
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/2b6dd575-f8d9-36bc-8c87-52636d9af5ac.roa
File: 2b6dd575-f8d9-36bc-8c87-52636d9af5ac.roa (raw, json)
Hash identifier: ABcJUvotSguWML4krU2Wn2V+kgskrLypSeyXjGJfLXs=
Subject key identifier: C7:36:80:C8:3C:4B:68:52:68:26:A7:B3:3C:CA:6D:AE:74:41:88:C9
Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
Certificate serial: 010D0C9F4328584CB81C80B58491E0D3FF81DE80
Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/2b6dd575-f8d9-36bc-8c87-52636d9af5ac.roa
Signing time: Sun 01 Feb 2026 14:00:40 +0000
ROA not before: Sun 01 Feb 2026 14:00:40 +0000
ROA not after: Sat 02 May 2026 13:00:40 +0000
asID: 31898
IP address blocks: 130.35.184.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Feb 2026 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:b8:1c:80:b5:84:91:e0:d3:ff:81:de:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
Validity
Not Before: Feb 1 14:00:40 2026 GMT
Not After : May 2 13:00:40 2026 GMT
Subject: CN=3434fd3d-f43b-4a1a-82d1-20e371a93bee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:99:28:99:df:a1:b5:10:01:11:7d:ec:dc:ed:
9a:5f:a5:98:b6:11:00:e1:9b:70:55:92:f1:ad:39:
b2:66:49:b1:4d:6c:e3:ec:4e:f7:c0:7a:bd:40:1e:
ce:b1:8b:ff:97:a7:08:74:15:dd:ed:6c:24:23:0d:
0a:38:5c:e9:ec:3a:62:7f:8f:ef:46:80:52:47:f9:
6e:a6:10:2e:46:55:f0:13:3c:ba:27:7d:3e:a3:d7:
55:9b:91:28:c8:22:96:d4:48:eb:6c:62:c9:f5:cd:
08:75:c6:e6:43:03:04:c7:b1:73:de:de:23:57:b8:
af:8d:94:67:e1:13:99:ac:3b:4c:b2:b4:4d:ec:ba:
89:28:6f:bf:91:d8:44:0d:69:39:81:5f:5e:0b:69:
3e:3c:45:f6:9a:1c:e2:ce:66:b3:51:8c:e6:6c:85:
c3:63:09:59:d2:0e:24:bc:5a:77:e4:34:a4:8a:c8:
d8:59:d8:90:85:e3:ca:3a:b1:a3:8e:1e:a0:5d:b4:
d4:ea:a8:d2:5c:0f:6d:23:dc:40:1c:d8:49:76:33:
f5:34:1b:95:a2:cb:d9:b6:4d:2e:54:a4:68:94:75:
77:d3:3b:95:8a:f2:b0:b8:7b:5a:78:a0:ee:87:1c:
d3:95:6f:78:84:01:2a:7d:09:16:74:65:a2:a2:30:
9b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:36:80:C8:3C:4B:68:52:68:26:A7:B3:3C:CA:6D:AE:74:41:88:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/2b6dd575-f8d9-36bc-8c87-52636d9af5ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl
X509v3 Authority Key Identifier:
keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
sbgp-ipAddrBlock: critical
IPv4:
130.35.184.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:b5:da:88:d3:f5:b7:53:4e:d0:d2:27:37:25:e8:8c:dc:7a:
20:66:67:15:7a:cc:72:56:7a:1e:e1:11:ec:fe:69:cc:8c:de:
e4:2f:6e:20:b0:c4:99:f6:b0:0d:b3:93:a5:05:cc:ba:2e:0c:
29:fe:e0:99:e0:a1:45:4e:17:b5:39:47:90:a6:92:34:39:1e:
ef:1a:7f:d2:9c:19:ba:38:83:1f:ca:d9:39:b0:05:43:10:e9:
4d:be:5a:ea:80:5b:4d:05:0f:42:04:56:37:ea:b4:00:f9:67:
2e:22:14:5c:b8:0c:f9:5d:b5:fb:3d:d1:ff:78:af:4d:a6:80:
f7:a1:91:6a:c1:9b:81:e3:53:91:3d:54:f5:21:7f:3a:e7:43:
b2:9f:fc:4a:a4:80:9b:7a:48:50:45:cd:04:a0:b0:4f:8b:fa:
0b:d5:2a:d4:f9:97:f5:83:6b:aa:c9:21:d4:60:40:9e:ad:8c:
7b:78:60:67:23:ea:6e:b2:dc:4e:f4:fa:b0:89:8d:d0:ef:26:
48:0e:cc:ef:44:d6:84:8c:3b:4b:43:f1:ee:5b:76:71:d3:dd:
cd:c9:ba:4e:d0:56:f3:20:ae:94:8c:18:63:cc:53:8f:34:ce:
c7:fe:c4:9f:8a:ee:ee:bd:2a:4f:72:8e:00:2f:3a:f6:c9:72:
3b:3b:20:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 03:30:55 2026 by rpki-client