
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/963d4056-3f23-44ec-b1f1-7cd94eb68a9d/4fb4a668-4879-3920-94d4-e77fcb9e27ad.roa
File: 4fb4a668-4879-3920-94d4-e77fcb9e27ad.roa (raw, json)
Hash identifier: Q1RhMEXHNavD9OsIWeCYFxU8D9cYyITi7oIrEXWCBLs=
Subject key identifier: B6:29:C9:4A:32:39:85:FC:7B:0F:FB:B3:4F:75:83:D4:D9:5E:2A:4D
Certificate issuer: /CN=963d4056-3f23-44ec-b1f1-7cd94eb68a9d
Certificate serial: 010D0C9F4328584CD186123C8492577C91CB9580
Authority key identifier: C3:0E:F9:11:90:2F:AD:35:85:5D:50:D3:51:35:00:EC:1F:0F:4D:55
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/963d4056-3f23-44ec-b1f1-7cd94eb68a9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/963d4056-3f23-44ec-b1f1-7cd94eb68a9d/4fb4a668-4879-3920-94d4-e77fcb9e27ad.roa
Signing time: Tue 10 Feb 2026 16:28:43 +0000
ROA not before: Tue 10 Feb 2026 16:28:43 +0000
ROA not after: Mon 11 May 2026 15:28:43 +0000
asID: 18672
IP address blocks: 72.172.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/963d4056-3f23-44ec-b1f1-7cd94eb68a9d/963d4056-3f23-44ec-b1f1-7cd94eb68a9d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/963d4056-3f23-44ec-b1f1-7cd94eb68a9d/963d4056-3f23-44ec-b1f1-7cd94eb68a9d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/963d4056-3f23-44ec-b1f1-7cd94eb68a9d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:d1:86:12:3c:84:92:57:7c:91:cb:95:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=963d4056-3f23-44ec-b1f1-7cd94eb68a9d
Validity
Not Before: Feb 10 16:28:43 2026 GMT
Not After : May 11 15:28:43 2026 GMT
Subject: CN=1cf29bbb-17d4-4296-b2e5-467e45ecd4d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:05:3e:fa:ee:8a:18:ad:90:b5:6b:4a:76:e3:
69:7a:90:ea:58:75:69:87:e2:e6:23:45:50:3a:d4:
94:7f:0f:b3:f0:e3:47:6d:6f:a1:be:a0:b5:9a:cc:
59:d4:70:bc:af:f2:f1:34:29:eb:ec:f4:a3:4a:d3:
6b:d1:2b:ed:bc:7c:4c:26:51:a7:6d:0f:f7:6f:69:
c8:6b:9a:1d:0c:27:01:ae:5d:46:31:57:ae:64:67:
e8:35:97:37:2b:3e:da:e5:a1:41:80:25:af:f0:4b:
05:fd:4a:d4:63:fa:06:0b:1c:ae:96:a6:71:6b:23:
c3:09:fd:ee:6a:97:1e:f4:97:f4:ed:de:00:49:d1:
95:82:dd:55:42:cf:5e:94:03:94:5c:12:c7:9a:ce:
eb:9d:aa:01:79:19:4f:2d:ed:7f:59:6f:48:df:fa:
63:3f:c1:82:6f:ee:84:23:d4:d3:b1:ab:0c:00:b3:
16:99:b7:94:fd:55:61:30:32:04:29:52:b8:52:a4:
fd:75:f0:47:d5:4e:50:70:89:64:7e:47:8e:cf:a8:
d6:82:e3:63:58:f6:39:74:a1:d2:12:f5:9a:ec:bc:
c9:83:f9:44:66:c2:f4:91:d9:53:c4:a2:80:42:4c:
89:0b:96:e3:e2:90:b6:c2:5c:0a:2b:1e:12:06:69:
29:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:29:C9:4A:32:39:85:FC:7B:0F:FB:B3:4F:75:83:D4:D9:5E:2A:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/963d4056-3f23-44ec-b1f1-7cd94eb68a9d/4fb4a668-4879-3920-94d4-e77fcb9e27ad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/963d4056-3f23-44ec-b1f1-7cd94eb68a9d/963d4056-3f23-44ec-b1f1-7cd94eb68a9d.crl
X509v3 Authority Key Identifier:
keyid:C3:0E:F9:11:90:2F:AD:35:85:5D:50:D3:51:35:00:EC:1F:0F:4D:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/963d4056-3f23-44ec-b1f1-7cd94eb68a9d.cer
sbgp-ipAddrBlock: critical
IPv4:
72.172.87.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:74:a4:e5:06:ce:81:86:b4:b3:8d:c7:c7:12:14:cf:5b:1d:
42:f6:f9:10:25:99:4d:6a:bc:e7:fa:2d:10:e2:3f:43:e8:84:
18:9d:9e:f3:7b:0c:48:ba:e6:d8:4f:a4:a4:54:d9:08:1a:84:
ad:19:62:6d:a2:f9:fb:3f:42:74:c1:bf:55:56:45:cd:7a:4f:
a6:76:60:f1:56:f2:14:f2:bd:09:4e:54:3c:2a:cc:43:79:66:
f4:70:f2:c5:d8:8c:d6:bd:23:6d:9a:88:73:2b:b5:2f:4c:5c:
e0:01:38:0b:6b:7d:d0:a0:79:1f:41:50:43:4d:f3:1e:8f:b0:
01:f9:39:59:58:a4:a6:e3:5e:67:43:b2:21:8c:4f:0f:a3:90:
0e:99:4a:d5:d5:21:05:89:67:5d:aa:92:c6:c0:39:c4:71:3a:
84:06:4c:31:cb:7a:bd:d0:5b:e4:a9:5b:ea:65:2a:52:af:e6:
c0:48:ff:57:bd:0a:22:1c:f9:4a:fb:7f:9d:73:e0:67:86:62:
a1:7d:c1:31:db:76:ba:0a:aa:dd:27:1b:da:71:08:ff:94:ff:
27:28:95:b5:5c:67:45:bc:ee:6e:54:5d:23:3c:7c:bc:b5:84:
96:0f:a6:8d:b3:22:0b:23:fe:17:df:46:1b:76:ef:e8:b0:e3:
d0:61:e4:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:21:15 2026 by rpki-client