
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/33a07a10-b3c9-301a-95d6-2b8363fac942.roa
File: 33a07a10-b3c9-301a-95d6-2b8363fac942.roa (raw, json)
Hash identifier: UbhXtfXw5vaXmwbGN7qfzdbj6P7yqWLhfuKjfxbwIKw=
Subject key identifier: 2B:93:79:0C:E9:85:0B:85:58:70:67:76:E9:0D:B8:BC:25:7A:C1:5A
Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial: 010D0C9F4328584CC6121EE18AFD4FAD8C5CB740
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/33a07a10-b3c9-301a-95d6-2b8363fac942.roa
Signing time: Fri 06 Feb 2026 14:00:40 +0000
ROA not before: Fri 06 Feb 2026 14:00:40 +0000
ROA not after: Thu 07 May 2026 13:00:40 +0000
asID: 23473
IP address blocks: 216.171.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:c6:12:1e:e1:8a:fd:4f:ad:8c:5c:b7:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Validity
Not Before: Feb 6 14:00:40 2026 GMT
Not After : May 7 13:00:40 2026 GMT
Subject: CN=ef5f280d-3d2f-4c19-9c77-9cdb18a5589c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a7:c3:50:c5:96:ef:5d:cc:b3:7e:e9:76:da:
cc:67:65:ce:e2:c5:21:c1:5d:b9:de:33:25:9c:bd:
0c:b9:7a:28:05:eb:b4:72:a7:06:68:7f:90:45:d8:
74:2b:39:1c:b9:50:b6:4a:58:36:64:6d:a0:f4:7d:
42:33:0f:4e:54:ec:4c:ac:47:0b:6b:7a:cf:50:af:
3a:5c:33:33:2c:c7:0d:40:ac:da:dd:31:fa:9a:b1:
d5:1f:0d:d0:86:1d:86:52:59:8f:85:86:71:73:82:
ba:76:82:c8:4e:c4:01:cc:7b:d2:d0:e8:f8:84:e9:
01:83:13:21:68:3f:84:34:d8:3e:c0:66:00:3a:d0:
48:ef:29:ff:51:8c:22:b9:85:0a:98:dd:c7:fe:4a:
f2:e8:53:9d:60:7a:96:2d:a6:93:c5:41:60:16:fa:
06:2b:3e:c1:88:d4:ab:ae:26:92:7f:20:42:fc:6c:
e9:cd:7a:9a:3a:96:6f:95:52:44:44:a8:26:ef:61:
75:a9:ff:47:56:59:a0:c1:4b:ed:5d:9f:69:78:05:
07:a7:33:76:61:c9:c1:32:1a:33:f9:43:82:da:15:
a5:24:36:7c:96:ce:36:eb:50:d1:0f:af:1d:45:9f:
32:58:7e:c5:72:b0:31:9a:74:fb:cb:a4:e6:7d:ae:
88:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:93:79:0C:E9:85:0B:85:58:70:67:76:E9:0D:B8:BC:25:7A:C1:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/33a07a10-b3c9-301a-95d6-2b8363fac942.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
X509v3 Authority Key Identifier:
keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
sbgp-ipAddrBlock: critical
IPv4:
216.171.35.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:62:23:07:1e:f9:9d:a2:3d:6a:50:b3:98:1e:d2:31:c7:0f:
95:e2:7b:c8:c8:a3:33:1d:f6:06:16:eb:f1:37:72:e6:a0:da:
0c:ca:af:a8:d4:46:64:2d:56:e0:93:aa:60:28:6a:a6:a1:f7:
a0:69:1d:b0:d9:a6:8b:a2:86:c9:43:d6:95:28:f9:0a:7d:7c:
c6:b1:ad:be:d1:f7:5e:61:55:fd:85:7d:8f:bd:ac:c7:b2:dc:
43:6c:7e:9f:98:8f:33:81:cc:dc:be:69:16:bd:db:f6:76:60:
fe:77:ca:7a:19:d7:49:90:e7:ef:23:d4:1e:2c:df:2a:c2:84:
08:20:81:1c:89:5f:33:32:88:a3:53:4d:53:81:21:53:e3:dd:
ba:71:3f:7b:5d:8c:f8:0a:18:2a:61:04:2f:b7:f8:04:7f:f2:
9e:ff:ae:c1:23:2e:12:f6:d0:b9:83:40:fc:7b:88:a7:21:e2:
67:65:c1:2d:55:c7:90:70:36:93:c7:38:9c:02:9d:b8:d5:24:
c8:00:e1:5f:76:55:5c:89:ca:ba:4b:3b:15:80:d0:38:92:ed:
01:4c:c8:7c:68:9d:1e:32:71:37:f7:97:ae:77:10:51:f3:3d:
3b:33:43:b9:23:48:ae:a8:5a:b7:5e:7b:69:15:2e:da:12:3d:
a5:9a:d7:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:41:16 2026 by rpki-client