
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/4a48ae92-64c5-3e26-981f-085a604cbb12.roa
File: 4a48ae92-64c5-3e26-981f-085a604cbb12.roa (raw, json)
Hash identifier: nuqaDWOhVV0mxmIc+zGNMNu2Q67z2/++z8skzn6n2h4=
Subject key identifier: 31:0D:43:E9:BF:80:2E:EC:12:4C:D8:6B:5F:5E:04:44:F1:EB:8B:E6
Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
Certificate serial: 010D0C9F4328584CB81C7FAF18B14E11C11D8480
Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/4a48ae92-64c5-3e26-981f-085a604cbb12.roa
Signing time: Sun 01 Feb 2026 14:00:40 +0000
ROA not before: Sun 01 Feb 2026 14:00:40 +0000
ROA not after: Sat 02 May 2026 13:00:40 +0000
asID: 31898
IP address blocks: 144.25.40.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Feb 2026 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:b8:1c:7f:af:18:b1:4e:11:c1:1d:84:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
Validity
Not Before: Feb 1 14:00:40 2026 GMT
Not After : May 2 13:00:40 2026 GMT
Subject: CN=95a99841-ae6b-4b14-bf6f-03c3b799775d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:01:da:cf:90:a7:29:e4:35:b2:9c:22:59:60:
ab:c4:43:6f:35:b2:0a:3a:e0:3d:84:89:56:6e:e8:
01:87:89:fe:18:9a:8e:d9:ad:88:35:49:6e:de:57:
68:b6:72:cd:3f:cd:a3:c4:57:b2:25:29:81:1f:7d:
34:0a:72:bf:21:5a:6d:3a:a4:fb:b6:bc:73:5d:4b:
3a:92:33:72:7b:da:26:1f:6f:56:b4:4e:bf:50:1d:
ea:b2:c1:b6:27:80:09:46:64:da:f9:2c:82:3a:4b:
d1:b5:54:6b:6d:21:78:b7:33:71:ee:6f:7c:a3:e3:
17:11:0b:7d:16:24:18:9c:52:7d:b8:37:e8:11:c9:
76:c8:be:a4:45:4c:34:9e:ea:59:26:ca:15:e3:9f:
78:8e:e6:7f:df:91:c4:91:13:8c:ce:8d:73:37:3d:
b4:1c:51:88:dc:fe:af:b3:66:12:17:82:e5:d6:bf:
29:42:dd:17:ff:71:dc:c8:17:cd:81:72:2e:1f:7c:
7d:95:65:ad:39:39:f6:78:d8:16:ee:7e:ee:a0:c5:
0f:e3:f8:b3:08:5d:06:92:7a:3f:bd:a8:5a:d1:93:
9f:1e:ee:27:c4:08:25:0e:e3:ca:3c:ce:3a:0f:06:
4b:8c:a7:66:3e:53:a0:9b:29:1c:50:3e:5a:d2:ba:
dd:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:0D:43:E9:BF:80:2E:EC:12:4C:D8:6B:5F:5E:04:44:F1:EB:8B:E6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/4a48ae92-64c5-3e26-981f-085a604cbb12.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl
X509v3 Authority Key Identifier:
keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
sbgp-ipAddrBlock: critical
IPv4:
144.25.40.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:da:17:e7:15:0f:00:a9:7f:b1:c2:4c:98:cd:b8:8a:42:b9:
2b:1f:28:49:f6:b2:51:05:f7:f4:59:a4:bc:dd:ce:5a:66:e4:
6f:0c:81:6b:c3:f3:0c:57:cb:7e:86:a2:a4:7c:ec:ba:a6:24:
2e:5b:f7:b8:62:59:07:97:3f:ea:98:a8:a9:c5:0e:5e:27:3f:
74:66:d7:80:ba:ea:03:cd:e6:0f:29:15:b3:0e:f2:03:8b:da:
ce:35:c7:e3:9b:06:ad:bb:81:c7:53:d6:7d:88:27:9b:92:39:
0a:5a:a0:61:ee:14:34:a0:94:89:e2:a1:98:c6:bf:41:a1:e6:
f6:65:a4:34:15:68:ba:32:19:6d:b4:ef:c3:4f:ab:1b:cf:11:
e5:ee:b5:aa:83:f7:80:56:75:e3:1b:3d:21:70:a2:25:f4:9c:
32:7a:bf:07:53:28:e6:36:55:e1:5c:f5:d7:47:ac:72:6c:55:
52:63:c6:05:08:2e:e0:44:15:e9:a9:17:88:35:f6:d0:47:d9:
ff:68:68:9c:c1:bc:48:d3:35:3e:1b:98:9f:db:e5:cf:8d:e4:
b9:9e:42:10:c1:1f:0d:98:76:61:ec:53:cd:e4:ff:66:d2:5a:
aa:42:96:56:97:b0:81:4d:00:ad:bc:23:a3:e3:90:8f:74:09:
c1:df:cc:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 03:30:49 2026 by rpki-client