
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dc49520f-d0a0-4d00-a42f-35a1023569ac/c0d47dc4-769b-3ebb-bc78-f3b6986b2133.roa
File: c0d47dc4-769b-3ebb-bc78-f3b6986b2133.roa (raw, json)
Hash identifier: +WvMIlxsbpYr+ZykmJL97KqgLcowIfejYaAjtfLczu8=
Subject key identifier: 4A:B1:78:A9:40:65:6C:D8:BB:D0:D4:04:51:EE:A9:3E:81:B7:32:FD
Certificate issuer: /CN=dc49520f-d0a0-4d00-a42f-35a1023569ac
Certificate serial: 010D0C9F4328584CB551D0F36A7B77D156989100
Authority key identifier: 63:AE:BC:ED:8F:0F:D5:D0:67:C4:92:B1:34:6E:29:97:B7:82:A3:58
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dc49520f-d0a0-4d00-a42f-35a1023569ac.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dc49520f-d0a0-4d00-a42f-35a1023569ac/c0d47dc4-769b-3ebb-bc78-f3b6986b2133.roa
Signing time: Sat 31 Jan 2026 14:00:39 +0000
ROA not before: Sat 31 Jan 2026 14:00:39 +0000
ROA not after: Fri 01 May 2026 13:00:39 +0000
asID: 25776
IP address blocks: 129.15.0.0/16 maxlen: 24
192.35.96.0/24 maxlen: 24
192.35.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dc49520f-d0a0-4d00-a42f-35a1023569ac/dc49520f-d0a0-4d00-a42f-35a1023569ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dc49520f-d0a0-4d00-a42f-35a1023569ac/dc49520f-d0a0-4d00-a42f-35a1023569ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dc49520f-d0a0-4d00-a42f-35a1023569ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 26 Feb 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:b5:51:d0:f3:6a:7b:77:d1:56:98:91:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc49520f-d0a0-4d00-a42f-35a1023569ac
Validity
Not Before: Jan 31 14:00:39 2026 GMT
Not After : May 1 13:00:39 2026 GMT
Subject: CN=ad238d9e-2ae5-4db7-b477-0d1240ba4817
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:28:0a:e9:29:f3:cd:09:50:6a:7f:18:84:d8:
af:fe:eb:09:b7:d9:09:d0:82:81:06:45:4c:fa:44:
ed:bd:d2:ac:be:da:52:4a:21:50:15:4f:50:24:f4:
69:b0:17:6e:2d:60:88:aa:c6:f3:dc:86:7e:65:3a:
87:92:00:af:bb:8d:0e:db:3c:7d:8c:d3:97:0a:80:
c4:17:f4:b5:83:c6:fe:99:1c:5b:24:96:df:27:bc:
56:81:10:05:38:cc:94:79:a1:92:73:30:04:6a:43:
90:dd:90:c9:0b:15:22:44:b4:cf:95:03:f4:8d:e9:
5a:a3:da:d9:e2:f3:4b:7e:43:54:73:f4:68:cc:d7:
53:04:cc:21:66:ca:4e:37:16:e9:29:d3:2b:3d:0a:
bc:37:ac:2d:07:9b:cf:88:60:93:56:3c:44:11:01:
f8:7c:33:05:6d:54:7c:62:20:90:5b:4f:5a:36:5a:
26:ff:26:1d:85:af:75:aa:b4:25:f3:2d:61:52:f5:
5a:fa:5b:2b:32:69:0b:dd:10:69:6c:02:a1:d0:d0:
66:85:79:6d:3a:90:3f:6d:ea:46:b2:31:11:3f:6e:
e3:96:3c:16:f3:7b:4c:da:a3:fc:12:43:d8:1f:fc:
55:1d:b3:a9:d0:d8:90:ad:24:c8:27:05:bc:d4:c0:
ec:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:B1:78:A9:40:65:6C:D8:BB:D0:D4:04:51:EE:A9:3E:81:B7:32:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dc49520f-d0a0-4d00-a42f-35a1023569ac/c0d47dc4-769b-3ebb-bc78-f3b6986b2133.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dc49520f-d0a0-4d00-a42f-35a1023569ac/dc49520f-d0a0-4d00-a42f-35a1023569ac.crl
X509v3 Authority Key Identifier:
keyid:63:AE:BC:ED:8F:0F:D5:D0:67:C4:92:B1:34:6E:29:97:B7:82:A3:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/dc49520f-d0a0-4d00-a42f-35a1023569ac.cer
sbgp-ipAddrBlock: critical
IPv4:
129.15.0.0/16
192.35.96.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:95:95:65:ac:36:c6:22:3e:3c:34:49:c0:71:c6:a8:ed:7b:
8c:42:46:5c:a1:e7:8c:12:68:c0:b4:f7:5f:6c:3c:35:5e:20:
12:5f:ab:26:2d:60:dc:c4:5d:5c:90:e9:0d:a6:d3:0c:ac:32:
31:86:47:0b:40:17:e7:36:6d:1b:2c:67:20:c6:ba:bc:99:f9:
68:73:3b:de:f9:de:a8:4e:b2:dd:7f:94:f1:54:c1:c1:ab:ac:
57:32:64:a0:ef:73:75:52:63:55:96:fe:32:ac:38:d6:f5:ce:
2d:a3:89:e1:4a:0a:ee:37:35:fc:3d:d4:d8:0c:6f:41:4d:4a:
db:cb:17:d5:f1:20:84:60:5b:cc:4d:e1:01:60:f2:38:94:f3:
f9:9e:0f:4f:8e:97:4e:d3:21:74:81:3a:e5:0d:95:c8:a2:4a:
ba:22:3e:92:9a:a8:8c:b6:0e:ad:a6:2c:36:97:63:59:ad:b0:
aa:48:8e:9c:59:6d:69:a6:e9:b1:a1:c7:1f:c0:64:2b:25:00:
90:29:35:fa:05:3a:88:a4:5a:51:d5:95:c8:a2:5a:5f:27:75:
42:f3:8b:11:bd:bc:4d:d8:bc:b6:f9:92:f5:1a:b4:2c:98:1a:
52:7f:b9:70:70:40:50:b6:24:5a:aa:98:cc:a2:36:83:fe:65:
ad:e2:ac:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 18:44:11 2026 by rpki-client