
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/08bfffd3-856a-3127-8683-70d3d1a8f23d.roa
File: 08bfffd3-856a-3127-8683-70d3d1a8f23d.roa (raw, json)
Hash identifier: tgPtBDcfLACIKTyh3gckEisq/+wAXU+MTWlEa9ejAug=
Subject key identifier: A5:DC:9A:38:37:21:E8:FC:A9:70:51:65:4C:7E:85:5E:91:D7:64:C5
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584D237A34126880BA670C4E01B0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/08bfffd3-856a-3127-8683-70d3d1a8f23d.roa
Signing time: Thu 12 Mar 2026 01:00:32 +0000
ROA not before: Thu 12 Mar 2026 01:00:32 +0000
ROA not after: Wed 10 Jun 2026 01:00:32 +0000
asID: 33661
IP address blocks: 50.145.152.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:23:7a:34:12:68:80:ba:67:0c:4e:01:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 12 01:00:32 2026 GMT
Not After : Jun 10 01:00:32 2026 GMT
Subject: CN=a9b8d6dc-8e09-46fe-b3ec-fc4ba7d23c4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a0:86:40:58:3d:33:5e:42:82:6d:03:be:fd:
00:43:1d:8a:be:69:75:72:71:46:14:95:e5:8f:41:
32:e5:2d:88:45:26:32:76:f4:76:79:34:3d:27:b7:
5f:b1:4e:bf:b1:3a:8c:5a:80:cf:f3:51:97:9e:84:
dd:7f:de:07:f7:d2:03:43:3a:d6:0a:13:a9:1b:4d:
23:16:ca:80:82:33:1c:91:44:22:1b:c4:1a:cf:fe:
61:15:b3:3c:f3:47:1e:37:6a:98:87:1a:bb:d0:42:
77:5e:39:ec:77:62:24:6c:52:a9:45:de:f9:9a:c9:
56:68:8b:43:13:fd:70:2e:23:f4:f2:f9:1c:7e:b8:
2e:ca:71:32:ef:3f:8e:b1:ba:13:ce:29:8b:2c:98:
59:e9:1c:fe:54:74:b4:de:98:09:94:eb:67:16:42:
4b:d7:f3:5f:4e:ff:a9:b0:26:f1:48:10:29:ab:24:
00:57:51:e8:75:0b:88:0a:5a:18:de:07:e8:af:55:
ac:86:86:b4:3f:09:f1:46:59:6d:0d:c8:53:61:4e:
ae:61:94:bf:f2:9a:6d:51:19:16:c5:e0:57:a9:03:
70:d5:28:7e:a0:4c:e6:62:fb:f4:85:b8:96:7c:0a:
3c:44:0a:5d:36:db:51:d4:eb:a5:62:7f:6e:f0:f6:
ce:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:DC:9A:38:37:21:E8:FC:A9:70:51:65:4C:7E:85:5E:91:D7:64:C5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/08bfffd3-856a-3127-8683-70d3d1a8f23d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
50.145.152.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a6:e1:6c:59:ba:fe:c3:f7:fe:41:23:13:69:99:4f:dd:b8:37:
17:e3:ef:98:df:bc:61:0f:91:a7:0b:35:c1:5e:7f:ec:03:c0:
64:3e:97:66:d2:ae:34:39:f6:00:4c:67:29:09:7c:ff:b3:19:
62:c7:c9:aa:97:6b:67:f3:9b:7d:f9:c6:e3:ca:3b:0d:cd:b6:
00:dd:ad:e7:84:52:af:54:23:fa:59:64:9b:73:85:21:d6:76:
cb:80:5a:e8:52:ca:b3:39:55:c7:d9:dd:af:48:61:af:fd:83:
1e:33:6a:db:62:04:bd:0f:6e:d9:bf:e7:9a:b2:c4:5a:52:82:
26:2f:f2:4e:5a:50:1a:d0:c5:73:c5:58:7d:4d:14:99:b0:94:
b4:a3:c4:49:23:c0:d8:5e:cf:9a:0c:58:76:f5:0f:2c:7b:ff:
74:89:10:52:38:a6:f1:a0:39:c5:9e:22:75:3f:da:af:47:86:
f0:a8:04:60:14:3d:1e:13:67:93:3c:09:89:f8:5a:c8:f8:d6:
03:ed:1a:a2:f3:b9:22:b0:9f:7e:ac:66:4c:01:1d:59:f8:90:
2d:95:15:f8:1f:de:34:26:d1:c6:06:8c:78:96:91:89:13:3f:
2d:5c:7e:a6:b2:1c:8f:dc:bf:90:37:0b:ed:0f:48:2f:45:9a:
77:92:84:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:39:27 2026 by rpki-client