
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/db7a50d6-c710-3f6a-bf6a-bc61270c28ae.roa
File: db7a50d6-c710-3f6a-bf6a-bc61270c28ae.roa (raw, json)
Hash identifier: oRxWCug9AeTvuPeyoOSWEmJDUu5esFm/+pEXgxffCYo=
Subject key identifier: AB:BE:9C:8B:A9:89:90:87:68:F1:E6:03:2C:0E:87:E8:61:5C:9B:2C
Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial: 010D0C9F4328584CDF324B3F006B74995C4C1A40
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/db7a50d6-c710-3f6a-bf6a-bc61270c28ae.roa
Signing time: Sun 15 Feb 2026 14:00:41 +0000
ROA not before: Sun 15 Feb 2026 14:00:41 +0000
ROA not after: Sat 16 May 2026 13:00:41 +0000
asID: 401783
IP address blocks: 209.101.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:df:32:4b:3f:00:6b:74:99:5c:4c:1a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
Validity
Not Before: Feb 15 14:00:41 2026 GMT
Not After : May 16 13:00:41 2026 GMT
Subject: CN=65a24d5f-2ae6-4782-9cf1-bf45ee8b6519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:75:df:e1:60:9b:d8:9d:a3:72:9e:72:b5:9c:
ba:0a:84:d7:1e:73:86:1a:14:c2:23:aa:cc:5b:db:
5f:6b:bd:1e:20:9e:02:d0:90:be:63:3d:9c:62:71:
16:24:3a:9e:94:f5:3a:6c:de:c4:e6:ea:61:d4:83:
7d:5b:38:58:0d:ff:72:f3:e3:0f:fc:a1:89:ea:bb:
d9:d1:20:6e:53:a8:cf:76:df:60:86:46:7c:7f:f0:
66:43:11:6f:50:3a:4e:4a:c9:48:39:3c:ee:41:71:
53:b9:44:05:e7:90:c5:97:19:3a:dd:9e:92:d2:92:
59:a5:ac:65:36:29:0b:b0:26:0d:7f:c5:31:a2:b6:
ab:1a:7d:f0:46:c3:b9:8b:75:88:ea:f2:c2:39:c5:
7a:0a:6c:e4:13:5e:af:eb:98:83:c5:cb:d6:43:ab:
be:38:da:e3:1c:5f:dc:d7:fb:9e:fb:7f:5b:36:96:
de:a3:22:d7:ac:14:87:92:e7:b6:d5:62:9a:5b:d3:
6b:e4:98:11:7d:8e:9c:22:72:c1:e1:1b:f8:ce:1f:
48:9d:fd:d4:c5:a9:ea:0b:cb:db:0a:93:b6:65:6b:
c8:43:ca:f7:4d:b8:4b:38:f6:73:7b:67:52:ee:3b:
31:5c:58:f5:f2:3d:ef:f8:f5:51:30:70:99:30:b5:
b8:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:BE:9C:8B:A9:89:90:87:68:F1:E6:03:2C:0E:87:E8:61:5C:9B:2C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/db7a50d6-c710-3f6a-bf6a-bc61270c28ae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
X509v3 Authority Key Identifier:
keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
sbgp-ipAddrBlock: critical
IPv4:
209.101.120.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:99:b6:73:e7:c5:30:2a:a0:d4:a5:c7:59:63:45:c0:8b:cb:
f4:70:5f:1d:d1:06:7a:50:77:67:dc:5f:7c:10:b3:bf:31:53:
64:97:dd:f3:b3:25:7f:fb:c8:06:9c:a3:b7:48:b2:37:37:7c:
93:a9:cf:88:2b:0f:5a:5c:97:33:c4:73:cc:e5:87:bb:3c:3f:
d2:a0:78:68:fb:53:f3:e7:e9:9b:a2:ed:13:31:74:c6:ee:27:
e4:2e:8d:2e:af:b9:35:ea:c3:87:1e:a4:50:16:34:3f:c9:96:
e6:f5:84:3f:e6:cb:c4:ff:7a:ba:c0:f6:e0:c8:fe:8f:17:51:
2b:0a:15:15:aa:ad:23:a9:d5:c7:6f:85:c2:6e:42:12:90:bb:
f8:aa:b2:fa:48:9d:e7:58:b7:21:26:45:24:26:40:a2:77:ce:
69:a4:04:b5:b5:4d:ef:64:d1:e2:72:42:af:67:b2:fd:a2:ab:
83:c5:bf:46:5c:db:40:96:18:79:3d:28:0a:d9:11:c7:e8:6a:
74:45:e3:b7:df:41:08:4f:49:c0:0f:c2:3c:48:56:98:22:25:
02:b1:0d:d3:02:30:71:e6:96:d9:af:49:e4:8b:a6:5b:4c:f1:
69:6a:37:87:1a:0d:06:87:e9:fb:d6:98:b5:63:86:44:18:6a:
be:b6:39:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:24:48 2026 by rpki-client