
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/96c0989f-ec33-3ac7-a4e2-b9dce2b8ad64.roa
File: 96c0989f-ec33-3ac7-a4e2-b9dce2b8ad64.roa (raw, json)
Hash identifier: n+XnfhlWOshvi129dIkG7/hQ1k+jkiSnHf7YgyBExwQ=
Subject key identifier: 77:BA:05:13:75:7C:48:A6:95:53:98:B8:2C:88:E7:47:F2:1A:47:E1
Certificate issuer: /CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
Certificate serial: 010D0C9F4328584CC1E1D30B2F1AF1265D8CECB8
Authority key identifier: 84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/96c0989f-ec33-3ac7-a4e2-b9dce2b8ad64.roa
Signing time: Thu 05 Feb 2026 02:00:31 +0000
ROA not before: Thu 05 Feb 2026 02:00:31 +0000
ROA not after: Wed 06 May 2026 01:00:31 +0000
asID: 12025
IP address blocks: 72.44.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 04:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:c1:e1:d3:0b:2f:1a:f1:26:5d:8c:ec:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
Validity
Not Before: Feb 5 02:00:31 2026 GMT
Not After : May 6 01:00:31 2026 GMT
Subject: CN=679c3d30-7132-479d-b012-aee4ebc93c55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5d:f8:49:fb:21:f7:03:e4:6f:af:47:26:19:
c0:a0:06:f8:ad:a3:a9:db:bf:a7:0b:fc:a5:1c:1c:
66:2b:a6:f7:a7:72:81:3c:a7:c1:a3:65:1c:f2:8f:
d0:a8:e6:9e:4f:f7:58:50:38:98:50:a7:80:00:94:
40:37:0a:ec:43:3e:6e:12:bd:e9:26:73:08:4f:54:
66:a0:5d:56:b3:21:c6:1b:e8:ba:93:06:54:75:88:
b1:36:61:df:f3:f3:79:c8:d5:56:72:61:5d:af:c2:
51:ed:7e:14:29:63:24:7a:39:16:94:0d:43:d1:c7:
d9:c8:e8:51:ef:40:28:17:4a:ef:a2:65:51:36:70:
73:24:57:39:37:ce:3d:93:2e:65:0c:ad:36:51:a7:
b3:ee:77:fd:6d:32:0a:66:d5:a3:cf:04:6e:e4:ca:
b4:1d:90:e1:e4:f0:f5:2b:1e:2c:c1:c4:28:11:a1:
77:6f:23:82:a3:6d:8a:67:c6:5f:e4:8c:f1:45:13:
4a:b0:58:df:c9:90:77:d8:ff:53:6f:06:64:be:58:
4c:be:88:28:d9:91:7a:f0:dd:cd:3b:f5:4e:9d:3f:
41:c1:60:9d:ed:83:21:82:7b:1d:d9:5e:b2:19:85:
2a:24:0b:bb:ee:9a:80:28:0c:68:e5:38:55:ea:1b:
35:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:BA:05:13:75:7C:48:A6:95:53:98:B8:2C:88:E7:47:F2:1A:47:E1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/96c0989f-ec33-3ac7-a4e2-b9dce2b8ad64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl
X509v3 Authority Key Identifier:
keyid:84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
sbgp-ipAddrBlock: critical
IPv4:
72.44.221.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:0e:55:b9:60:e1:ec:66:1b:2f:b9:fe:9e:cb:e9:58:a4:07:
0d:7b:53:be:e9:05:39:57:7e:39:2e:98:cc:36:66:0c:84:b1:
0c:c4:d3:ff:27:ce:28:24:c7:07:15:f1:00:08:8a:2b:33:ce:
fe:39:84:c0:f3:70:25:4b:d7:13:22:19:7f:ae:11:0f:c2:6d:
fd:b4:19:86:3c:ac:90:91:1e:24:6e:18:44:3c:db:08:72:03:
27:73:69:75:c5:b6:f4:da:fb:cb:a8:9a:3c:c2:52:aa:ae:31:
c8:bd:96:16:97:7a:a1:72:7c:fb:8a:e3:cc:a8:e0:bc:66:3f:
2e:59:b6:df:74:8a:36:ed:06:5f:5d:d8:8c:8f:eb:9f:b3:41:
ff:ca:86:03:e7:f4:81:b8:27:4c:af:d5:42:56:43:1d:50:25:
89:3f:4b:1c:d9:fd:22:76:9b:04:99:65:0e:76:b8:c3:0f:64:
ac:41:93:0a:eb:83:cb:f8:ba:aa:02:f5:d4:98:55:03:7e:ad:
cb:77:e5:f6:1e:91:1e:8b:ca:61:d4:9a:b0:3c:11:dc:0c:9d:
64:b9:9c:27:56:d5:b2:ff:fd:44:47:da:ea:6c:c7:65:35:f7:
57:08:d9:52:d2:a0:12:b4:58:37:2b:92:cd:9e:2b:a1:51:58:
34:4f:36:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:48:12 2026 by rpki-client