
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a652aaa1-a7f0-3422-bc91-816061cdffa6.roa
File: a652aaa1-a7f0-3422-bc91-816061cdffa6.roa (raw, json)
Hash identifier: ayr8zjCd+2zIGLMZsFxcmXfV8JSFI/VD/qyuIk7roig=
Subject key identifier: C7:A4:DF:0C:24:04:11:BC:66:6B:A6:BC:8C:5E:E4:60:76:C3:AF:FC
Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial: 010D0C9F4328584CFC822C38A90F0206661A76C0
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a652aaa1-a7f0-3422-bc91-816061cdffa6.roa
Signing time: Thu 26 Feb 2026 02:00:32 +0000
ROA not before: Thu 26 Feb 2026 02:00:32 +0000
ROA not after: Wed 27 May 2026 01:00:32 +0000
asID: 23473
IP address blocks: 96.63.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:fc:82:2c:38:a9:0f:02:06:66:1a:76:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Validity
Not Before: Feb 26 02:00:32 2026 GMT
Not After : May 27 01:00:32 2026 GMT
Subject: CN=0f351b08-ce67-4646-b442-1a16f6f73680
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:dd:da:5c:f7:a7:f6:15:06:35:9f:91:07:d8:
06:ca:4f:22:1c:af:7d:dd:87:2a:2c:3b:5a:28:de:
e1:6a:17:3f:a1:40:f1:95:b2:ab:0e:a4:f3:3c:fb:
a5:0a:df:a4:7a:48:d2:e0:e7:bf:9d:ca:a5:ef:aa:
d5:dc:d4:bf:c5:b8:3f:66:29:27:82:cf:7e:e6:75:
a0:43:ef:48:7e:10:cf:5b:a6:96:76:44:5c:c0:c4:
6b:54:3f:6e:a1:30:61:6f:8f:9d:78:22:5b:f2:cf:
8a:d0:0c:85:aa:d6:96:51:df:ef:45:43:c3:ac:b0:
19:61:7a:d9:eb:e6:2d:80:33:47:4c:ba:0f:66:76:
fc:76:d8:f2:ae:6c:3e:aa:9e:66:fd:ac:b1:65:b8:
ed:fe:c9:24:ae:10:98:81:51:aa:43:af:8e:95:44:
a2:2c:62:06:4a:25:8c:f6:ad:c5:b4:44:9a:91:1c:
5b:3f:ba:de:34:e7:2c:ed:35:0b:ff:08:7a:76:04:
d4:ee:a4:29:7f:fa:b9:fe:fb:84:37:91:73:b6:21:
ad:38:45:84:9d:e8:d1:a0:8b:eb:c7:08:52:ec:1f:
53:7d:ed:59:f2:81:60:8f:a7:80:d8:c6:10:8e:b0:
71:72:a6:cb:34:50:7e:ba:9e:29:75:ef:68:77:31:
4e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:A4:DF:0C:24:04:11:BC:66:6B:A6:BC:8C:5E:E4:60:76:C3:AF:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/a652aaa1-a7f0-3422-bc91-816061cdffa6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
X509v3 Authority Key Identifier:
keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
sbgp-ipAddrBlock: critical
IPv4:
96.63.209.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:31:f2:98:96:0f:36:24:49:a6:aa:b3:79:bd:97:e1:a6:55:
71:41:89:75:5d:85:54:f0:7e:ce:77:76:21:38:87:87:64:45:
7d:94:c5:96:bc:5e:9f:f2:06:79:4f:05:b8:1c:af:a1:19:a8:
01:59:65:9f:80:a7:99:a0:b5:26:e0:bd:3d:ab:15:cb:69:ae:
a1:8a:bd:7b:e3:42:5c:dc:01:dc:bb:d1:ba:a6:7c:71:44:a9:
2c:f3:16:a0:bb:3d:46:18:b2:be:b9:4c:fe:ba:77:12:9a:63:
31:aa:8b:6d:4b:0a:80:1b:15:d8:ca:7f:2b:ef:35:73:94:22:
0a:6c:53:ee:e8:97:e1:c8:45:e9:bd:10:28:46:81:e6:a5:53:
e0:42:47:2d:4b:e8:b4:33:d2:1a:f2:e1:0d:75:eb:96:ad:26:
28:ee:80:c8:3e:27:04:7c:41:31:86:f4:04:9b:52:94:fe:17:
2d:8e:c6:d1:42:01:ad:cd:1c:71:b5:a7:ec:33:7e:ee:5d:ef:
4e:73:b4:f4:a6:11:2c:15:39:d6:b9:25:29:09:b3:2e:52:31:
55:e9:26:eb:4f:27:b8:2e:7e:93:f5:95:96:5a:36:3e:65:c0:
34:14:e4:ed:91:5b:33:65:a6:ac:23:8b:e4:c6:c8:85:0d:fb:
ae:08:33:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:34:28 2026 by rpki-client