
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/6e49f261-8c5e-308e-8da6-7fd1bebff9a3.roa
File: 6e49f261-8c5e-308e-8da6-7fd1bebff9a3.roa (raw, json)
Hash identifier: g4AKPdcXxEUzp4EIi08lu4LV+tEaJlw7JMpA1Iu0BEE=
Subject key identifier: 87:A9:F4:B5:96:3C:7C:9B:12:F4:3C:94:BB:15:78:F7:A5:7C:FC:A6
Certificate issuer: /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5
Certificate serial: 010D0C9F4328584CBDB1EB52548F75886C783800
Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/6e49f261-8c5e-308e-8da6-7fd1bebff9a3.roa
Signing time: Tue 03 Feb 2026 14:00:39 +0000
ROA not before: Tue 03 Feb 2026 14:00:39 +0000
ROA not after: Mon 04 May 2026 13:00:39 +0000
asID: 55286
IP address blocks: 209.127.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Feb 2026 08:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:bd:b1:eb:52:54:8f:75:88:6c:78:38:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5
Validity
Not Before: Feb 3 14:00:39 2026 GMT
Not After : May 4 13:00:39 2026 GMT
Subject: CN=ea0ce2a9-0375-4a09-8491-aa1d6a1c41f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:50:c9:72:e8:e8:5d:d0:35:ec:f1:01:b2:a0:
93:66:b9:c6:23:07:ac:db:6c:eb:0f:58:3b:68:29:
7b:cf:ed:7e:70:1b:67:80:71:6c:4f:3b:db:80:41:
68:9d:74:0e:51:d9:88:2b:7f:7a:b7:07:ee:ee:b4:
a1:8b:3d:c2:eb:07:ea:b9:10:f7:3e:05:d0:8e:7c:
12:71:85:44:95:27:a2:65:37:9b:bf:47:5e:68:67:
2b:c6:c1:bd:21:ed:7d:6f:0d:ff:9e:c6:70:bb:52:
39:85:41:43:18:59:c7:c6:dc:80:7b:d1:84:85:ba:
7f:98:22:9b:0b:e5:36:8d:85:ce:0e:3c:61:b5:f8:
0b:c2:c6:c2:69:6b:b1:e4:d4:fa:60:c0:49:35:4a:
12:c7:b0:1e:6a:ad:56:19:74:f1:0c:40:49:3e:ef:
4d:34:23:6c:1f:0c:1c:94:fd:93:95:5c:ee:4d:2f:
90:1f:c7:78:ef:72:a7:df:0f:ac:5e:33:fb:b1:a3:
27:6c:89:c0:3e:e4:f3:8c:d1:54:0d:ee:00:e4:a7:
4c:24:d5:64:67:80:aa:f5:26:79:ab:d9:d0:47:a7:
9d:3c:ca:88:62:4a:3a:63:bf:f3:93:15:84:35:f5:
97:c2:64:7e:94:67:72:10:e9:3e:81:09:4c:fd:5b:
b6:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:A9:F4:B5:96:3C:7C:9B:12:F4:3C:94:BB:15:78:F7:A5:7C:FC:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/6e49f261-8c5e-308e-8da6-7fd1bebff9a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl
X509v3 Authority Key Identifier:
keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer
sbgp-ipAddrBlock: critical
IPv4:
209.127.32.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:e6:d2:72:bd:aa:fe:be:57:81:2f:3a:34:fc:64:bd:98:f8:
84:fc:77:9d:ba:b3:ca:a6:a2:91:01:28:1b:91:ab:cc:fc:a4:
4b:bd:e2:1c:5a:7b:bb:5a:e5:34:20:de:ad:ad:a7:f3:15:3d:
48:0a:3a:95:da:ed:f0:2d:89:9b:68:9c:bd:ee:d4:51:38:bb:
cd:dc:f5:4e:03:b6:fd:5c:da:2f:82:ed:92:33:4b:cc:91:9f:
54:35:1a:52:d1:45:f1:16:96:e0:8d:82:f7:11:65:b7:32:ea:
b0:d5:23:bc:32:1d:ae:ba:7a:0a:b0:5d:06:cb:23:d8:f2:18:
7c:80:b9:d8:b0:f9:26:6d:95:95:a8:b6:04:4f:11:94:b8:77:
b8:ac:2f:c9:36:4c:50:97:b3:d1:46:a1:6c:f9:fa:1b:88:36:
48:87:93:a2:03:e7:63:76:3b:c6:50:1c:3a:7f:e2:9d:52:e6:
1d:7b:1b:91:35:58:74:ad:8f:fa:b8:5e:03:30:30:d7:4e:f2:
b1:d6:ff:b6:fe:ab:62:ad:5f:7a:ff:12:42:12:3b:68:31:00:
42:d0:73:0f:c1:7e:dc:cb:f2:c0:9b:95:18:3b:3e:4c:d6:a7:
36:a1:0d:33:75:a5:ba:7e:12:1b:51:92:67:75:c3:7d:c6:fa:
af:27:91:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 23:50:25 2026 by rpki-client