
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/9a03f21f-06de-30b1-9cf0-74ebd53f1fc2.roa
File: 9a03f21f-06de-30b1-9cf0-74ebd53f1fc2.roa (raw, json)
Hash identifier: VG1I7ZnsT6QllYRfUzE1p5l2W/sd0nBTCvLHPe7ylCQ=
Subject key identifier: 4B:93:AB:94:7D:C6:BF:C9:E6:A6:6D:14:90:FE:C8:63:28:3B:02:11
Certificate issuer: /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial: 010D0C9F4328584CAE573948210DD37B121FD6D0
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/9a03f21f-06de-30b1-9cf0-74ebd53f1fc2.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 13768
IP address blocks: 64.34.152.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Feb 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:57:39:48:21:0d:d3:7b:12:1f:d6:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=43d5f031-2f7c-4462-9418-846b1852d382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:5b:14:ea:e1:6c:42:49:8c:71:5d:06:24:73:
12:a4:72:96:c1:1d:73:d4:2e:5b:da:c9:b0:a1:2c:
b5:7d:19:e0:d3:a9:91:e5:74:95:20:e5:22:aa:45:
d5:a9:d6:ca:c4:15:63:7f:fa:98:d9:d0:ab:3f:c7:
d1:53:52:8e:16:8a:db:0f:73:b9:97:f3:4d:d7:9f:
56:2b:b6:9d:a3:3b:ae:34:38:ec:69:38:cd:53:65:
3d:79:26:b4:43:ea:90:e6:0b:38:90:ad:ea:6b:41:
b5:d4:8c:16:f6:be:e5:57:64:45:6b:25:cc:b1:7e:
78:ed:68:d7:ea:a8:a5:f5:69:75:c1:c3:28:cb:36:
1d:a3:64:64:be:e3:11:b8:5b:89:ec:b7:3e:fe:22:
b6:6b:71:00:ae:0b:ca:8d:2b:c3:07:ad:4e:e5:8e:
25:43:6a:e8:2c:7d:0e:4c:59:2e:15:09:d5:d2:eb:
9a:82:5b:2d:18:1f:8f:c0:93:51:d4:05:f6:7c:e7:
ca:74:45:70:e6:68:ff:15:cc:4d:5b:40:d4:91:dc:
86:75:b1:f3:88:8a:9a:26:8b:46:b3:1c:dd:aa:de:
39:b1:7c:04:cd:40:27:61:c1:e6:2a:a4:49:e8:8d:
91:7e:47:c9:7c:c9:0e:90:ab:4b:47:62:1a:2e:5c:
0a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:93:AB:94:7D:C6:BF:C9:E6:A6:6D:14:90:FE:C8:63:28:3B:02:11
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/9a03f21f-06de-30b1-9cf0-74ebd53f1fc2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
X509v3 Authority Key Identifier:
keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
sbgp-ipAddrBlock: critical
IPv4:
64.34.152.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:6d:fc:64:9f:e1:f7:70:76:fe:0d:96:cf:71:cf:60:e6:87:
e9:e2:dd:18:c7:c2:68:9b:81:a9:70:0f:b9:f3:d6:11:04:95:
ea:0f:33:4c:ea:83:19:38:4d:4c:a5:e8:8a:4b:fd:ac:99:a1:
aa:a9:95:2f:1f:4d:29:85:1a:2d:2e:e3:87:2c:27:d6:10:9c:
e0:5e:4c:5d:6f:48:5a:b5:cc:75:78:5e:0f:a0:67:be:43:08:
6c:e3:94:b6:f5:59:84:1f:73:a1:4e:5b:9e:45:7f:88:d1:37:
7c:44:a3:95:d8:1e:3d:ac:39:7b:0f:ec:a5:a8:40:07:fe:e3:
9e:26:62:d5:eb:ee:12:1b:ac:cc:81:96:fa:1e:08:b7:4b:98:
6d:36:9b:13:8e:cb:a1:04:d5:6d:9d:8e:0b:5b:76:b8:51:25:
a5:b1:e8:aa:91:d4:a0:b2:a1:ca:f1:19:09:c5:7a:19:bf:26:
c1:ea:ff:f9:85:b6:b6:9d:08:52:80:ff:06:78:c4:a1:13:e0:
c3:ad:a5:bd:35:b7:4d:61:d0:da:fc:ba:4d:55:46:95:cb:d1:
15:42:99:6d:36:06:e0:80:bb:7f:84:dd:8c:25:fe:0a:70:13:
91:3a:52:c4:6a:e5:ab:c8:13:c1:02:5d:3f:fb:7b:33:e8:c1:
99:2b:fb:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 27 15:55:13 2026 by rpki-client