
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/3d371c57-c18a-326c-8805-4128c05dc2d1.roa
File: 3d371c57-c18a-326c-8805-4128c05dc2d1.roa (raw, json)
Hash identifier: ihRzYYjsRJMM95Zlfy1lyIOwnJE+IlBHWx9AZVKseJI=
Subject key identifier: D8:8C:E6:3C:E4:46:9E:A0:5F:18:08:A8:40:68:15:E9:ED:4C:66:4C
Certificate issuer: /CN=95a66ba6-9469-47f7-8328-e12b21a9be23
Certificate serial: 010D0C9F4328584D422F7E34F79D559D830CDB00
Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/3d371c57-c18a-326c-8805-4128c05dc2d1.roa
Signing time: Mon 23 Mar 2026 01:00:32 +0000
ROA not before: Mon 23 Mar 2026 01:00:32 +0000
ROA not after: Sun 21 Jun 2026 01:00:32 +0000
asID: 21433
IP address blocks: 144.36.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:42:2f:7e:34:f7:9d:55:9d:83:0c:db:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23
Validity
Not Before: Mar 23 01:00:32 2026 GMT
Not After : Jun 21 01:00:32 2026 GMT
Subject: CN=06f33041-a4e6-4a08-83ad-81e4bad20454
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:44:32:98:b9:d2:f0:aa:4a:57:5d:6c:3a:99:
c9:48:66:b3:93:b2:e4:7d:d4:25:41:11:77:35:79:
ff:d9:f6:39:91:9e:18:1a:61:c9:77:d9:f2:30:2b:
f8:7b:be:c5:df:37:62:27:29:f2:bc:55:7b:fc:d0:
41:14:74:cb:23:2d:ba:7b:ab:70:4a:5e:c5:17:6d:
27:28:f8:36:24:e0:1f:68:e3:4c:8a:7a:2a:c9:bb:
6d:42:24:f7:98:07:e8:08:bc:35:02:37:91:7e:30:
17:aa:59:46:27:f8:2f:e9:f6:14:9c:58:fa:d6:18:
3c:c3:b9:bc:56:17:50:cc:8c:b5:49:31:52:1a:42:
59:6a:ec:10:cd:44:2d:c6:66:12:2d:21:87:49:f6:
fc:e2:9c:01:5c:f7:96:5c:61:21:18:b4:f6:08:b4:
4a:57:4c:31:c6:81:dc:18:ba:52:0f:82:e9:37:3d:
d1:dc:52:58:28:47:a4:20:2c:19:c5:39:70:e8:3d:
59:ff:23:54:59:18:7c:af:3c:a7:7a:c1:7c:7b:17:
ce:4d:28:e2:9b:df:9a:8a:da:d5:a2:00:cd:0f:8a:
b5:a5:59:8e:ea:3c:da:ad:62:71:39:91:41:4c:70:
ec:aa:54:87:ca:81:79:f7:e8:fb:0a:1a:0b:da:99:
2d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:8C:E6:3C:E4:46:9E:A0:5F:18:08:A8:40:68:15:E9:ED:4C:66:4C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/3d371c57-c18a-326c-8805-4128c05dc2d1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl
X509v3 Authority Key Identifier:
keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
sbgp-ipAddrBlock: critical
IPv4:
144.36.44.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:3b:9e:37:7b:de:d7:19:d6:10:96:1e:25:8d:3c:25:b9:ee:
f0:f9:97:cb:50:41:e2:ee:c3:9d:cc:1a:d1:09:17:ed:9d:ef:
39:07:29:15:00:97:33:38:ef:a5:e7:2c:a6:b8:09:6b:a0:dc:
9c:a6:ef:63:f4:b9:1d:c5:fb:c5:af:14:0b:cc:13:c7:9f:54:
45:4e:6f:ad:2d:40:fc:b7:2a:1b:79:33:71:da:c8:35:c3:3f:
42:44:e9:d6:cd:3f:b2:9a:66:12:e5:be:ed:97:2c:88:a8:13:
fa:00:83:a2:76:84:62:89:74:27:f5:4a:97:13:53:6d:a6:7b:
0a:e4:f4:7a:22:8a:3d:ca:5a:7a:67:52:71:c3:91:19:dd:f9:
e5:dd:09:64:0e:7e:52:7c:76:df:8b:f1:f3:ca:b5:83:c8:e1:
81:d2:ed:fa:0e:a8:62:5f:d4:43:66:dc:93:92:57:fe:e4:7a:
65:98:52:57:d6:36:4e:35:59:88:07:c9:4a:81:59:ff:db:15:
03:6e:f5:6e:e4:af:d0:b0:e1:ec:6d:d5:97:3a:0f:24:00:35:
90:15:af:a4:66:13:14:e3:03:08:5a:5f:52:cb:56:32:40:f7:
ac:49:92:3c:42:7f:a6:35:3b:51:2d:14:64:3b:8a:a4:40:ab:
dd:41:fc:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:03:19 2026 by rpki-client