
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5/ab87db8a-d705-34bf-bd24-3baa68c6fbb9.roa
File: ab87db8a-d705-34bf-bd24-3baa68c6fbb9.roa (raw, json)
Hash identifier: d5wKwfThCQK/27rjT+mDIegwXfsijVk73KIIfbWFN1c=
Subject key identifier: 09:4D:18:10:2F:72:D6:19:E8:AF:5E:61:90:1A:4D:44:2E:78:FF:3E
Certificate issuer: /CN=0f9ce8be-7bbe-418b-b78e-42de894133a5
Certificate serial: 010D0C9F4328584CF8A50562D186BB5F0AF36980
Authority key identifier: CA:8B:BF:41:3F:38:3E:71:B6:B5:15:C5:D1:9B:67:D6:D4:60:B2:C6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5/ab87db8a-d705-34bf-bd24-3baa68c6fbb9.roa
Signing time: Tue 24 Feb 2026 16:47:36 +0000
ROA not before: Tue 24 Feb 2026 16:47:36 +0000
ROA not after: Mon 25 May 2026 15:47:36 +0000
asID: 16509
IP address blocks: 72.57.28.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5/0f9ce8be-7bbe-418b-b78e-42de894133a5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5/0f9ce8be-7bbe-418b-b78e-42de894133a5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:f8:a5:05:62:d1:86:bb:5f:0a:f3:69:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f9ce8be-7bbe-418b-b78e-42de894133a5
Validity
Not Before: Feb 24 16:47:36 2026 GMT
Not After : May 25 15:47:36 2026 GMT
Subject: CN=a83a8cec-8cde-42d1-9a15-4fce6b0f38c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:5b:5c:fd:1f:5e:1d:8d:6d:cf:0c:37:1e:c1:
65:61:2f:1f:50:23:2d:dc:fa:fd:2b:69:1e:d5:aa:
65:7b:c9:f1:f6:50:62:65:c9:03:90:48:90:b3:18:
4c:c2:10:10:9a:a8:40:97:3c:a9:14:a8:5a:d7:1f:
09:0c:d9:4b:6a:d8:91:de:b4:a1:e9:ba:58:a3:65:
50:c6:40:38:66:d2:36:84:7b:fb:53:06:69:0a:43:
3a:da:f1:79:96:b9:2c:e8:0d:8e:a8:96:26:d1:41:
5d:0e:33:f3:7b:53:07:06:b9:bd:e2:78:df:37:41:
94:f8:d3:1b:dc:49:a2:bd:e4:75:c8:db:6b:29:58:
fb:26:36:6b:05:49:fd:12:fe:f5:28:71:10:1a:6f:
da:76:0b:3c:a2:55:db:1c:57:c2:9f:b1:e7:06:ba:
15:b5:3e:8e:ed:7b:13:29:81:74:9a:f9:2f:3d:10:
f3:e9:36:0e:5f:24:f8:d8:29:f9:9e:c2:e9:03:45:
3b:d8:e9:18:ff:7d:f5:c4:a4:a6:32:2c:66:55:52:
35:3f:f5:77:0c:eb:c6:ce:bf:2a:31:9f:73:b3:d9:
b9:96:f2:4e:85:4d:6d:1c:59:ec:21:1b:3c:b2:77:
5d:6b:13:25:aa:bb:f6:53:da:83:36:d8:fb:ab:af:
1f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:4D:18:10:2F:72:D6:19:E8:AF:5E:61:90:1A:4D:44:2E:78:FF:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5/ab87db8a-d705-34bf-bd24-3baa68c6fbb9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5/0f9ce8be-7bbe-418b-b78e-42de894133a5.crl
X509v3 Authority Key Identifier:
keyid:CA:8B:BF:41:3F:38:3E:71:B6:B5:15:C5:D1:9B:67:D6:D4:60:B2:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0f9ce8be-7bbe-418b-b78e-42de894133a5.cer
sbgp-ipAddrBlock: critical
IPv4:
72.57.28.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:f6:8d:68:f2:23:dd:36:8d:1b:87:22:8a:40:03:80:23:9e:
80:b2:92:4a:de:1d:54:4c:e0:23:90:0a:a9:ac:8e:fd:05:49:
65:a5:69:45:23:95:a6:ac:89:a6:34:1c:3b:44:89:d9:bd:65:
c1:67:2f:67:fc:2d:5d:ba:79:52:97:32:61:8d:d9:48:84:e3:
a4:ef:20:e1:63:2c:a0:e4:d6:fa:63:be:1e:16:4e:08:45:f7:
b4:0c:b7:85:69:4c:b8:b5:cf:66:80:e6:45:23:8b:c5:ff:1d:
ee:d3:1f:8c:0b:a7:26:94:3c:ab:df:30:87:3b:72:8a:e8:a9:
ca:25:4b:62:36:55:85:0d:90:ce:09:42:ca:8b:0a:8b:a4:b0:
6f:64:c8:32:5a:ce:aa:9f:2f:fe:db:f6:d5:1f:e2:b1:55:5c:
fa:86:fc:f4:4e:61:ee:8b:1d:e7:7f:d8:0d:78:57:e0:10:d2:
77:b0:f5:31:38:f8:cd:1c:fb:2e:3e:29:76:9c:56:cd:8a:6b:
30:9e:87:9b:4b:b6:10:0f:62:06:35:2c:ab:0a:85:00:a0:b0:
95:93:a4:45:ee:fa:e0:7c:77:3a:f2:dd:36:ce:c3:a1:ff:5f:
d1:3d:92:7e:74:10:7d:08:6e:93:3f:88:94:ed:c4:e8:77:ff:
55:bc:b3:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:08:42 2026 by rpki-client