
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f71ab410-ccbd-4ac3-8b4e-4b3c9a119054/f41e6b84-988b-3d43-95bb-4dbf0cc93a37.roa
File: f41e6b84-988b-3d43-95bb-4dbf0cc93a37.roa (raw, json)
Hash identifier: ycI/aAi1i8hsCE4kFNZT6khHfxfKNWnm+WRWw4RGIbw=
Subject key identifier: 0F:2E:C1:68:32:2E:8C:3A:4A:D0:70:E6:88:D1:8D:99:4E:27:A4:B4
Certificate issuer: /CN=f71ab410-ccbd-4ac3-8b4e-4b3c9a119054
Certificate serial: 010D0C9F4328584CEE8CB9DB11C534BD4B41BE00
Authority key identifier: AC:B8:8F:B9:35:55:7B:9D:8B:C9:5E:6F:E8:3F:01:AA:77:1C:F2:75
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f71ab410-ccbd-4ac3-8b4e-4b3c9a119054.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f71ab410-ccbd-4ac3-8b4e-4b3c9a119054/f41e6b84-988b-3d43-95bb-4dbf0cc93a37.roa
Signing time: Sat 21 Feb 2026 02:00:32 +0000
ROA not before: Sat 21 Feb 2026 02:00:32 +0000
ROA not after: Fri 22 May 2026 01:00:32 +0000
asID: 401413
IP address blocks: 209.23.64.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f71ab410-ccbd-4ac3-8b4e-4b3c9a119054/f71ab410-ccbd-4ac3-8b4e-4b3c9a119054.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f71ab410-ccbd-4ac3-8b4e-4b3c9a119054/f71ab410-ccbd-4ac3-8b4e-4b3c9a119054.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f71ab410-ccbd-4ac3-8b4e-4b3c9a119054.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Feb 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ee:8c:b9:db:11:c5:34:bd:4b:41:be:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f71ab410-ccbd-4ac3-8b4e-4b3c9a119054
Validity
Not Before: Feb 21 02:00:32 2026 GMT
Not After : May 22 01:00:32 2026 GMT
Subject: CN=4a14ec67-87ef-420f-ba2f-3233c999b28b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f6:46:06:a2:c5:de:28:0c:4f:12:bb:c2:e1:
59:9b:0e:5c:12:6c:be:27:fc:18:d8:94:dd:e6:bc:
7a:ef:ae:30:86:66:d8:5c:64:3d:f5:40:ef:f0:8c:
b4:c4:7c:c2:68:ad:51:20:ec:53:95:a9:5b:08:8e:
a5:62:cf:82:ef:24:c5:78:aa:b9:1f:b4:80:98:09:
a0:d1:6f:71:41:34:5b:6c:01:19:46:64:2a:0d:a7:
de:d4:e2:2d:c0:3b:87:cc:69:6c:4e:b1:66:b8:b9:
83:e5:75:47:b7:6f:75:45:39:a7:d8:e2:22:ac:c3:
5e:db:6c:f3:e2:92:0c:61:31:2d:91:e3:79:79:80:
84:d4:4e:e2:0d:13:d1:9c:c0:6c:36:ee:eb:a3:c5:
1d:70:38:d3:a7:e0:99:5f:9d:e6:0d:7a:5e:81:fe:
ab:df:a8:a4:f7:03:b8:a5:49:b4:a8:8a:5c:3e:74:
87:f7:5e:3d:7c:76:33:30:b4:e4:ea:d1:7b:0f:60:
58:68:42:41:80:54:eb:27:b6:a6:cb:d2:6b:81:c0:
b5:5c:1e:5e:32:b5:e2:18:f1:4f:71:7c:c5:b9:a1:
e2:7b:85:7f:99:1b:30:e9:76:2a:33:41:dc:41:bb:
5f:df:70:35:1c:ef:f3:e6:3b:6e:47:a8:dc:dc:df:
83:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:2E:C1:68:32:2E:8C:3A:4A:D0:70:E6:88:D1:8D:99:4E:27:A4:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f71ab410-ccbd-4ac3-8b4e-4b3c9a119054/f41e6b84-988b-3d43-95bb-4dbf0cc93a37.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f71ab410-ccbd-4ac3-8b4e-4b3c9a119054/f71ab410-ccbd-4ac3-8b4e-4b3c9a119054.crl
X509v3 Authority Key Identifier:
keyid:AC:B8:8F:B9:35:55:7B:9D:8B:C9:5E:6F:E8:3F:01:AA:77:1C:F2:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f71ab410-ccbd-4ac3-8b4e-4b3c9a119054.cer
sbgp-ipAddrBlock: critical
IPv4:
209.23.64.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:68:08:0c:55:74:2a:a2:5f:fd:da:03:cc:3a:b6:57:56:6f:
cf:79:c3:cd:9b:bb:e2:83:6c:87:83:21:21:13:6b:6a:70:b1:
06:49:dd:72:f3:fa:b9:86:01:12:36:be:92:a2:1e:d0:89:6d:
84:76:3f:19:19:13:21:f3:a3:0f:e0:0d:a0:6a:c2:4f:eb:e0:
df:9f:85:a0:44:40:bb:72:3b:c9:9c:a1:c9:2f:f5:b0:31:81:
cc:53:78:8e:f5:01:7d:92:e1:60:c8:a7:87:3b:0c:d0:62:b1:
c1:5a:81:16:7b:75:9d:13:56:57:9a:08:10:be:8a:30:9f:02:
b6:c3:a6:ef:c4:d5:b0:6c:0f:e3:59:91:51:7d:02:80:52:61:
45:f9:53:3c:59:54:79:ce:86:b5:af:b7:52:01:bc:92:2f:02:
ae:9c:b6:05:34:c3:f5:0d:2d:be:c2:dd:81:d1:84:37:49:32:
76:8d:41:d8:18:df:ef:bb:6c:96:69:4b:54:03:03:fe:b7:73:
19:50:fc:83:99:88:40:57:52:76:cc:bc:29:f9:06:7c:38:2b:
b9:1d:29:25:15:b8:7e:c9:92:80:ca:0d:22:e9:65:b3:20:bb:
4f:f6:d4:59:cd:d1:de:e4:a1:d7:cb:39:ec:4e:eb:5c:37:aa:
7e:c5:c9:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 22:52:13 2026 by rpki-client