
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/a2043139-f730-332b-a197-cc8ccdf0ccc6.roa
File: a2043139-f730-332b-a197-cc8ccdf0ccc6.roa (raw, json)
Hash identifier: htcn4ZQ0eHVvVtfjuOeXsohsI0AX9SkRZSxwK7st5IY=
Subject key identifier: B5:8E:B5:03:FE:C7:E2:AF:A7:0F:F9:A0:15:73:A9:B7:29:4A:D8:A5
Certificate issuer: /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial: 010D0C9F4328584CAE5739B15337BFDCD9567280
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/a2043139-f730-332b-a197-cc8ccdf0ccc6.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 13768
IP address blocks: 64.34.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Feb 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:57:39:b1:53:37:bf:dc:d9:56:72:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=e642e84c-ccbe-40f1-b9d4-0c1cd96c0e89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:02:44:f1:e7:c6:50:1c:76:39:04:98:41:fb:
57:26:c7:84:68:8f:d6:21:d8:1c:8c:7a:e2:c0:a6:
c1:83:03:aa:35:6a:a6:33:09:09:ff:ef:e7:f5:33:
47:25:46:d8:8c:9b:5e:32:ba:02:da:2f:82:d5:57:
ed:7e:97:8d:8b:ba:1e:36:d9:f7:1c:81:8d:64:b1:
ca:94:39:4c:cc:2b:31:e8:04:fa:82:8a:e1:02:20:
af:cf:24:48:fc:10:23:33:77:43:4d:e5:a1:08:cd:
0b:bf:c0:8d:dc:bf:f0:41:6b:d8:cf:71:08:54:ae:
b6:07:27:87:2e:d9:31:e6:61:d3:8f:58:7f:e4:77:
ad:7d:d1:42:de:8c:f7:ee:9c:ac:47:fc:70:4a:81:
97:ef:1b:10:8b:6c:7f:bb:7c:8f:2c:b3:ba:e5:10:
22:22:20:66:51:77:8e:3d:36:87:bd:5a:b5:78:99:
06:ee:26:99:39:86:15:63:63:22:37:29:4f:8e:05:
57:e5:c6:bb:3a:7c:41:6d:a5:97:d0:6c:24:dd:31:
6a:84:d0:7e:f1:b7:30:c1:12:6a:3a:ec:1c:d0:b0:
c8:6e:fb:73:21:27:21:9c:7a:cc:64:79:88:2b:f8:
88:af:35:09:fc:11:fc:de:76:84:25:db:b2:2d:92:
7b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:8E:B5:03:FE:C7:E2:AF:A7:0F:F9:A0:15:73:A9:B7:29:4A:D8:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/a2043139-f730-332b-a197-cc8ccdf0ccc6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
X509v3 Authority Key Identifier:
keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
sbgp-ipAddrBlock: critical
IPv4:
64.34.189.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:89:b0:1a:07:7a:44:37:df:79:c3:4b:13:97:47:50:f1:9e:
2a:48:4b:d1:db:86:9b:d2:8c:fd:eb:36:65:e7:8d:9c:ab:96:
6e:ab:0b:e8:f3:18:07:ca:43:ee:77:f7:59:cb:2b:79:2a:9c:
cb:e7:c7:dd:df:fb:a5:b2:80:20:25:4b:44:7a:dd:7d:d5:fa:
ad:cb:a2:f5:b3:b8:84:be:e0:9b:61:c0:10:ab:73:d8:b3:26:
04:cc:21:20:f7:48:99:a8:b8:53:cc:f5:a0:e2:af:fc:ad:5d:
c1:2a:a2:c1:7c:c6:89:a4:32:21:f3:76:38:0b:43:99:72:cb:
3a:27:1a:ec:41:71:b9:94:8a:21:4e:08:8a:ad:6a:fe:ac:a5:
56:00:69:f2:dc:45:a7:d8:4e:f0:26:34:f8:f1:7c:fc:6e:55:
1a:47:58:e2:1b:89:2e:ec:2f:9e:29:20:80:0e:cc:38:b2:d5:
40:fb:39:4f:4c:db:27:91:b9:90:c8:a8:1c:ea:00:8b:d9:0c:
23:61:ac:a9:64:76:08:66:f3:60:aa:ca:41:99:46:c0:83:d0:
00:0d:32:7e:1c:4e:fc:0b:ed:eb:74:c3:b0:ac:8a:1c:07:a6:
af:b3:5b:73:4b:2b:61:e9:36:d3:98:27:67:4f:42:3c:5e:aa:
13:0b:c7:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 27 15:58:38 2026 by rpki-client