
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/96a2911a-8528-4c3c-bbb5-72bad72f8446/ec9e34a1-2934-39b4-9f3f-0200ab9dfb29.roa
File: ec9e34a1-2934-39b4-9f3f-0200ab9dfb29.roa (raw, json)
Hash identifier: 1EEat2SriVdGyG5XqqYQk9I646YteIvFbz7WwNXC/9U=
Subject key identifier: A4:D0:3D:CE:9B:1C:2B:18:5F:34:CD:AB:47:CF:8C:0D:7D:8B:EC:00
Certificate issuer: /CN=96a2911a-8528-4c3c-bbb5-72bad72f8446
Certificate serial: 010D0C9F4328584CAA26FEBD21F71906B5848C40
Authority key identifier: 4F:3B:92:EF:78:38:C2:10:49:7D:9C:8C:2F:ED:BE:62:A7:B1:C8:1C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/96a2911a-8528-4c3c-bbb5-72bad72f8446.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/96a2911a-8528-4c3c-bbb5-72bad72f8446/ec9e34a1-2934-39b4-9f3f-0200ab9dfb29.roa
Signing time: Tue 27 Jan 2026 14:00:36 +0000
ROA not before: Tue 27 Jan 2026 14:00:36 +0000
ROA not after: Mon 27 Apr 2026 13:00:36 +0000
asID: 394276
IP address blocks: 208.94.208.0/24 maxlen: 24
2602:81b:3000::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/96a2911a-8528-4c3c-bbb5-72bad72f8446/96a2911a-8528-4c3c-bbb5-72bad72f8446.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/96a2911a-8528-4c3c-bbb5-72bad72f8446/96a2911a-8528-4c3c-bbb5-72bad72f8446.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/96a2911a-8528-4c3c-bbb5-72bad72f8446.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:aa:26:fe:bd:21:f7:19:06:b5:84:8c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96a2911a-8528-4c3c-bbb5-72bad72f8446
Validity
Not Before: Jan 27 14:00:36 2026 GMT
Not After : Apr 27 13:00:36 2026 GMT
Subject: CN=1b321e7d-39e5-4b57-84d1-fb3944037018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:dc:95:00:da:2b:7a:63:40:aa:f9:37:ec:01:
49:6a:75:d1:e7:0f:bc:b8:e9:d0:41:95:e3:86:84:
df:3c:a6:8e:f6:66:a8:6b:ec:6d:f3:53:a7:86:94:
c7:51:85:80:08:0c:21:7f:df:48:b3:a8:4e:73:42:
f7:a9:f8:27:f6:eb:d0:bc:be:81:ba:65:0b:47:d2:
ea:a8:a9:e7:29:c6:2a:c7:05:3f:37:bc:6a:e7:d2:
20:f2:dd:01:a4:b3:86:99:d9:27:de:ac:1d:cb:83:
36:fc:f4:a4:49:ba:bc:5d:52:55:ca:89:b7:a9:01:
7f:20:c5:bf:c2:39:00:b7:be:ca:cd:55:89:71:29:
a7:8e:da:06:07:37:83:2a:4c:58:2e:87:0a:17:7d:
d2:92:6a:79:a4:6c:08:de:ab:64:3f:15:46:e9:0c:
8d:88:5f:20:e5:0d:fa:be:58:5d:14:b9:72:bf:a4:
42:ec:f0:3c:3b:e6:de:f2:f7:49:80:db:c7:0e:11:
eb:b7:ac:64:2d:53:bf:49:f8:af:47:b6:6d:8e:c2:
46:cc:0b:31:9f:ac:95:06:25:cf:e6:04:8e:c1:f0:
14:33:cd:29:63:49:20:80:43:1b:91:1a:63:d6:b9:
d1:16:53:5d:5c:76:8d:b9:7e:62:6a:20:ed:c3:f4:
3f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:D0:3D:CE:9B:1C:2B:18:5F:34:CD:AB:47:CF:8C:0D:7D:8B:EC:00
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/96a2911a-8528-4c3c-bbb5-72bad72f8446/ec9e34a1-2934-39b4-9f3f-0200ab9dfb29.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/96a2911a-8528-4c3c-bbb5-72bad72f8446/96a2911a-8528-4c3c-bbb5-72bad72f8446.crl
X509v3 Authority Key Identifier:
keyid:4F:3B:92:EF:78:38:C2:10:49:7D:9C:8C:2F:ED:BE:62:A7:B1:C8:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/96a2911a-8528-4c3c-bbb5-72bad72f8446.cer
sbgp-ipAddrBlock: critical
IPv4:
208.94.208.0/24
IPv6:
2602:81b:3000::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:19:35:67:96:01:75:ed:fb:f7:99:13:78:2c:22:e1:74:38:
7f:2c:78:2d:aa:c7:15:fa:b0:d7:ec:9e:4b:6d:6f:8d:d0:a5:
b3:94:fe:96:91:7c:4d:64:92:5d:e5:36:f9:66:76:3f:29:f8:
ff:24:a6:3e:af:82:c0:42:8b:bd:f1:8f:7e:b9:67:3c:14:1f:
6f:ef:79:28:cc:d5:fd:da:e8:9e:6d:da:1b:d5:69:be:c6:ed:
15:da:69:b5:ac:12:2b:81:f5:44:60:9b:64:d0:cc:1a:19:87:
37:e7:27:1d:ab:c4:4e:28:64:4b:b1:e3:09:9a:ad:24:3d:90:
36:6c:20:71:23:55:6f:16:ec:1a:d9:6a:7c:c5:51:2f:c0:12:
73:57:a6:a5:2a:76:7d:5a:b7:6f:aa:f9:57:66:72:04:02:79:
8d:75:16:a6:75:02:73:8f:ed:9e:d1:b0:12:18:7b:c6:24:33:
54:9a:2c:e0:58:8e:be:66:8d:43:2e:9c:93:e2:d7:42:e1:90:
39:18:2b:53:1b:61:c0:1e:14:61:fb:1a:ac:2b:a7:8d:99:a5:
08:a5:a7:9a:41:d3:fb:4d:07:59:47:ed:e1:dc:09:26:d8:57:
91:40:0a:f6:4a:39:cf:80:5e:4a:cb:15:3d:c2:98:f5:16:d5:
a8:d3:16:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:15:25 2026 by rpki-client