
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/cbbbccee-35e4-3b3d-98c0-7ae70bd38b3e.roa
File: cbbbccee-35e4-3b3d-98c0-7ae70bd38b3e.roa (raw, json)
Hash identifier: v4HHsU0qxgySvBHd1eHB0tlMjpcCoD7vA/Rk9ZwNd5g=
Subject key identifier: 14:E6:D4:59:28:36:BC:BF:CF:01:9A:F4:D3:05:E4:E7:B7:97:21:1D
Certificate issuer: /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial: 010D0C9F4328584CD99CE1C9A2C3C753ED230E40
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/cbbbccee-35e4-3b3d-98c0-7ae70bd38b3e.roa
Signing time: Fri 13 Feb 2026 14:00:41 +0000
ROA not before: Fri 13 Feb 2026 14:00:41 +0000
ROA not after: Thu 14 May 2026 13:00:41 +0000
asID: 11290
IP address blocks: 24.122.32.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:d9:9c:e1:c9:a2:c3:c7:53:ed:23:0e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Validity
Not Before: Feb 13 14:00:41 2026 GMT
Not After : May 14 13:00:41 2026 GMT
Subject: CN=0196f242-a7c3-4d17-ba57-bb529e5fe19a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d9:99:5c:23:0e:b2:6f:0d:47:66:c3:34:06:
59:3f:9c:57:aa:67:62:b8:1f:db:ef:e0:09:bd:4a:
2b:4f:e2:76:75:11:34:5a:68:6c:c5:cc:3b:7e:04:
f9:e1:ea:97:a7:b3:02:ff:a6:8e:b4:75:1c:31:ce:
dd:e3:f2:c0:8e:4a:87:94:90:ee:d1:07:11:ac:ee:
18:82:4b:3a:b2:6a:68:e0:0f:a9:f0:01:60:da:da:
a4:6b:b2:04:bd:61:5c:83:09:24:c9:a9:69:01:37:
2f:3f:1e:3b:1b:ad:36:a5:28:59:10:6f:7d:93:c2:
ab:6a:d5:a1:1e:c2:5b:43:47:47:d0:a4:ec:ff:29:
27:86:57:b0:cc:bb:80:5b:30:36:63:5a:e8:a3:7c:
dd:0a:92:0b:0c:26:05:78:dc:40:52:aa:5d:b7:39:
30:fa:39:9f:56:41:f1:cb:f3:ee:6d:2a:8e:78:a6:
e5:92:6b:b5:04:df:ce:c6:73:2d:ee:ef:eb:aa:7e:
c9:ee:aa:e0:74:9c:00:ec:78:77:ee:b9:f9:04:bc:
23:60:f1:b4:72:a5:6a:78:8d:54:db:b5:ed:92:3b:
00:92:fe:3d:7d:ad:b7:55:6b:70:ad:7e:25:9f:98:
71:af:42:91:5a:be:d0:c1:0b:21:b3:52:2f:50:ad:
cd:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:E6:D4:59:28:36:BC:BF:CF:01:9A:F4:D3:05:E4:E7:B7:97:21:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/cbbbccee-35e4-3b3d-98c0-7ae70bd38b3e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
X509v3 Authority Key Identifier:
keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
sbgp-ipAddrBlock: critical
IPv4:
24.122.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:23:14:8e:a1:2d:fc:e5:0f:87:07:b4:45:3a:f6:c0:f5:71:
28:dc:7d:55:68:3f:90:7a:49:f3:49:e5:54:87:85:4d:c7:bc:
ad:08:56:af:1b:47:fe:18:b1:91:7b:ea:cc:1f:ac:be:47:ff:
22:d1:fb:25:28:fa:8c:f5:02:c8:03:a7:55:9e:b4:95:32:cf:
db:c3:7a:17:94:62:b8:e0:04:c1:0d:ae:05:41:59:0f:31:9c:
a2:45:ff:1f:7c:11:c3:cc:46:b0:c0:cd:9a:fc:3f:81:e1:48:
a1:8a:19:6a:e6:0e:ad:60:8d:88:e3:52:91:ad:3e:a6:d4:7a:
b6:55:0b:ca:97:3b:79:a4:a8:01:d0:80:9b:4c:50:7f:78:1b:
de:f7:52:d1:39:4f:ee:92:75:3d:32:65:99:fd:df:c4:6a:c2:
12:55:d7:8a:90:5e:71:69:3f:ef:28:8a:e2:d8:5e:54:59:e3:
c8:b8:8e:f8:f5:42:b1:b4:37:f1:51:6e:25:90:03:e1:94:c6:
d1:a4:59:5f:f5:f4:b6:6d:b4:17:dd:36:e9:21:77:cc:83:3b:
00:67:ad:74:8c:bc:a5:d6:db:ae:32:57:1b:c1:73:33:ef:8d:
b7:47:bd:14:54:cf:b4:03:3d:24:5d:71:09:26:a5:4e:42:d5:
0f:53:c5:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:24:17 2026 by rpki-client