
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a60bbee-04d5-4806-9055-a09c70ce8f2b/ae8c8fa6-957c-379d-8e86-602baa8282b0.roa
File: ae8c8fa6-957c-379d-8e86-602baa8282b0.roa (raw, json)
Hash identifier: 8xD5yCodm3+/VbXrsMMOSPN2S5hoQGKUibbRnTb7uY8=
Subject key identifier: 74:66:83:98:72:CD:81:F5:30:6C:D7:13:C2:EF:A4:54:0D:A5:9B:31
Certificate issuer: /CN=4a60bbee-04d5-4806-9055-a09c70ce8f2b
Certificate serial: 010D0C9F4328584D00B26FEC3BD9F3C3BA4C5AE0
Authority key identifier: BA:C0:A5:A5:2B:19:03:F8:61:E2:8B:40:F8:72:6A:05:E7:34:8D:95
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a60bbee-04d5-4806-9055-a09c70ce8f2b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a60bbee-04d5-4806-9055-a09c70ce8f2b/ae8c8fa6-957c-379d-8e86-602baa8282b0.roa
Signing time: Fri 27 Feb 2026 14:00:40 +0000
ROA not before: Fri 27 Feb 2026 14:00:40 +0000
ROA not after: Thu 28 May 2026 13:00:40 +0000
asID: 16509
IP address blocks: 199.4.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a60bbee-04d5-4806-9055-a09c70ce8f2b/4a60bbee-04d5-4806-9055-a09c70ce8f2b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a60bbee-04d5-4806-9055-a09c70ce8f2b/4a60bbee-04d5-4806-9055-a09c70ce8f2b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a60bbee-04d5-4806-9055-a09c70ce8f2b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:00:b2:6f:ec:3b:d9:f3:c3:ba:4c:5a:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a60bbee-04d5-4806-9055-a09c70ce8f2b
Validity
Not Before: Feb 27 14:00:40 2026 GMT
Not After : May 28 13:00:40 2026 GMT
Subject: CN=39f2623d-6714-47eb-9fa4-41d667549ed7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:4a:35:20:b8:7a:e8:be:53:e2:65:73:30:54:
0d:1c:25:1f:32:63:8c:3a:b8:37:ea:9c:c7:93:7d:
de:c9:19:bc:bc:0c:de:c6:9a:b4:2a:52:29:3d:e0:
7c:2d:78:fc:f7:d9:cd:c9:94:38:e2:b5:27:b1:08:
35:c0:b5:88:57:b3:fa:b4:18:78:9e:ac:c0:f5:1a:
f1:81:f8:5c:e6:e9:4c:14:30:8a:33:e6:ef:ea:89:
9b:39:2a:b8:32:cd:08:04:ae:9e:5b:b6:85:4d:33:
b0:75:47:d8:a4:83:e9:ab:64:90:d0:1f:17:2d:a5:
e2:48:28:2e:b3:65:ea:71:81:30:94:80:cd:9e:2b:
20:8a:71:a4:f6:f6:45:66:29:92:8a:86:7c:ca:97:
22:e2:f0:e5:60:f9:9a:f6:3b:eb:1e:9e:fd:01:2a:
eb:ef:44:5b:1c:8b:52:05:8c:c8:8b:43:98:4e:ef:
58:0e:18:3d:5d:36:c9:8b:3a:ef:45:da:8c:4b:f9:
a8:3d:e9:27:8d:13:bf:b1:27:9b:9e:f4:de:a0:e5:
29:a0:11:3c:fa:1a:c0:30:80:97:91:5f:f6:61:f9:
b1:d8:32:b1:29:4f:fc:c5:87:9d:19:5b:c5:5b:d2:
45:b0:47:34:de:7b:0d:33:1a:b3:ea:bc:41:d4:9b:
14:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:66:83:98:72:CD:81:F5:30:6C:D7:13:C2:EF:A4:54:0D:A5:9B:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a60bbee-04d5-4806-9055-a09c70ce8f2b/ae8c8fa6-957c-379d-8e86-602baa8282b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a60bbee-04d5-4806-9055-a09c70ce8f2b/4a60bbee-04d5-4806-9055-a09c70ce8f2b.crl
X509v3 Authority Key Identifier:
keyid:BA:C0:A5:A5:2B:19:03:F8:61:E2:8B:40:F8:72:6A:05:E7:34:8D:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a60bbee-04d5-4806-9055-a09c70ce8f2b.cer
sbgp-ipAddrBlock: critical
IPv4:
199.4.135.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:e8:3b:6d:85:0b:59:2c:ec:20:98:8c:a5:d0:f1:eb:d3:05:
40:93:68:12:b4:01:6d:2b:e3:67:dd:41:29:b0:4c:15:8d:ce:
17:fa:d0:83:16:40:eb:a7:04:30:57:4c:db:d4:be:0d:48:15:
43:a6:3e:3f:7f:d2:8d:7e:5a:0f:1e:81:46:b9:e8:e3:87:ab:
25:f8:9e:5a:e0:a5:3e:cb:19:5f:50:da:f4:b8:ce:f4:dc:6e:
ce:33:e7:6b:bb:69:e2:7e:10:5e:73:94:66:ab:16:e7:41:4f:
62:fa:30:e1:b2:c9:cf:9d:84:d0:9b:f5:0e:6a:7e:5c:14:d9:
7a:7e:d7:3e:2d:a1:0e:3f:22:a9:63:46:93:de:96:3d:83:89:
77:77:b8:e5:cb:21:42:b0:58:69:70:b9:fa:e2:61:f0:dd:8b:
27:51:27:23:02:8d:a7:54:64:de:52:e3:dc:d0:28:99:84:61:
82:2c:ce:c1:3b:73:4e:ff:ae:bf:cb:00:59:ca:81:ad:76:90:
3c:94:19:a4:a1:91:5c:c6:23:f5:b1:da:41:24:00:f2:ce:a1:
5b:c4:9c:00:82:60:cf:3c:96:66:f3:91:27:84:f5:2d:2f:14:
44:76:e7:ff:68:73:ae:b0:71:c8:bf:dc:83:57:9e:43:e3:e1:
ff:bb:6c:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:53:45 2026 by rpki-client