
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2e689c55-8453-486f-8b88-f433fba67f55/d12a4c75-b429-30dd-b69a-b38ea72126c0.roa
File: d12a4c75-b429-30dd-b69a-b38ea72126c0.roa (raw, json)
Hash identifier: U5HESYXvO/t/EkiddvCx+CVOVxs9SdI9yO+pHNq5anI=
Subject key identifier: F0:EF:80:BF:8B:87:B1:13:1E:42:78:DA:94:6C:28:C0:C5:68:69:D1
Certificate issuer: /CN=2e689c55-8453-486f-8b88-f433fba67f55
Certificate serial: 010D0C9F4328584CE79225333986D2BBEED00940
Authority key identifier: CA:2D:8E:C3:CC:29:85:C4:8B:25:AE:E0:EB:D5:2D:89:72:73:32:2D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2e689c55-8453-486f-8b88-f433fba67f55.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2e689c55-8453-486f-8b88-f433fba67f55/d12a4c75-b429-30dd-b69a-b38ea72126c0.roa
Signing time: Wed 18 Feb 2026 14:00:41 +0000
ROA not before: Wed 18 Feb 2026 14:00:41 +0000
ROA not after: Tue 19 May 2026 13:00:41 +0000
asID: 26216
IP address blocks: 172.96.24.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2e689c55-8453-486f-8b88-f433fba67f55/2e689c55-8453-486f-8b88-f433fba67f55.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2e689c55-8453-486f-8b88-f433fba67f55/2e689c55-8453-486f-8b88-f433fba67f55.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2e689c55-8453-486f-8b88-f433fba67f55.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:e7:92:25:33:39:86:d2:bb:ee:d0:09:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e689c55-8453-486f-8b88-f433fba67f55
Validity
Not Before: Feb 18 14:00:41 2026 GMT
Not After : May 19 13:00:41 2026 GMT
Subject: CN=7966a160-519e-42cc-93b6-0009eb3600b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:b2:cb:7c:fa:83:02:22:2e:d3:e1:7d:aa:46:
04:c6:88:79:0a:10:85:8e:44:58:e9:d9:85:fc:3a:
3c:b0:c3:09:35:fe:80:30:9f:14:4d:68:5e:4b:aa:
09:fb:8a:13:b3:12:d0:94:1b:18:14:88:70:2e:68:
4a:4c:72:ed:d0:66:c3:7f:89:6d:8d:2a:1c:dd:7d:
cf:f2:19:d9:29:85:b1:31:2a:c1:0a:12:40:6f:4d:
ff:79:3a:1e:46:d4:f5:f0:e3:a2:24:16:2f:3e:37:
6c:9f:fb:21:7c:72:c4:cd:d3:4b:58:95:9a:51:9c:
fa:cb:f8:95:54:9a:35:2d:ce:36:4b:0f:6a:f4:9f:
21:f8:60:60:0d:d5:9d:45:02:4c:3d:43:a6:23:a3:
86:27:ed:99:40:cd:d8:8e:bf:52:e9:58:da:95:84:
15:d4:ae:eb:d6:12:60:d2:8a:32:63:4f:ea:1c:51:
b7:d5:61:13:0f:a9:b5:04:f0:0b:66:e2:5b:f6:93:
0b:86:20:49:7b:0e:34:85:d9:df:ec:c5:0a:dd:21:
c6:65:99:4e:64:2f:36:45:77:db:1e:45:3e:58:4f:
49:c1:a3:f5:fb:12:1e:27:fc:6d:8a:9c:d3:3f:19:
b4:44:58:c4:5e:1d:12:d4:51:2f:6a:85:be:7f:0b:
71:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:EF:80:BF:8B:87:B1:13:1E:42:78:DA:94:6C:28:C0:C5:68:69:D1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2e689c55-8453-486f-8b88-f433fba67f55/d12a4c75-b429-30dd-b69a-b38ea72126c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2e689c55-8453-486f-8b88-f433fba67f55/2e689c55-8453-486f-8b88-f433fba67f55.crl
X509v3 Authority Key Identifier:
keyid:CA:2D:8E:C3:CC:29:85:C4:8B:25:AE:E0:EB:D5:2D:89:72:73:32:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2e689c55-8453-486f-8b88-f433fba67f55.cer
sbgp-ipAddrBlock: critical
IPv4:
172.96.24.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:f3:ac:2f:29:90:56:37:69:70:b3:45:6d:9c:d7:6d:18:00:
7c:13:0c:dd:99:e1:4e:47:8e:93:8e:d6:d2:e6:e6:bd:8b:82:
62:e4:03:73:ba:c5:04:20:da:11:0b:51:d0:e5:f7:c8:5b:b1:
81:81:fb:4f:cd:39:97:61:de:52:84:79:ac:f5:c1:69:3d:1d:
b7:63:aa:69:e9:2a:bc:35:d1:fb:5a:e1:56:7d:8a:b6:2e:5a:
ea:b3:fa:22:4b:ba:86:8a:3c:48:01:e6:fd:6b:36:44:9e:8b:
26:09:a5:5e:69:ca:b6:20:96:9f:d9:7b:df:c5:fd:ea:1c:fe:
db:1d:1d:ae:39:50:8c:71:2c:4e:35:80:c2:f3:30:46:08:d7:
99:65:93:08:8f:13:e6:a4:90:33:97:a3:ee:11:e9:ac:53:f4:
ad:a6:bb:5b:1b:10:bd:0a:a9:b5:e4:e9:18:63:c9:33:19:6c:
97:56:83:62:86:8e:e3:bc:19:f1:a1:29:8e:97:0d:b6:b2:33:
fa:f0:bf:5b:78:5e:1f:bd:29:73:bf:a3:0a:48:bb:cf:bc:e2:
74:4e:0b:81:5f:8b:17:e1:51:ac:b8:43:7c:b3:41:e0:00:be:
02:e7:d1:bd:80:3a:27:e8:79:da:f0:b1:40:f3:97:a5:03:c4:
00:03:4e:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:42:41 2026 by rpki-client