
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/dff6c352-5a2e-3c9d-9106-e566d14b99b6.roa
File: dff6c352-5a2e-3c9d-9106-e566d14b99b6.roa (raw, json)
Hash identifier: xQBPOWqi69QFYcCLu+Qvsb0WvluuoeacWqTAN7/6rTc=
Subject key identifier: 75:1A:E0:5A:04:5A:21:DB:F0:A5:16:25:47:E5:04:8F:96:89:50:E1
Certificate issuer: /CN=9a696f17-cb36-4b2b-be82-47f0c467096d
Certificate serial: 010D0C9F4328584D4A8FB06FBDD58CECCEC62640
Authority key identifier: 38:65:43:C4:A4:97:8B:F1:CC:D7:67:C1:50:02:FE:EF:BC:D4:AE:80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/dff6c352-5a2e-3c9d-9106-e566d14b99b6.roa
Signing time: Thu 26 Mar 2026 01:00:32 +0000
ROA not before: Thu 26 Mar 2026 01:00:32 +0000
ROA not after: Wed 24 Jun 2026 01:00:32 +0000
asID: 46632
IP address blocks: 96.45.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/9a696f17-cb36-4b2b-be82-47f0c467096d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/9a696f17-cb36-4b2b-be82-47f0c467096d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:4a:8f:b0:6f:bd:d5:8c:ec:ce:c6:26:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a696f17-cb36-4b2b-be82-47f0c467096d
Validity
Not Before: Mar 26 01:00:32 2026 GMT
Not After : Jun 24 01:00:32 2026 GMT
Subject: CN=67b616bc-1503-444a-bdcd-899eb99c43f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:02:b0:ed:4d:2d:fc:3e:aa:4b:b2:05:fa:1c:
9e:c7:2f:7f:b5:f1:fd:ea:68:e4:da:d4:e6:69:57:
14:26:e4:14:2f:d0:ef:ae:4d:85:5e:60:c0:b1:bb:
43:49:b7:57:8b:a9:74:ce:f6:37:cf:99:db:a3:e4:
71:90:5f:0d:7b:1b:13:f4:b9:eb:13:cd:59:c5:fe:
28:e9:5f:92:cb:7f:fc:8f:b1:f5:d0:15:29:e7:9c:
d8:12:b3:2b:84:c4:03:7d:7c:e7:e1:2e:78:9d:fa:
37:a2:7a:75:9b:4d:3c:a1:f0:e7:14:26:e1:31:d1:
56:c1:61:a4:b8:6a:32:9a:c1:32:54:4b:c6:e9:69:
78:99:f9:53:3d:14:d2:6b:e4:e5:4f:1a:54:e1:38:
73:54:88:33:a0:db:79:db:00:3a:fc:b7:c4:38:b6:
b8:b2:d9:88:b4:a7:ab:56:10:53:0a:85:13:79:11:
ae:9c:68:f3:ec:2d:f9:ae:01:88:2e:9f:03:d1:a4:
58:33:b9:db:30:55:fa:6f:2c:68:5e:17:ab:c4:54:
cc:fb:2f:d1:b1:46:ac:fa:62:09:a1:4b:b3:71:37:
35:70:08:bc:d8:2c:0c:5c:4a:8b:c8:07:d9:90:28:
44:1e:23:31:66:54:88:9d:f2:70:a0:96:1d:b1:f0:
c3:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:1A:E0:5A:04:5A:21:DB:F0:A5:16:25:47:E5:04:8F:96:89:50:E1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/dff6c352-5a2e-3c9d-9106-e566d14b99b6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/9a696f17-cb36-4b2b-be82-47f0c467096d.crl
X509v3 Authority Key Identifier:
keyid:38:65:43:C4:A4:97:8B:F1:CC:D7:67:C1:50:02:FE:EF:BC:D4:AE:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d.cer
sbgp-ipAddrBlock: critical
IPv4:
96.45.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:2e:a7:27:57:7c:8a:f4:70:ec:40:a8:1f:54:c3:54:02:65:
29:1e:9a:df:64:88:98:68:f2:10:ba:54:41:11:c7:f7:70:39:
ff:d8:4b:34:84:cc:2d:f9:56:2d:3c:71:07:8f:fb:d9:26:2a:
72:13:43:ff:b1:38:75:aa:bf:a4:cc:a5:8c:77:28:2f:92:ec:
d5:ae:ae:d5:ad:bd:62:db:dc:54:ab:9a:a7:07:7b:98:cb:2a:
38:7a:d3:e8:d3:fb:b4:f1:d9:6a:dc:59:fd:d8:b8:61:0a:7a:
b5:05:2c:1b:e1:39:be:c6:ad:9f:bd:24:37:c7:93:52:e0:8c:
47:5b:e3:b7:3e:e3:45:4c:2f:77:bd:37:53:14:b5:c1:34:81:
23:d9:a3:f0:b1:60:66:f0:79:cf:aa:1a:63:60:6f:68:99:ab:
07:77:f7:43:b2:c7:f9:81:37:eb:b5:b3:47:45:11:19:1c:c9:
43:11:0b:87:bf:c4:89:5c:6b:97:10:72:9a:9b:32:d6:23:13:
8c:11:75:76:9b:70:02:dd:47:07:6b:87:2b:c7:49:9a:69:4c:
d5:e5:02:e1:ee:6c:8b:4d:3e:22:f6:f5:5f:39:a9:bc:bb:89:
10:73:68:73:24:f7:f1:e7:34:cd:ac:7b:3e:54:c3:b9:92:c6:
81:f0:d4:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:35:53 2026 by rpki-client