
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/68365f48-7c66-3b0a-9514-08444a5b126b.roa
File: 68365f48-7c66-3b0a-9514-08444a5b126b.roa (raw, json)
Hash identifier: Bn3Q7ExHp/UWr7vZBu4oeM6ETPrqP4MI9jHjH+/wFbg=
Subject key identifier: FE:6A:71:5B:1F:90:66:51:05:DD:EE:7D:BC:B4:BF:5C:FE:81:25:7A
Certificate issuer: /CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
Certificate serial: 010D0C9F4328584CB551CE037EBF4B30DB389480
Authority key identifier: AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/68365f48-7c66-3b0a-9514-08444a5b126b.roa
Signing time: Sat 31 Jan 2026 14:00:39 +0000
ROA not before: Sat 31 Jan 2026 14:00:39 +0000
ROA not after: Fri 01 May 2026 13:00:39 +0000
asID: 33208
IP address blocks: 208.56.192.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:b5:51:ce:03:7e:bf:4b:30:db:38:94:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
Validity
Not Before: Jan 31 14:00:39 2026 GMT
Not After : May 1 13:00:39 2026 GMT
Subject: CN=f125e316-a419-4a7f-a14e-26f7e0a83f44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5b:f4:5d:69:d8:87:3b:3b:53:c3:87:8c:a1:
48:f8:18:33:68:35:50:15:5d:ab:7a:36:a0:0e:6d:
28:a5:0c:0b:8e:d4:dd:99:31:1e:8c:9d:e2:c3:53:
49:bf:51:c0:cd:55:0b:74:49:80:a5:38:ba:e6:43:
5f:01:4c:5c:6a:71:a3:75:34:ed:c4:42:5c:a8:20:
9c:6e:3b:75:b0:99:a3:91:c1:d0:96:7c:3a:58:6a:
bf:b0:77:69:db:e7:4f:35:e6:c6:b1:04:5b:80:be:
d6:82:35:1a:da:c6:4d:f4:85:1c:2e:ae:3e:6f:b5:
28:31:a4:b0:c0:9b:06:0d:2b:d8:27:32:bc:d4:bc:
f0:8e:74:71:ad:be:af:ee:0d:b9:62:08:72:67:ff:
0d:aa:e0:8b:f1:c0:97:e6:f3:9b:a1:03:4f:e7:80:
be:4a:6d:cc:37:1f:62:04:b1:e3:a7:51:23:9e:88:
b1:40:76:b1:b3:89:9e:d5:63:e2:c6:fa:21:5e:e5:
91:7b:b7:82:6b:57:44:5d:d0:c0:8a:c6:88:cb:80:
23:77:82:23:91:1d:d0:89:73:d3:b0:ba:f8:f6:33:
14:88:3a:4f:63:53:ce:12:49:fc:a8:20:4b:94:82:
dc:b3:87:a0:7f:c2:c3:24:42:62:b7:9f:77:af:19:
d7:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:6A:71:5B:1F:90:66:51:05:DD:EE:7D:BC:B4:BF:5C:FE:81:25:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/68365f48-7c66-3b0a-9514-08444a5b126b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl
X509v3 Authority Key Identifier:
keyid:AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
sbgp-ipAddrBlock: critical
IPv4:
208.56.192.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:45:72:3f:20:2c:59:fa:21:aa:0d:48:96:3c:dc:4d:2b:74:
2c:79:92:ce:56:30:ca:80:cd:f7:90:10:2b:e6:b0:13:1e:44:
56:30:a6:74:97:e2:d0:8f:2c:ea:cb:e0:31:06:dc:e0:c0:2a:
45:a1:9a:b2:a3:a5:31:c1:e1:4e:5d:4e:4c:57:dd:2a:2d:72:
4d:d5:a7:53:4a:9f:5e:60:b4:ce:a7:d0:18:dd:c3:87:a9:ab:
c7:29:72:02:14:0e:be:a5:af:59:fa:f8:be:b2:9e:04:e5:d7:
da:23:f8:81:9f:30:24:72:92:2e:2f:a4:b8:96:fa:36:5b:b8:
9f:e3:95:2d:4f:a1:b7:70:f2:6b:22:30:af:54:2b:d1:e1:9b:
aa:6f:7b:b1:fe:1b:3f:72:36:2b:1f:ad:80:00:99:1a:b4:32:
0f:2f:46:4a:a9:b3:c3:95:85:3a:7f:bb:4d:1d:bf:ad:8c:0f:
bb:38:43:77:a7:95:0d:57:cf:ba:2b:e0:cb:a8:45:05:b3:8f:
75:d9:0e:d7:f4:0f:64:e5:92:0b:49:dd:e0:1d:7f:a7:6a:05:
7f:09:19:2d:11:1c:62:b4:60:d4:4b:c3:eb:ad:52:0a:b1:8a:
7c:2e:6a:7b:4a:76:17:78:00:73:e2:c6:99:0d:2e:b6:fe:f5:
58:b3:bd:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:11:31 2026 by rpki-client