
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/bfb7bfe5-406b-32d9-a1ca-a731af76a95c.roa
File: bfb7bfe5-406b-32d9-a1ca-a731af76a95c.roa (raw, json)
Hash identifier: zh9y4fvNqumAIJ/1HTKt34MJaYJqKjstyico/dCDx9c=
Subject key identifier: C4:C5:A9:6B:FE:69:28:54:02:82:2D:21:FC:9C:6F:2C:68:93:B9:AB
Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0
Certificate serial: 010D0C9F4328584CE1FCBCFFD8232A6B762CC920
Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/bfb7bfe5-406b-32d9-a1ca-a731af76a95c.roa
Signing time: Mon 16 Feb 2026 14:00:40 +0000
ROA not before: Mon 16 Feb 2026 14:00:40 +0000
ROA not after: Sun 17 May 2026 13:00:40 +0000
asID: 16509
IP address blocks: 199.255.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:e1:fc:bc:ff:d8:23:2a:6b:76:2c:c9:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0
Validity
Not Before: Feb 16 14:00:40 2026 GMT
Not After : May 17 13:00:40 2026 GMT
Subject: CN=688726bb-8602-4f9a-8e2c-81bf9d3124bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7a:c0:7f:af:c3:4e:d9:b0:0c:34:e4:42:a3:
e9:7d:f5:47:88:f6:b2:1f:6a:7f:68:24:54:a1:3f:
ac:cb:f4:c1:90:19:36:4f:00:ce:34:fe:05:af:64:
ad:93:df:02:fc:e4:37:a9:0c:89:55:7d:56:ce:b0:
c0:a9:ea:b2:5c:2c:52:22:0e:78:26:ee:7f:67:c4:
a2:3f:c0:38:5f:6b:8e:e8:25:c8:0c:c2:4d:fc:05:
9f:88:17:6e:5d:cb:92:64:6a:3a:ba:b9:9c:76:c2:
8b:7e:91:b2:9f:1b:c7:e6:a9:f0:a7:b3:b9:ec:ff:
f1:da:6b:1b:f7:c6:cf:97:60:72:24:db:57:8b:28:
9b:df:ab:b0:9c:81:a6:cd:16:b0:5b:3e:57:83:51:
13:2c:48:82:b5:64:cd:9d:c7:09:ae:ec:92:cc:32:
9c:dc:f4:aa:88:a3:b3:65:e1:44:f0:7c:25:2a:7f:
b7:fd:ad:4d:cf:27:de:cf:14:34:fb:b9:cc:cc:3d:
57:6d:57:61:f7:16:fb:06:7d:51:ad:f5:f6:98:9f:
d4:4e:ad:7e:c1:12:54:67:df:ff:6e:20:cf:54:2e:
96:dc:bf:a0:39:a3:ae:c4:3e:1f:d4:87:43:2b:a4:
39:ee:99:9c:ae:8c:21:8c:47:58:b0:82:f5:7f:0a:
97:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:C5:A9:6B:FE:69:28:54:02:82:2D:21:FC:9C:6F:2C:68:93:B9:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/bfb7bfe5-406b-32d9-a1ca-a731af76a95c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl
X509v3 Authority Key Identifier:
keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
sbgp-ipAddrBlock: critical
IPv4:
199.255.33.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:3b:c8:ce:63:c6:aa:32:e1:f8:cd:b3:a5:14:0a:61:a3:52:
3d:ff:0d:49:4b:a0:f2:d3:23:4c:d6:03:a3:c5:89:8a:e5:1d:
a7:22:64:bc:ca:10:bd:30:3e:75:b6:6c:71:7f:b7:b9:93:ed:
3d:30:09:1d:51:31:4d:80:de:60:59:4a:0d:ad:68:41:c2:03:
0b:9c:3b:5f:d2:5f:f8:6f:dd:55:b9:86:6e:a2:40:63:01:e5:
28:09:75:ea:c3:2d:63:f6:f9:c3:9d:55:4e:a9:5a:e0:09:e8:
a0:ba:33:fa:3e:c1:f4:02:35:41:09:5b:d2:d1:aa:63:e9:85:
79:4c:19:f4:3d:65:ba:9e:2a:5a:d1:57:62:d2:05:f9:00:b1:
3e:07:b5:fe:ff:2c:66:46:1a:14:6b:fa:cc:5d:bc:dc:2a:15:
b1:75:dd:38:8e:79:c6:58:0e:c6:8e:ad:29:8c:89:d4:5b:75:
64:3a:f3:14:4f:d9:41:d4:4a:c2:46:34:d4:21:22:9b:be:fd:
83:e7:af:c9:6c:6e:49:9c:68:fa:a3:e1:1d:01:df:61:c5:88:
95:f1:ee:f9:aa:8f:10:44:af:b0:31:f9:c3:df:9a:f7:93:8d:
f3:a1:cc:cd:ff:e7:5f:6e:e7:d2:8b:f3:02:fd:44:40:31:7a:
88:6a:fc:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:21:46 2026 by rpki-client