
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/01b562f0-b1c7-3eae-99a1-f153b793addc.roa
File: 01b562f0-b1c7-3eae-99a1-f153b793addc.roa (raw, json)
Hash identifier: UsqPXw3GPXnkpfZY2D7qMMEW/Auvm22Lz7BbglcgG9Q=
Subject key identifier: 18:A4:DD:7C:8F:03:FF:52:D1:91:16:3B:37:C5:55:07:44:F6:79:E2
Certificate issuer: /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial: 010D0C9F4328584CAE57291B9820A38B0CE65C80
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/01b562f0-b1c7-3eae-99a1-f153b793addc.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 13768
IP address blocks: 64.34.96.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Feb 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:57:29:1b:98:20:a3:8b:0c:e6:5c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=2416b89c-65f3-4773-9fe6-3b096c976c50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:7c:f5:97:ff:09:1b:38:0a:9b:4c:40:b8:54:
2f:10:37:25:83:b5:89:4a:92:61:94:5e:f3:ed:b8:
85:d6:4a:9c:5c:4f:ec:32:22:7b:8a:9b:a4:ea:d3:
fd:56:27:83:47:b8:ed:f4:cd:e0:87:f2:1d:6b:eb:
fd:38:10:f1:af:44:03:a3:e7:da:dd:35:06:1a:55:
d2:8b:8a:06:1c:03:45:27:b3:e3:39:6a:84:2d:f8:
91:0b:e7:d0:0b:4f:73:bc:27:62:5d:e4:26:38:e4:
4f:7a:e0:4a:6e:55:fe:60:3c:42:cc:a8:b7:80:43:
34:a0:19:c8:25:89:97:e0:f6:42:33:ee:3a:b6:34:
28:49:ac:c8:a2:89:f4:25:c4:ca:bc:de:62:ba:c0:
87:32:a4:ae:b3:f9:cf:74:3d:38:9c:cd:4a:01:00:
21:cc:e9:0a:cf:32:5f:a8:9b:42:7e:53:08:70:b3:
4f:ff:8a:4f:c2:a3:d5:72:5c:43:ee:62:21:72:2a:
8b:c3:db:f1:ae:80:f5:22:96:90:0e:d8:33:7b:06:
5e:d8:ab:ed:1d:ae:62:b6:ac:7b:1f:c9:0a:a4:17:
b2:1e:d3:eb:c3:f2:20:b9:a0:18:c6:dc:81:b9:b1:
0c:eb:52:46:1c:19:56:81:12:23:ca:da:6f:6f:b3:
5e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:A4:DD:7C:8F:03:FF:52:D1:91:16:3B:37:C5:55:07:44:F6:79:E2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/01b562f0-b1c7-3eae-99a1-f153b793addc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
X509v3 Authority Key Identifier:
keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
sbgp-ipAddrBlock: critical
IPv4:
64.34.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:2a:25:95:f7:84:51:b1:d9:85:7c:92:63:e2:8d:0b:98:f7:
36:b0:4a:af:1d:e2:be:68:ab:81:bf:77:4b:38:91:42:0f:59:
3b:c6:da:dd:a7:8f:8d:06:d0:ad:ee:e5:68:a3:27:4f:b1:d7:
b6:6a:fe:96:f4:88:e2:71:6a:b2:b6:a9:25:f5:88:ca:68:9e:
e0:4f:58:e5:07:83:39:c1:f7:76:1a:39:79:25:f9:8f:58:8f:
54:0e:9d:84:39:6c:d9:c7:5f:20:c9:f1:29:51:ad:35:42:ed:
d7:28:31:40:d0:10:9c:c1:bc:a4:cd:a5:6c:37:35:fa:75:36:
76:ab:c4:25:08:85:c2:aa:4a:ed:4c:d1:40:84:14:4c:b1:92:
f8:f2:36:ad:1c:23:76:e2:f7:d5:61:07:7d:c4:3a:9f:ba:cb:
5a:0f:4e:14:70:ae:a2:6f:95:4c:2c:46:2a:26:fe:99:58:af:
d1:66:38:3c:cf:5f:d4:69:17:5f:6e:fa:20:66:cc:69:d4:8a:
0d:f5:92:7c:aa:68:c5:d7:b6:0e:38:04:73:13:12:06:41:89:
e1:ec:f5:c2:82:25:70:66:94:a2:31:75:0e:f2:9f:52:d6:a9:
4c:da:bf:b8:86:19:6a:a7:16:13:57:55:e1:02:7c:bf:1a:36:
cb:ec:60:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 27 15:57:13 2026 by rpki-client