
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcbf2352-8296-41fd-bfd5-576c02b9d483/9fa73050-194d-310a-a4ac-6a0d78b64941.roa
File: 9fa73050-194d-310a-a4ac-6a0d78b64941.roa (raw, json)
Hash identifier: MD2KbxdkAXqbqsz8RHqFGzrfGp0rQicsmwzhWFEW0zc=
Subject key identifier: 05:13:11:E2:85:E5:F0:17:05:2B:D6:13:CD:4B:CC:01:BC:88:A5:F4
Certificate issuer: /CN=fcbf2352-8296-41fd-bfd5-576c02b9d483
Certificate serial: 010D0C9F4328584CD99CECA12C7C2068C1CCBB60
Authority key identifier: 90:FB:2E:3C:62:9B:91:80:64:79:BF:EE:DC:B2:FD:73:6A:6C:59:6C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcbf2352-8296-41fd-bfd5-576c02b9d483.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcbf2352-8296-41fd-bfd5-576c02b9d483/9fa73050-194d-310a-a4ac-6a0d78b64941.roa
Signing time: Fri 13 Feb 2026 14:00:41 +0000
ROA not before: Fri 13 Feb 2026 14:00:41 +0000
ROA not after: Thu 14 May 2026 13:00:41 +0000
asID: 20283
IP address blocks: 64.238.0.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcbf2352-8296-41fd-bfd5-576c02b9d483/fcbf2352-8296-41fd-bfd5-576c02b9d483.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcbf2352-8296-41fd-bfd5-576c02b9d483/fcbf2352-8296-41fd-bfd5-576c02b9d483.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcbf2352-8296-41fd-bfd5-576c02b9d483.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 09:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:d9:9c:ec:a1:2c:7c:20:68:c1:cc:bb:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcbf2352-8296-41fd-bfd5-576c02b9d483
Validity
Not Before: Feb 13 14:00:41 2026 GMT
Not After : May 14 13:00:41 2026 GMT
Subject: CN=0a5d9e47-32c4-48f4-8174-195aa832c273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:aa:ba:4c:41:d5:b8:e6:1b:05:f7:61:e2:dd:
dd:a0:c8:61:9d:b5:36:ea:93:06:dc:d5:82:e0:43:
85:fa:c5:8a:57:0a:8c:d3:aa:47:12:14:59:78:c8:
e3:d9:eb:83:84:a6:79:39:fa:ee:c4:29:be:97:1a:
f3:e1:03:07:1a:87:1e:5e:31:84:65:7a:1b:9d:d6:
54:18:9a:e6:c7:61:09:a5:f7:67:3d:88:56:46:e4:
e2:ff:45:a5:fe:26:67:d5:df:ca:34:6b:42:09:2e:
3c:e8:36:6d:47:b4:22:8c:5c:64:94:e1:74:bb:c3:
da:49:c0:5d:5c:a0:a6:1d:a9:b7:bb:af:a3:b4:cf:
ac:93:14:de:36:3a:f7:eb:9c:31:8f:0f:0f:ac:c4:
3c:d0:74:c2:d0:5e:32:6c:f4:8f:b0:96:4e:33:19:
08:41:52:f1:c0:5e:87:d2:e1:55:1b:23:bf:2e:9d:
7f:c6:f8:50:6d:76:57:ca:9e:28:92:fa:41:80:39:
27:00:cd:3c:70:2f:6d:f3:f7:4e:69:52:8b:a1:24:
15:2d:21:d0:91:18:3d:04:08:21:30:2f:36:74:93:
dd:6d:24:91:9f:81:1d:a4:38:af:12:ac:c5:5e:ad:
46:1b:cb:7a:15:92:97:74:95:91:a3:4d:ba:97:26:
8a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:13:11:E2:85:E5:F0:17:05:2B:D6:13:CD:4B:CC:01:BC:88:A5:F4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcbf2352-8296-41fd-bfd5-576c02b9d483/9fa73050-194d-310a-a4ac-6a0d78b64941.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcbf2352-8296-41fd-bfd5-576c02b9d483/fcbf2352-8296-41fd-bfd5-576c02b9d483.crl
X509v3 Authority Key Identifier:
keyid:90:FB:2E:3C:62:9B:91:80:64:79:BF:EE:DC:B2:FD:73:6A:6C:59:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/fcbf2352-8296-41fd-bfd5-576c02b9d483.cer
sbgp-ipAddrBlock: critical
IPv4:
64.238.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:f2:3c:e4:d9:68:47:3f:d0:60:ea:d5:74:e0:82:ec:a4:7e:
ba:06:fa:45:7c:0e:e4:78:48:5a:57:c5:9b:b3:59:26:25:45:
b6:4e:b3:cc:cf:39:e1:0b:c2:9e:bd:bd:76:ea:5f:d3:cd:e8:
3e:77:a2:c4:b9:16:74:1f:b7:87:ad:ec:28:84:89:e5:65:a3:
8e:61:b9:2d:76:08:08:70:83:5c:8b:c5:de:22:b5:85:96:90:
0c:1d:97:ca:b4:f1:15:00:8c:ac:7b:2c:b2:31:ca:a0:a6:78:
ba:28:4c:fc:f1:92:03:5d:d7:59:a3:6a:18:0e:53:c7:20:47:
04:ff:a6:60:8f:a4:ac:62:58:e2:2c:b9:84:7a:9a:ff:18:10:
57:f7:53:d2:54:b8:1d:d7:0c:0b:84:bb:d8:26:63:6b:8f:b2:
a5:dd:21:91:e3:ff:48:40:3c:6e:d4:96:46:54:eb:1f:53:00:
c2:85:57:ac:40:f7:0f:8d:07:d5:58:00:c9:cc:d1:fd:44:b6:
54:d8:c2:5d:d1:f1:e0:08:5e:0c:b7:9b:6d:c8:dc:bb:e6:e5:
e5:04:af:f6:98:cd:87:9e:05:2b:6a:f3:97:31:db:c7:aa:b1:
5e:be:54:16:c7:3d:99:2e:93:d8:dd:46:61:e6:9c:76:53:23:
c1:33:2d:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:08:20 2026 by rpki-client