
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/4a8f44c2-2408-33dc-84a6-dcc034360053.roa
File: 4a8f44c2-2408-33dc-84a6-dcc034360053.roa (raw, json)
Hash identifier: t/SZXLeAJN/ej0DV1nM0sA4N4mguat1Q4d+Em2ST5GY=
Subject key identifier: 0C:48:70:35:0A:F7:1C:94:BC:C0:D1:EF:57:FE:70:D5:16:1E:63:1E
Certificate issuer: /CN=c3927d26-c229-496a-8940-c88a834f5196
Certificate serial: 010D0C9F4328584CF2BCF8D17026BBA7A50D2480
Authority key identifier: DE:20:BB:65:C8:A2:DD:8C:6D:02:8C:C9:24:31:D9:0C:60:C5:E7:5A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/4a8f44c2-2408-33dc-84a6-dcc034360053.roa
Signing time: Sun 22 Feb 2026 14:00:41 +0000
ROA not before: Sun 22 Feb 2026 14:00:41 +0000
ROA not after: Sat 23 May 2026 13:00:41 +0000
asID: 12119
IP address blocks: 209.128.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/c3927d26-c229-496a-8940-c88a834f5196.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/c3927d26-c229-496a-8940-c88a834f5196.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:f2:bc:f8:d1:70:26:bb:a7:a5:0d:24:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3927d26-c229-496a-8940-c88a834f5196
Validity
Not Before: Feb 22 14:00:41 2026 GMT
Not After : May 23 13:00:41 2026 GMT
Subject: CN=b228e863-0ebc-48ea-be37-6ab4746800d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8b:31:18:09:48:e2:00:9a:12:9f:22:64:15:
aa:f0:23:73:54:f1:8e:75:57:88:c1:9d:b2:e8:1a:
b5:11:53:43:9d:37:af:14:ac:3e:bd:ed:03:d2:b8:
86:1c:74:ac:1c:78:35:8d:52:f9:67:70:ea:46:c3:
1b:10:d1:1f:49:75:43:53:65:e0:15:0f:66:ee:b6:
05:9f:56:59:73:6e:ed:3d:0b:40:66:a0:9f:ef:05:
95:4d:61:fc:60:c5:d0:53:4d:05:72:ec:0e:e6:32:
09:16:75:36:89:ef:9c:a2:d4:a2:48:0e:5e:ac:6e:
b8:ce:82:09:13:a6:cc:1b:3f:8d:a7:8f:4c:f2:5a:
1c:2a:68:b8:60:bb:cf:0a:04:20:b6:ca:68:4b:1e:
a7:97:57:63:b6:62:a2:c5:a4:e9:77:5b:eb:41:0e:
9b:1b:49:34:f1:81:1e:ae:65:6b:d2:7d:95:eb:eb:
1a:89:a8:0f:12:f8:de:11:9a:62:e7:a3:80:e0:64:
cb:bd:a7:0a:5b:11:1e:99:3f:0d:2b:6d:0d:e8:6f:
be:49:19:0f:f3:12:b8:9b:75:45:da:79:aa:b5:20:
a0:47:b2:a4:45:20:1f:bb:f6:90:a0:e1:6b:5b:11:
ef:aa:4b:fd:d0:18:dc:41:e2:c3:d1:f4:c7:db:3f:
0e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:48:70:35:0A:F7:1C:94:BC:C0:D1:EF:57:FE:70:D5:16:1E:63:1E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/4a8f44c2-2408-33dc-84a6-dcc034360053.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/c3927d26-c229-496a-8940-c88a834f5196.crl
X509v3 Authority Key Identifier:
keyid:DE:20:BB:65:C8:A2:DD:8C:6D:02:8C:C9:24:31:D9:0C:60:C5:E7:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196.cer
sbgp-ipAddrBlock: critical
IPv4:
209.128.192.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
de:fc:4c:65:08:00:23:92:03:ae:3f:2e:46:15:bf:1b:b8:df:
31:f1:a5:38:86:a2:8d:99:a9:92:85:81:d2:76:b3:98:12:fc:
2a:35:25:5e:9f:57:31:d5:92:c9:4d:74:c2:70:2e:86:df:28:
7a:07:d6:73:cd:c3:b3:30:e8:de:0f:0b:b4:61:93:f9:e8:be:
83:ab:ef:28:96:59:8b:b4:db:05:e7:6c:87:c3:36:a3:7d:47:
88:5c:96:d2:46:16:9b:63:69:e0:6b:3b:01:3f:d1:cd:32:a2:
e7:08:10:a0:c7:62:1d:e1:d6:bd:86:c4:62:01:2c:03:7d:4b:
b5:b4:2c:e0:13:8e:e0:10:95:d8:46:a9:5f:55:66:ca:1b:05:
95:ee:a7:63:0b:01:52:2c:26:5e:71:ea:f5:94:ca:bc:11:aa:
24:9c:c7:16:27:b7:8b:d9:03:78:82:0d:2f:c7:08:f8:8d:3d:
20:e7:68:d7:24:25:d3:7c:a7:fc:84:c8:9a:1f:08:1b:f9:c0:
ab:c7:cd:d2:88:3b:06:75:87:46:1d:b1:6a:26:dc:20:1e:8d:
07:6b:03:55:df:05:43:dd:53:c0:4c:69:95:c5:af:f0:d2:de:
0b:bb:a5:7c:92:6c:fc:55:c6:1c:07:a5:e6:75:6b:ba:24:8f:
bc:c8:f3:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:07:19 2026 by rpki-client