
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/af8c64ed-6b8e-3f85-a592-fae416cdbc87.roa
File: af8c64ed-6b8e-3f85-a592-fae416cdbc87.roa (raw, json)
Hash identifier: 6sH9h1jwq8rEGHiBMqCoASLClMYb00FCl+/4+EEUtUw=
Subject key identifier: B3:96:20:F9:32:D8:13:28:31:35:B4:FA:95:63:0E:54:40:30:DC:96
Certificate issuer: /CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Certificate serial: 010D0C9F4328584CED2781B49AF90FA41090DE00
Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/af8c64ed-6b8e-3f85-a592-fae416cdbc87.roa
Signing time: Fri 20 Feb 2026 14:00:41 +0000
ROA not before: Fri 20 Feb 2026 14:00:41 +0000
ROA not after: Thu 21 May 2026 13:00:41 +0000
asID: 14618
IP address blocks: 52.129.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ed:27:81:b4:9a:f9:0f:a4:10:90:de:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Validity
Not Before: Feb 20 14:00:41 2026 GMT
Not After : May 21 13:00:41 2026 GMT
Subject: CN=ca694947-3599-4557-8825-afc3b536b870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:0b:06:1d:c9:5a:71:1a:4e:ef:17:94:e5:4a:
a4:42:8f:2c:a2:96:d9:d0:b9:7b:b2:f1:64:4e:ea:
9b:d8:1b:48:70:36:39:43:6a:8b:a7:b8:fe:b7:ce:
a7:a0:54:ab:63:aa:a9:da:06:d0:70:42:c0:41:2f:
0a:c0:fd:e9:dc:51:c6:ff:1d:31:3c:1f:99:98:2d:
31:df:0e:67:42:a0:16:f3:94:c8:2c:44:d5:7b:03:
5c:d4:6a:54:ae:c0:7e:2c:6b:5c:e5:7e:3a:f3:07:
9f:06:d6:d9:31:eb:5b:05:14:71:33:0c:fc:c6:ff:
54:b2:ca:86:2c:12:b8:10:d2:3c:90:b7:d0:f8:7f:
8a:a4:01:f4:74:f9:9f:48:f4:6d:4a:d5:1a:8d:7c:
21:df:3f:5d:72:63:99:70:2a:2f:cb:46:b0:4e:3f:
20:3d:98:e2:3b:96:66:81:ae:ce:de:83:3a:77:76:
68:bf:85:e8:8e:2a:46:fa:8b:cc:a0:01:45:c3:3d:
d4:b2:92:ef:3c:fa:16:d8:5c:75:bf:fe:88:ef:3e:
14:7f:66:b8:6d:e4:f4:4f:ba:c7:93:18:0b:30:38:
97:b7:a0:3e:de:69:c3:57:e3:20:d6:9a:a7:3b:88:
e1:da:4a:ab:1a:e8:dc:e9:74:b0:3e:b8:e1:71:83:
52:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:96:20:F9:32:D8:13:28:31:35:B4:FA:95:63:0E:54:40:30:DC:96
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/af8c64ed-6b8e-3f85-a592-fae416cdbc87.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl
X509v3 Authority Key Identifier:
keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
sbgp-ipAddrBlock: critical
IPv4:
52.129.110.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:03:bb:ad:7d:50:ed:dd:a0:98:55:6a:04:10:e5:9b:cd:33:
3c:f1:cb:fa:40:a8:eb:e4:96:05:20:1c:f0:a5:36:56:f7:4b:
15:0a:33:b4:88:28:a0:cd:91:a5:38:b9:27:6a:70:6a:26:cc:
9e:07:44:4e:da:21:79:52:49:f0:67:06:22:31:77:b4:1c:5d:
4e:c4:07:3e:36:25:e5:76:9d:18:f8:1c:18:c5:6c:f1:0e:5f:
00:df:5e:48:c6:c2:97:2e:88:1e:f6:e5:47:fd:50:53:34:1d:
34:77:14:5c:d1:02:b6:54:19:16:25:52:cb:23:c4:c0:62:b4:
ce:95:77:8b:4d:69:f0:4b:f8:34:58:8d:b4:47:6d:69:bf:74:
78:03:26:e1:51:03:fa:c4:b7:22:6e:ef:03:f4:60:4c:7f:14:
66:9d:3f:79:6c:a4:b8:2b:e7:06:12:31:42:21:6f:63:8c:c6:
39:f1:ee:87:4a:b6:d7:e6:51:86:c7:64:9e:14:24:73:07:71:
ec:7d:5a:ff:46:13:9b:b1:55:cd:9a:55:18:9b:15:d6:64:8c:
7d:99:ce:f6:04:94:da:21:fc:68:91:ef:39:76:a7:6b:ca:f0:
28:5e:9c:26:58:55:44:01:e7:51:63:99:e1:6b:0e:85:95:ce:
ec:67:87:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:43:24 2026 by rpki-client