
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/32a23c32-30aa-3814-87e4-f5250a5cd155.roa
File: 32a23c32-30aa-3814-87e4-f5250a5cd155.roa (raw, json)
Hash identifier: pA00FFoHigWB7NdQ2LZ+rZEdAadxYI69B/M+A50O7tU=
Subject key identifier: ED:1F:EB:0F:85:F2:06:92:49:F1:65:B0:DA:E2:D8:3A:6B:6C:7F:3A
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584CDC676D2FDB68616F91455E80
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/32a23c32-30aa-3814-87e4-f5250a5cd155.roa
Signing time: Sat 14 Feb 2026 14:00:41 +0000
ROA not before: Sat 14 Feb 2026 14:00:41 +0000
ROA not after: Fri 15 May 2026 13:00:41 +0000
asID: 9009
IP address blocks: 172.94.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:dc:67:6d:2f:db:68:61:6f:91:45:5e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Feb 14 14:00:41 2026 GMT
Not After : May 15 13:00:41 2026 GMT
Subject: CN=19e124fc-3f6a-4de9-9fbc-ef56a18b9364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a8:f6:53:1c:93:79:e0:ad:50:51:0d:c1:e0:
87:39:d2:76:42:1d:9c:d9:dc:a3:a8:9c:8a:c9:d1:
e2:e8:58:73:53:cf:3d:03:db:c1:cb:99:1c:7b:f3:
b8:26:58:92:3f:db:c9:7e:9a:d5:66:03:87:fc:48:
1e:73:a5:41:18:5f:12:13:06:22:f5:10:8a:f3:33:
3b:f1:08:c3:a8:6a:2b:88:d8:9b:9a:bd:a7:c1:63:
78:1c:ed:15:1f:8a:55:7e:f9:8a:e0:24:24:c3:46:
04:cb:e2:62:f9:21:cc:4d:ca:a5:03:e9:1b:6b:a7:
1d:1d:fb:d3:1f:2f:c5:11:62:93:2e:d9:5f:2a:b5:
20:a7:9c:0f:2b:1c:1a:9b:17:da:5e:6d:7d:af:25:
06:98:0a:c9:a8:5f:d4:97:26:66:10:ca:be:e9:2b:
7d:9e:ab:8f:54:7e:b6:40:58:c7:da:70:7a:11:70:
ca:a9:86:91:a9:79:b8:e6:d2:0f:9e:4a:21:5d:17:
2e:d3:3b:c2:89:18:6a:a2:09:62:f3:15:fd:62:e9:
b2:26:20:a4:b1:39:80:ca:8c:3b:04:9f:1d:25:fd:
ef:6a:75:9f:e4:75:ca:c4:30:fc:b4:df:0c:4c:bc:
f3:e4:f5:de:c1:a1:4f:12:36:4c:b3:60:ed:97:ef:
bc:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:1F:EB:0F:85:F2:06:92:49:F1:65:B0:DA:E2:D8:3A:6B:6C:7F:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/32a23c32-30aa-3814-87e4-f5250a5cd155.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.40.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:77:63:90:4f:da:a9:d8:ed:2b:10:b8:19:fd:9d:d0:3f:5b:
e4:d8:e6:1c:de:30:54:0f:a7:48:d1:ec:96:b1:d6:6d:c0:da:
87:0b:06:2e:28:cb:a7:65:59:d0:70:ac:ce:a2:a0:be:71:f1:
89:be:8d:10:76:21:26:3f:a5:eb:df:e1:19:1b:76:78:52:e7:
dc:da:8a:41:d6:c0:91:08:12:0b:b4:92:ff:c1:97:16:3e:23:
1b:72:08:4b:cf:df:08:66:aa:c1:73:a7:a5:12:51:3b:61:b9:
37:f0:0c:7c:e2:c7:0c:20:9f:c5:12:04:7e:61:b7:d9:4b:ff:
c7:9d:9b:1f:fe:f3:79:7b:a6:10:d5:04:a4:5c:a2:39:8a:92:
55:70:86:2e:3e:5f:d2:06:68:de:cf:29:ce:bc:38:3c:99:4a:
f7:5a:86:fb:69:50:f3:f6:b1:ec:0a:6c:d1:8b:ba:97:da:93:
91:18:de:1f:97:67:03:21:65:07:2e:ef:13:0d:39:36:75:ca:
24:10:f5:97:74:41:c2:d8:92:ee:f6:20:58:00:0f:d0:2b:33:
72:a3:c3:12:d7:c2:e4:11:b5:da:4b:9a:00:21:b6:25:6b:0c:
5d:72:d5:53:8e:36:88:c3:af:54:70:f2:90:c7:85:01:f1:7f:
06:04:4a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:53:35 2026 by rpki-client