
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47c2a6e6-9681-4930-9d85-167ea7f611c2/3532f2d1-a384-31f4-8652-ffe606421630.roa
File: 3532f2d1-a384-31f4-8652-ffe606421630.roa (raw, json)
Hash identifier: Q1ao/zAf6WvB1Z2C5RtmqINFU7qXN+KFcBn3jO/caz4=
Subject key identifier: C2:70:92:8A:B7:55:EA:A4:F7:4D:B5:0C:87:F7:A2:B6:CB:2E:5F:40
Certificate issuer: /CN=47c2a6e6-9681-4930-9d85-167ea7f611c2
Certificate serial: 010D0C9F4328584CF2BCF6BFCEA20E147E36EB00
Authority key identifier: 09:B2:1E:6E:92:30:BC:66:84:26:F0:0C:C7:DB:C5:91:5A:AA:E9:28
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47c2a6e6-9681-4930-9d85-167ea7f611c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47c2a6e6-9681-4930-9d85-167ea7f611c2/3532f2d1-a384-31f4-8652-ffe606421630.roa
Signing time: Sun 22 Feb 2026 14:00:41 +0000
ROA not before: Sun 22 Feb 2026 14:00:41 +0000
ROA not after: Sat 23 May 2026 13:00:41 +0000
asID: 19782
IP address blocks: 159.28.0.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47c2a6e6-9681-4930-9d85-167ea7f611c2/47c2a6e6-9681-4930-9d85-167ea7f611c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47c2a6e6-9681-4930-9d85-167ea7f611c2/47c2a6e6-9681-4930-9d85-167ea7f611c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47c2a6e6-9681-4930-9d85-167ea7f611c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:f2:bc:f6:bf:ce:a2:0e:14:7e:36:eb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47c2a6e6-9681-4930-9d85-167ea7f611c2
Validity
Not Before: Feb 22 14:00:41 2026 GMT
Not After : May 23 13:00:41 2026 GMT
Subject: CN=7cd54500-5793-4356-becd-42f53a8c21cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:57:ba:dd:92:96:d9:9f:f1:6e:e3:66:94:bb:
e8:50:94:41:c6:7a:f8:b7:77:23:02:2d:ff:e1:3f:
4f:be:2b:76:38:4e:c7:53:2f:38:dd:dc:7c:9e:b8:
b1:ed:e0:10:eb:eb:5e:52:64:c7:67:e8:c8:ec:d1:
56:28:47:53:1c:8f:ac:45:36:15:5c:b6:e1:b1:0a:
99:49:3f:a1:d5:5e:83:05:87:1f:36:e8:11:4c:28:
d5:94:23:e7:0d:d6:cc:6a:b0:ff:f1:fb:cf:fd:d5:
f4:2e:67:16:41:92:a8:4a:af:4d:7a:e4:d4:85:a7:
22:40:1b:8f:45:f0:9b:f5:77:ef:9f:80:53:0b:57:
b2:65:7e:e6:ad:a4:f1:91:2a:b5:e4:ea:0e:60:07:
1d:a0:64:d2:28:f2:06:96:18:e4:aa:13:53:70:ce:
77:b9:0d:a1:7c:3d:d6:4d:b3:ab:08:a5:e3:04:a5:
74:b2:25:94:d1:1c:6d:3d:54:a6:76:20:a6:40:e7:
39:46:5a:69:fe:82:36:91:23:37:56:f3:1a:50:f7:
3c:75:d7:68:dc:f8:27:9c:43:72:d9:96:76:0e:27:
bf:00:52:03:71:e4:03:18:21:bf:5b:0e:69:96:a2:
eb:6f:63:28:a7:07:d1:ca:09:2f:46:67:a9:eb:15:
74:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:70:92:8A:B7:55:EA:A4:F7:4D:B5:0C:87:F7:A2:B6:CB:2E:5F:40
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47c2a6e6-9681-4930-9d85-167ea7f611c2/3532f2d1-a384-31f4-8652-ffe606421630.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47c2a6e6-9681-4930-9d85-167ea7f611c2/47c2a6e6-9681-4930-9d85-167ea7f611c2.crl
X509v3 Authority Key Identifier:
keyid:09:B2:1E:6E:92:30:BC:66:84:26:F0:0C:C7:DB:C5:91:5A:AA:E9:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47c2a6e6-9681-4930-9d85-167ea7f611c2.cer
sbgp-ipAddrBlock: critical
IPv4:
159.28.0.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:45:8d:ad:35:80:eb:cd:b7:69:f5:07:d0:0a:be:95:39:ba:
72:76:64:b0:f9:19:15:82:36:36:31:39:2b:4b:88:eb:12:ab:
6e:6b:b0:80:50:31:f4:e2:ad:9d:b5:b9:60:58:25:d7:af:09:
4b:5a:5f:80:b5:01:c6:f5:a3:a6:da:ed:49:f6:dc:12:57:65:
71:47:2c:3e:bc:14:3d:4d:5a:8b:b4:54:d5:d4:4d:3e:5f:d3:
38:de:86:cf:74:2e:09:c4:18:82:95:a7:ee:32:b6:0f:10:fb:
e0:b8:f3:2c:fb:91:5a:51:24:84:cc:6f:c6:a7:f2:16:c5:ca:
8d:f5:48:af:ca:72:38:e0:14:10:96:de:9b:bc:91:c5:a0:45:
09:06:62:49:04:e7:02:dc:22:7f:70:93:a8:cc:ee:cd:d8:34:
d1:91:61:a3:b6:1c:29:7a:d0:29:0e:c9:9f:85:90:e1:2d:82:
2b:22:54:74:09:6f:1b:f9:88:09:4d:b4:38:02:35:9f:dd:1a:
eb:d6:bb:80:a2:f8:01:81:52:33:81:38:f5:d5:54:66:37:1e:
ec:c7:e5:20:51:da:34:fd:88:63:57:ac:3b:3c:cd:e9:d6:b5:
05:d0:51:3a:1b:0a:3d:63:42:37:fd:63:80:db:4e:7a:b3:19:
26:c0:b1:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:11:28 2026 by rpki-client