46fc-b3c3-ff5a12195939/baee71ad-3baa-3dab-8533-57d28b98781b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39b2626e-a40d-46fc-b3c3-ff5a12195939/39b2626e-a40d-46fc-b3c3-ff5a12195939.crl
X509v3 Authority Key Identifier:
keyid:16:59:36:2C:AA:41:38:1C:63:4E:EE:05:52:47:C0:80:DC:C0:D9:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/39b2626e-a40d-46fc-b3c3-ff5a12195939.cer
sbgp-ipAddrBlock: critical
IPv4:
104.232.11.0/24
IPv6:
2602:f899:fe::/47
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
e4:5a:0f:11:6c:8e:5e:07:7b:c2:42:7c:73:8d:b6:e3:b2:e5:
5a:b4:01:ee:21:a3:83:35:bc:1a:0f:91:f0:62:ab:82:85:5f:
83:ce:f9:e8:46:bc:c0:25:ff:03:cd:88:52:72:bb:fa:5e:a8:
71:e1:91:8c:a6:46:a8:24:70:3d:41:12:4a:65:dd:55:01:fa:
27:2e:44:c8:16:d2:35:90:7a:e2:b6:b0:e0:04:6b:58:63:2b:
7f:4b:47:b4:e5:28:20:03:c4:98:97:02:fe:01:c1:88:82:2c:
97:aa:56:99:0f:45:28:c9:05:db:2e:66:f8:b1:25:91:b9:7b:
d9:bf:77:79:86:1c:8e:66:5e:9e:c3:14:b8:ce:f6:45:5a:00:
3f:b1:58:55:7c:94:a1:be:a3:29:b6:1c:70:42:97:74:42:5a:
2e:a2:29:be:71:88:4a:8d:11:b5:43:76:6a:bb:81:aa:61:27:
db:bd:c6:20:18:a7:db:ff:98:f4:ad:0f:e5:84:a9:76:d5:a0:
d0:c7:cf:55:af:3d:80:25:35:fe:94:2e:66:79:6a:96:51:91:
64:88:5c:d1:5e:74:d7:3c:e3:ac:e0:dd:fe:28:af:60:1f:7e:
ae:ae:5b:01:de:ee:aa:4a:e0:7b:eb:9c:10:f1:d8:10:eb:80:
05:3c:c8:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:15:43 2026 by rpki-client