
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/6a0785a5-6b8b-33f0-8764-0f2543de502f.roa
File: 6a0785a5-6b8b-33f0-8764-0f2543de502f.roa (raw, json)
Hash identifier: YS8IquqrZnYdE+mjIPUy8j6YTpoIR4tIlROUAY1x1f4=
Subject key identifier: 5D:3D:0D:D4:74:8B:4A:BA:EA:06:B0:01:31:40:63:19:06:B9:31:D4
Certificate issuer: /CN=d96ea6e4-95a3-4508-8c2f-046aed988ebe
Certificate serial: 010D0C9F4328584D7B5BADBECBFA604DAC967BC0
Authority key identifier: E2:C3:95:94:85:FF:09:28:A1:8D:8A:F5:AB:7A:C9:0A:D6:AF:D3:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/6a0785a5-6b8b-33f0-8764-0f2543de502f.roa
Signing time: Sun 12 Apr 2026 12:30:43 +0000
ROA not before: Sun 12 Apr 2026 12:30:43 +0000
ROA not after: Sat 11 Jul 2026 12:30:43 +0000
asID: 47069
IP address blocks: 23.167.8.0/24 maxlen: 24
162.222.132.0/22 maxlen: 24
2602:f9df::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/d96ea6e4-95a3-4508-8c2f-046aed988ebe.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/d96ea6e4-95a3-4508-8c2f-046aed988ebe.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:7b:5b:ad:be:cb:fa:60:4d:ac:96:7b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d96ea6e4-95a3-4508-8c2f-046aed988ebe
Validity
Not Before: Apr 12 12:30:43 2026 GMT
Not After : Jul 11 12:30:43 2026 GMT
Subject: CN=dcd9bfa9-8024-448e-8786-0ef22f047f68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e5:88:78:0c:31:9d:2a:b9:2b:44:40:fc:8a:
0f:10:80:7c:af:17:b4:9e:a8:42:42:54:e4:f2:c3:
61:80:4f:26:47:1c:fb:ec:4a:2e:fb:0e:0d:f0:e9:
95:c9:7d:cf:6e:63:3b:ef:8f:99:78:f3:8b:25:f8:
92:ab:9e:dd:4f:b8:f1:22:49:c9:67:41:4a:de:4a:
15:4e:25:51:76:aa:31:43:b3:f6:36:a3:05:5b:b6:
db:15:ff:e9:e8:6c:ba:29:8c:ab:4e:4c:27:81:64:
c8:3a:76:5e:e5:b6:d5:d6:ff:25:08:29:40:3b:ce:
ef:81:28:ee:7f:55:94:58:38:97:82:d6:4e:87:d4:
e5:03:c5:08:88:82:3e:43:fc:30:1b:68:38:a3:b5:
2e:97:33:9e:5c:f5:ee:2f:db:02:cc:d2:97:b2:a3:
a4:7b:f6:5c:27:a8:72:69:76:a4:62:24:36:88:3e:
65:c0:8e:d5:cd:d6:1f:06:00:ea:40:69:90:31:b1:
2c:ee:87:26:67:4d:b7:86:f7:6d:81:e7:91:47:39:
de:0f:58:6c:63:0a:75:58:db:80:93:ef:5a:f6:ec:
cf:ee:51:84:79:9d:b5:87:44:01:4e:93:e8:94:6c:
74:a7:81:6c:42:00:ba:ae:ce:34:a5:33:6d:eb:3f:
44:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:3D:0D:D4:74:8B:4A:BA:EA:06:B0:01:31:40:63:19:06:B9:31:D4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/6a0785a5-6b8b-33f0-8764-0f2543de502f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/d96ea6e4-95a3-4508-8c2f-046aed988ebe.crl
X509v3 Authority Key Identifier:
keyid:E2:C3:95:94:85:FF:09:28:A1:8D:8A:F5:AB:7A:C9:0A:D6:AF:D3:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe.cer
sbgp-ipAddrBlock: critical
IPv4:
23.167.8.0/24
162.222.132.0/22
IPv6:
2602:f9df::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:23:6d:59:56:1c:bb:6f:4a:06:49:07:24:7d:c7:29:33:44:
cc:45:be:72:12:6a:06:01:79:af:a8:39:77:13:65:94:9a:d4:
05:22:ec:49:ad:81:1b:ee:b6:14:3f:4c:7c:bd:39:9b:0b:12:
38:48:26:6f:0e:da:47:5c:27:30:c5:64:a8:e2:c6:d6:2e:5c:
dd:7d:2a:b5:b0:8b:e4:91:79:15:d4:ec:9d:cf:cb:d1:51:c9:
3b:83:ab:be:c5:ba:3c:d9:05:27:a3:6f:72:1d:99:ea:4c:0e:
bc:12:25:09:f9:1d:a2:02:40:79:28:56:36:7b:6b:9b:2b:90:
3d:b1:fd:d4:c4:70:cd:33:f4:c7:fa:d8:58:01:2d:d7:61:9a:
95:ad:d1:32:ea:90:aa:7e:7f:a7:bc:fe:1c:46:07:d6:4e:ac:
ab:cc:6c:3f:ad:fd:c9:9d:7f:9a:69:c8:4f:f9:d7:d9:13:f3:
3c:9a:3b:93:b4:93:98:1b:30:3b:b8:5f:25:5b:ed:2e:5b:da:
6f:b8:d6:6d:7f:40:27:f1:55:f5:ac:e0:f6:f5:9a:10:b1:f9:
7f:39:77:d8:69:a8:11:0b:78:77:6d:e2:b4:44:f2:09:18:ad:
14:1e:c3:90:ca:bb:71:95:19:4d:3e:57:5c:e6:b8:c1:98:13:
40:ae:81:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:59:31 2026 by rpki-client