
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4bf6b4aa-8fed-421b-bd5c-8385c0504c1d/77e34235-1b08-3e27-88a8-f7fc0bf41e89.roa
File: 77e34235-1b08-3e27-88a8-f7fc0bf41e89.roa (raw, json)
Hash identifier: qwkPeG99ViZuJFHWNtln7nlatMxFpqQ3nYQ0e6VYGtU=
Subject key identifier: 8F:B1:A0:9C:56:2A:55:DF:0F:DF:FE:0F:AD:A6:A4:E6:74:A3:E1:E2
Certificate issuer: /CN=4bf6b4aa-8fed-421b-bd5c-8385c0504c1d
Certificate serial: 010D0C9F4328584CA8C199100D9888222B596900
Authority key identifier: 71:C9:0F:E3:08:1D:55:F8:36:88:E7:2D:B4:90:78:27:C0:F4:66:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4bf6b4aa-8fed-421b-bd5c-8385c0504c1d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4bf6b4aa-8fed-421b-bd5c-8385c0504c1d/77e34235-1b08-3e27-88a8-f7fc0bf41e89.roa
Signing time: Tue 27 Jan 2026 02:00:29 +0000
ROA not before: Tue 27 Jan 2026 02:00:29 +0000
ROA not after: Mon 27 Apr 2026 01:00:29 +0000
asID: 35967
IP address blocks: 199.67.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4bf6b4aa-8fed-421b-bd5c-8385c0504c1d/4bf6b4aa-8fed-421b-bd5c-8385c0504c1d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4bf6b4aa-8fed-421b-bd5c-8385c0504c1d/4bf6b4aa-8fed-421b-bd5c-8385c0504c1d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4bf6b4aa-8fed-421b-bd5c-8385c0504c1d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Feb 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:a8:c1:99:10:0d:98:88:22:2b:59:69:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bf6b4aa-8fed-421b-bd5c-8385c0504c1d
Validity
Not Before: Jan 27 02:00:29 2026 GMT
Not After : Apr 27 01:00:29 2026 GMT
Subject: CN=a392384e-6e88-4a81-b14f-ee5cb76e89b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4c:30:db:1a:29:ac:a6:16:8d:bd:72:53:13:
e1:8a:d7:39:e1:98:b0:79:39:ec:95:0e:41:f4:48:
4a:43:0d:14:e5:c3:c6:29:ad:fb:ac:38:75:5c:5b:
1e:57:1d:79:be:5e:1a:25:b6:64:ea:46:23:e6:a9:
bf:16:c6:c6:b7:f1:a0:5f:03:a4:ae:ee:0e:8d:4e:
22:39:bf:45:ee:e5:bf:79:79:c9:0c:24:83:9e:5b:
0b:ff:12:ac:f8:6b:a5:d7:0f:85:a0:a1:d6:86:8f:
53:46:c2:4f:5e:90:11:2e:e7:dc:ae:2b:88:2e:37:
76:99:bb:30:4d:ea:8f:ec:ed:f0:9d:75:ea:34:55:
99:e5:f1:85:0c:7a:8d:21:5f:87:e1:70:51:23:64:
51:fb:a5:18:c9:c5:8b:4d:c3:74:b9:5b:2c:44:c2:
f4:6b:ec:d2:67:7b:42:19:67:e9:c3:43:77:77:28:
e0:fe:3c:f2:e7:ac:50:0f:dc:5b:b2:a3:fa:15:68:
db:27:8d:2e:22:40:43:00:9d:ab:a5:04:1f:c6:7b:
44:ba:72:52:e3:63:4d:85:11:61:8e:c4:78:54:43:
c6:00:01:a9:76:e9:d3:91:ce:ec:39:29:46:cc:41:
d9:d6:c0:b4:3a:6d:01:1f:1e:59:aa:09:26:55:2c:
05:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:B1:A0:9C:56:2A:55:DF:0F:DF:FE:0F:AD:A6:A4:E6:74:A3:E1:E2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4bf6b4aa-8fed-421b-bd5c-8385c0504c1d/77e34235-1b08-3e27-88a8-f7fc0bf41e89.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4bf6b4aa-8fed-421b-bd5c-8385c0504c1d/4bf6b4aa-8fed-421b-bd5c-8385c0504c1d.crl
X509v3 Authority Key Identifier:
keyid:71:C9:0F:E3:08:1D:55:F8:36:88:E7:2D:B4:90:78:27:C0:F4:66:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4bf6b4aa-8fed-421b-bd5c-8385c0504c1d.cer
sbgp-ipAddrBlock: critical
IPv4:
199.67.229.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:86:cf:4a:6f:a8:b4:a6:e4:0a:7c:c0:04:70:29:81:d8:58:
58:85:bd:ea:70:38:b7:7c:d2:37:94:ef:76:c3:aa:ba:2c:c1:
e9:8c:b0:af:7f:a3:4e:a8:33:43:ec:67:05:4e:91:02:19:55:
ff:39:ef:0c:2e:62:92:13:c5:a1:5a:4b:72:06:9c:7d:dc:a0:
8d:c7:c6:6e:d4:39:c3:34:5c:dd:21:41:7e:00:c7:44:13:b5:
70:79:2d:5c:18:43:de:08:ac:00:72:04:2b:b4:6c:9a:8f:43:
b5:af:ca:c2:bc:a2:3a:65:bc:8b:f1:cf:21:60:01:1b:fa:5b:
a5:8c:a6:92:a5:31:21:ee:19:98:16:c7:c7:07:22:98:d7:4a:
96:2b:23:99:37:0e:68:9d:d5:c9:8e:3c:be:05:dd:17:35:2c:
d8:30:26:e9:ac:17:70:32:29:79:ff:bb:c2:ee:de:d9:37:0a:
c1:7b:2a:11:a7:aa:87:aa:f3:43:94:71:d3:f1:fe:05:11:ba:
d3:94:43:67:1d:5f:32:38:20:8c:d8:6f:ec:04:b9:95:1b:4f:
8c:3e:90:b7:72:e4:a2:8f:fe:2e:86:05:fe:bb:97:cc:00:9d:
73:1a:c5:4d:4a:35:9e:fa:49:cc:a5:f4:cf:f2:e7:af:e0:b1:
1f:d6:ec:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 22:54:28 2026 by rpki-client