
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/1503d505-5194-36e4-8547-82404b18ae4c.roa
File: 1503d505-5194-36e4-8547-82404b18ae4c.roa (raw, json)
Hash identifier: FRzSDq7Hc+e1rRRNljx3N+OSbm02HJw8U87US7XfgSY=
Subject key identifier: AA:32:04:68:77:2F:0A:97:D2:5E:1E:22:EE:BB:97:1E:DC:42:C4:C9
Certificate issuer: /CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Certificate serial: 010D0C9F4328584D0A77A8BA5F36B0432C4134FC
Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/1503d505-5194-36e4-8547-82404b18ae4c.roa
Signing time: Tue 03 Mar 2026 02:00:32 +0000
ROA not before: Tue 03 Mar 2026 02:00:32 +0000
ROA not after: Mon 01 Jun 2026 01:00:32 +0000
asID: 401298
IP address blocks: 66.96.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:0a:77:a8:ba:5f:36:b0:43:2c:41:34:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Validity
Not Before: Mar 3 02:00:32 2026 GMT
Not After : Jun 1 01:00:32 2026 GMT
Subject: CN=98121ff8-d7ac-4374-8b9f-9c339eb864e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:51:94:79:d0:4f:44:ff:d3:78:49:3f:80:ad:
c8:1e:85:cd:5f:60:28:f2:9e:6b:01:6f:27:c6:3b:
f7:27:7f:c6:5f:84:42:8e:3d:e0:40:f8:3c:be:4f:
5e:bb:de:ca:2f:d7:71:2d:29:a4:52:01:b8:1e:6d:
e8:5d:1d:72:d8:bf:ed:39:9d:29:ce:45:87:e4:5a:
91:67:72:9d:16:58:bb:01:4a:f4:82:5b:44:2f:d6:
1f:8e:c7:8c:98:f7:6c:7e:be:8b:a3:ba:8a:45:05:
8b:a6:a7:6f:54:6f:05:42:a0:4f:11:76:52:6c:7a:
e1:b0:0c:e6:96:39:ed:31:d1:1a:ec:0e:55:52:4d:
a8:27:d3:06:ee:29:af:87:ce:fb:4d:e9:e5:a7:ad:
6c:9c:1b:14:5a:92:0f:5b:30:3a:cb:3b:0b:c3:03:
c1:e7:b2:27:b7:8b:6b:5e:ef:72:4b:da:b8:6b:05:
71:27:5b:ea:15:69:01:65:6f:cf:8a:28:67:46:d6:
fe:bf:65:62:ce:2b:f6:02:45:33:a9:17:8e:e5:3e:
b7:e0:70:d8:40:bf:29:79:78:8b:67:79:e5:9e:71:
d6:eb:11:e9:32:a6:e9:1d:f1:58:77:40:eb:ce:cc:
f4:fa:3d:5c:6a:45:f0:16:ef:5d:13:88:17:12:c3:
3b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:32:04:68:77:2F:0A:97:D2:5E:1E:22:EE:BB:97:1E:DC:42:C4:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/1503d505-5194-36e4-8547-82404b18ae4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl
X509v3 Authority Key Identifier:
keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
sbgp-ipAddrBlock: critical
IPv4:
66.96.93.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:8e:df:4d:20:8d:bc:4a:88:60:03:70:49:f9:89:00:65:8e:
30:4b:7c:25:e4:45:18:70:c5:9d:e6:75:84:ee:bb:e6:67:aa:
c6:cb:7d:38:37:45:d0:71:e9:1a:b8:30:ee:bf:7f:5f:0d:7b:
45:c5:23:7b:3c:95:e5:4c:86:8c:b4:5e:52:2e:89:51:ab:a0:
59:83:2f:a9:69:8d:e7:a6:d8:c8:2a:00:38:42:a1:87:a3:88:
bc:d2:b6:fd:61:5a:a8:03:6b:c9:99:1e:5f:81:cb:f2:25:41:
80:16:e5:f1:a8:1b:0e:0a:b8:82:ac:2f:b4:d3:1e:b1:d5:80:
9a:ef:6e:93:fb:69:a4:ad:2b:e1:8e:77:14:9c:a1:26:bb:34:
96:40:d1:e5:76:75:89:1b:74:7b:c1:a7:51:d4:c3:03:b8:af:
5b:df:f8:af:27:42:6b:ef:cf:51:05:4f:6c:b9:5f:9e:7a:03:
2e:5d:56:e3:7f:ef:6e:67:1c:33:6b:fb:84:b9:1c:7d:7a:38:
4f:5e:05:a6:8a:9e:56:b3:e1:16:d3:99:14:27:2c:38:42:24:
ac:ff:8d:d5:fb:a4:f2:99:84:fd:0c:45:ec:cf:0b:9d:70:22:
f0:72:99:bd:41:a9:b9:94:82:4c:4e:32:e1:56:fb:d5:df:f6:
2c:a5:09:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:50:58 2026 by rpki-client