
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/4f57b72f-fafb-32a5-8dd0-753f1f879774.roa
File: 4f57b72f-fafb-32a5-8dd0-753f1f879774.roa (raw, json)
Hash identifier: JWEY1sNRRH8xXf/a5Z95POOeiUmJfoJ0uvJB+Wz7mMI=
Subject key identifier: 02:97:02:01:C7:E9:F4:61:22:F9:19:67:B0:B0:6D:19:22:D7:20:29
Certificate issuer: /CN=ec697c9d-325a-460f-ab2f-8cf71b1be984
Certificate serial: 010D0C9F4328584C8476ECA5DE149A79FC9B5C80
Authority key identifier: 12:3B:D9:75:32:AB:8F:DD:9C:1C:56:29:CE:32:F1:DF:7B:25:86:19
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/4f57b72f-fafb-32a5-8dd0-753f1f879774.roa
Signing time: Wed 14 Jan 2026 02:00:31 +0000
ROA not before: Wed 14 Jan 2026 02:00:31 +0000
ROA not after: Tue 14 Apr 2026 01:00:31 +0000
asID: 395425
IP address blocks: 72.42.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/ec697c9d-325a-460f-ab2f-8cf71b1be984.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/ec697c9d-325a-460f-ab2f-8cf71b1be984.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:84:76:ec:a5:de:14:9a:79:fc:9b:5c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec697c9d-325a-460f-ab2f-8cf71b1be984
Validity
Not Before: Jan 14 02:00:31 2026 GMT
Not After : Apr 14 01:00:31 2026 GMT
Subject: CN=a46d26e9-328d-4efb-8cb6-1444b2c1a8eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e7:ae:f4:fa:68:b9:81:63:7d:93:2b:ef:39:
32:5f:2d:05:e9:71:63:aa:9e:73:62:c2:82:84:82:
55:36:4a:5e:78:06:18:2c:d0:9c:f1:bc:f2:bb:03:
ad:38:ef:2d:8e:70:ca:b9:dd:9a:c6:fc:c5:61:77:
c5:27:86:eb:de:7a:9e:22:48:7f:85:8c:7c:ef:88:
40:0b:f0:76:2e:b7:d6:fa:d9:6e:ce:a8:92:d7:72:
96:0c:f1:8c:3a:c9:61:e2:ff:8f:cc:fd:57:4e:8a:
2d:5e:76:e6:f2:8d:fb:c4:78:24:43:b6:d7:81:29:
86:f8:3b:34:46:bb:40:1c:de:51:ba:d4:36:60:57:
04:fc:34:28:ae:ad:3b:47:6d:64:79:b3:1d:ef:20:
f7:64:3e:37:da:3a:f3:b9:cf:8c:c9:3a:e6:e6:9a:
62:af:96:0b:c4:35:fd:ea:a3:a0:c3:2e:93:f5:ed:
90:ae:00:13:bc:06:b0:c6:cf:f6:a2:a1:f0:6f:6c:
a8:73:b9:a0:f6:e2:5b:10:18:51:a4:6a:18:8b:02:
1b:2d:8a:a8:57:18:54:e2:4a:71:1f:ce:fb:8b:91:
63:54:bc:3c:a7:a7:b8:c7:83:b6:ab:f1:fc:ce:45:
0a:f7:a9:f9:57:05:32:49:95:41:3d:83:8c:e2:ad:
ce:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:97:02:01:C7:E9:F4:61:22:F9:19:67:B0:B0:6D:19:22:D7:20:29
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/4f57b72f-fafb-32a5-8dd0-753f1f879774.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984/ec697c9d-325a-460f-ab2f-8cf71b1be984.crl
X509v3 Authority Key Identifier:
keyid:12:3B:D9:75:32:AB:8F:DD:9C:1C:56:29:CE:32:F1:DF:7B:25:86:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ec697c9d-325a-460f-ab2f-8cf71b1be984.cer
sbgp-ipAddrBlock: critical
IPv4:
72.42.226.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:a6:d8:02:5f:23:71:4c:1d:46:d9:dd:a8:ff:92:81:4a:12:
42:a2:8e:cd:07:46:de:60:2d:07:3f:c0:3b:76:74:fc:52:f1:
75:8c:cc:d8:17:8c:71:45:cf:06:56:ce:1b:74:0d:ca:b1:5f:
46:19:39:cc:e2:da:84:43:fd:d4:d6:ec:8e:6b:5a:59:7f:d1:
56:e7:ee:97:4d:cf:c7:54:ed:9a:0b:04:69:79:9c:7c:ae:ab:
d5:00:65:ed:e0:3f:5d:c3:d9:6e:1e:1f:33:ee:25:4f:0b:51:
95:af:ee:a6:87:f4:1a:ad:a7:bd:e2:23:79:b9:65:c4:42:44:
b7:ed:00:fa:8e:b8:bc:1e:1b:6f:dd:51:aa:0d:12:58:82:f4:
73:9c:62:d6:23:cd:61:d9:5d:4c:42:0c:37:85:ef:df:71:e6:
f7:23:57:94:12:10:57:7b:ef:03:80:89:67:d9:5e:aa:92:a8:
68:29:92:06:3c:03:b5:3e:49:8d:2a:b9:92:10:7e:be:f9:90:
a7:28:2d:d9:8e:b1:96:7b:fc:74:2f:f7:0b:ed:87:26:9c:70:
95:78:3f:42:26:d1:e0:33:2b:21:db:d6:4c:87:3b:75:28:1a:
b9:e1:85:10:5a:e9:89:ae:20:a5:e0:56:10:70:e3:9e:41:3a:
ea:76:43:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:01:14 2026 by rpki-client