
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/5ba1a4a3-8c3a-456f-a942-0536a41af226/2c3ca624-2acb-3e19-9bc2-bdfa17e5611e.roa
File: 2c3ca624-2acb-3e19-9bc2-bdfa17e5611e.roa (raw, json)
Hash identifier: q9MFij5d1/CNqAwh7E/jOfqfA34vygC/VSMQ/+dqNGw=
Subject key identifier: 9B:E1:E5:2E:AF:AC:BD:8D:69:16:3B:64:25:A0:03:14:9E:BB:34:35
Certificate issuer: /CN=5ba1a4a3-8c3a-456f-a942-0536a41af226
Certificate serial: 010D0C9F4328584CEB787DB7BA74978ED2274080
Authority key identifier: 50:5E:A2:FB:03:73:9B:90:86:E6:4B:31:43:BD:F3:88:02:A1:74:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/5ba1a4a3-8c3a-456f-a942-0536a41af226.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/5ba1a4a3-8c3a-456f-a942-0536a41af226/2c3ca624-2acb-3e19-9bc2-bdfa17e5611e.roa
Signing time: Thu 19 Feb 2026 20:35:30 +0000
ROA not before: Thu 19 Feb 2026 20:35:30 +0000
ROA not after: Wed 20 May 2026 19:35:30 +0000
asID: 29886
IP address blocks: 162.217.48.0/21 maxlen: 21
2604:da80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/5ba1a4a3-8c3a-456f-a942-0536a41af226/5ba1a4a3-8c3a-456f-a942-0536a41af226.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/5ba1a4a3-8c3a-456f-a942-0536a41af226/5ba1a4a3-8c3a-456f-a942-0536a41af226.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/5ba1a4a3-8c3a-456f-a942-0536a41af226.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:eb:78:7d:b7:ba:74:97:8e:d2:27:40:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ba1a4a3-8c3a-456f-a942-0536a41af226
Validity
Not Before: Feb 19 20:35:30 2026 GMT
Not After : May 20 19:35:30 2026 GMT
Subject: CN=02ee0d48-70ed-47fd-bb0f-135199efabf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b7:2e:ee:51:ae:37:bc:e0:c5:e9:27:fd:2d:
5c:ea:f9:b3:c2:49:de:f9:e8:5b:c1:ea:82:16:98:
a7:2f:30:b9:84:1f:4e:64:c5:85:72:3d:f9:66:52:
2a:1c:cd:cc:c5:31:86:df:bf:47:70:f4:25:00:fa:
e0:3b:f9:d2:d4:c2:a2:ad:02:2e:93:28:6f:0a:c3:
57:cb:15:00:3a:32:b3:7c:9c:48:d7:64:76:15:2e:
cd:4e:3a:cf:e4:e6:13:2d:54:d4:e9:3c:f2:44:9c:
04:14:c1:31:62:2c:b5:9c:1b:2e:cb:d9:23:07:9c:
86:e9:5c:41:e7:27:20:83:03:9d:82:7f:8c:74:5f:
4b:12:2a:2c:86:14:1d:1f:5d:96:9f:e2:7b:cc:da:
ab:a3:2e:e3:70:a1:9f:7f:53:96:45:58:bf:3f:ef:
a4:d0:33:e0:e8:e5:fe:b3:43:cb:81:7e:da:23:2d:
f9:72:5a:c6:58:19:5e:02:8d:88:5b:fc:58:bd:c1:
ea:fe:86:29:58:1f:ba:fa:89:68:c7:f4:a6:99:b7:
df:0f:04:72:b1:2e:6b:4c:08:9f:3b:c9:bf:2c:c5:
54:73:15:ac:b0:37:4d:04:ed:57:f0:a5:de:c2:e1:
2f:fe:95:bb:f0:5e:eb:73:57:ce:b7:c0:68:ad:21:
1f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:E1:E5:2E:AF:AC:BD:8D:69:16:3B:64:25:A0:03:14:9E:BB:34:35
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/5ba1a4a3-8c3a-456f-a942-0536a41af226/2c3ca624-2acb-3e19-9bc2-bdfa17e5611e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/5ba1a4a3-8c3a-456f-a942-0536a41af226/5ba1a4a3-8c3a-456f-a942-0536a41af226.crl
X509v3 Authority Key Identifier:
keyid:50:5E:A2:FB:03:73:9B:90:86:E6:4B:31:43:BD:F3:88:02:A1:74:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/5ba1a4a3-8c3a-456f-a942-0536a41af226.cer
sbgp-ipAddrBlock: critical
IPv4:
162.217.48.0/21
IPv6:
2604:da80::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:d9:13:1b:c4:38:7b:c2:03:29:eb:68:f2:fb:b6:6f:31:18:
83:ab:5b:8d:27:de:0a:03:cc:11:58:0f:d5:63:05:33:b5:e7:
44:11:c9:88:98:fd:4f:fe:9e:ca:3f:b9:57:06:12:5f:00:bc:
3f:18:39:dd:14:88:60:d9:9d:a7:bd:5f:36:b0:67:36:0a:10:
79:ae:87:c0:2c:a9:62:27:96:8d:28:9f:c7:68:3e:3b:b9:01:
3b:06:4f:3b:fe:e7:c6:d8:02:96:97:0f:61:d3:b7:34:29:1c:
f9:26:b4:cd:7b:65:a8:4d:75:2d:88:41:8b:c5:35:2b:b6:90:
75:86:04:c5:09:8f:cc:1f:8a:d2:2a:0b:95:54:c9:75:dd:56:
56:ca:7c:e1:a3:42:bc:b1:6e:09:97:7c:4f:bd:1c:bb:30:78:
af:8a:e1:73:db:7e:94:1f:9f:e3:fb:a4:af:1f:29:f3:1a:f7:
e1:71:d2:31:66:bb:2a:c6:95:7f:35:fe:18:26:99:ee:28:f4:
94:02:12:ba:92:0a:42:3b:00:46:9d:ed:62:df:c8:a4:be:71:
50:39:06:99:48:d3:d8:23:c0:da:bf:b1:c0:a6:ca:e4:cc:71:
a7:28:7a:6d:49:86:82:7b:d4:0c:a0:70:c3:d2:99:b7:43:07:
21:60:f4:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:42:13 2026 by rpki-client