
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/89db818c-8476-3eec-9f80-42c7af3cfb5b.roa
File: 89db818c-8476-3eec-9f80-42c7af3cfb5b.roa (raw, json)
Hash identifier: SFR/TBRM2gNM8jeaXWhE38xaQpOiFHmL9eR02XaH9ak=
Subject key identifier: 4C:C5:3B:BF:E2:30:EA:79:D6:60:3F:CC:7E:EE:3F:65:7B:AD:96:2F
Certificate issuer: /CN=95a66ba6-9469-47f7-8328-e12b21a9be23
Certificate serial: 010D0C9F4328584D422F8A491E3E55805E332D00
Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/89db818c-8476-3eec-9f80-42c7af3cfb5b.roa
Signing time: Mon 23 Mar 2026 01:00:32 +0000
ROA not before: Mon 23 Mar 2026 01:00:32 +0000
ROA not after: Sun 21 Jun 2026 01:00:32 +0000
asID: 21433
IP address blocks: 144.36.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:42:2f:8a:49:1e:3e:55:80:5e:33:2d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23
Validity
Not Before: Mar 23 01:00:32 2026 GMT
Not After : Jun 21 01:00:32 2026 GMT
Subject: CN=d076fc01-cff9-4c52-afee-7631e1f15f22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:0b:7f:32:6b:11:35:84:a0:f5:af:92:ff:94:
13:2b:50:df:d8:17:a8:0b:c9:83:4c:a9:b6:92:98:
00:94:71:05:dd:99:46:78:12:24:91:11:3f:a2:ff:
2d:a1:c8:1f:82:42:3f:e7:b6:fe:ef:e1:45:9e:81:
f8:17:0d:8d:c8:2c:09:93:e0:e4:24:90:06:0f:bb:
a5:82:5c:9f:b1:7a:69:99:f3:a3:93:07:ac:41:91:
b0:25:82:1d:e0:b8:33:e5:2b:14:f8:0f:92:b6:51:
21:e8:1a:1a:8d:52:9d:59:31:77:a8:3f:29:13:10:
23:ea:4a:ad:7a:7c:68:93:b8:91:db:5c:e7:15:5a:
87:f4:c3:d1:11:a6:9b:49:14:80:44:d3:b0:b9:44:
ef:aa:cd:5f:d0:73:b1:b0:85:1e:58:ca:33:d4:93:
bf:56:46:53:f7:86:19:e9:df:10:47:12:85:e1:4b:
d2:77:4d:b5:0f:7e:cb:76:9f:31:7b:d3:a3:56:23:
91:7c:2f:dc:ce:f6:84:2b:aa:82:3d:1f:81:92:e3:
85:27:e9:93:34:20:55:ee:25:fc:ce:bc:2c:9a:01:
d3:ec:dc:f8:b5:dd:0a:2e:da:c8:0a:71:74:af:76:
4b:88:0b:0e:ad:e8:8c:a9:09:c9:42:bd:df:09:7a:
5d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:C5:3B:BF:E2:30:EA:79:D6:60:3F:CC:7E:EE:3F:65:7B:AD:96:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/89db818c-8476-3eec-9f80-42c7af3cfb5b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl
X509v3 Authority Key Identifier:
keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
sbgp-ipAddrBlock: critical
IPv4:
144.36.237.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:6d:c5:61:f6:0d:0b:c7:8f:e5:30:e1:c5:13:13:6f:e4:b2:
87:54:d9:2a:ea:94:6a:ec:85:d5:d1:94:41:61:33:72:1d:5b:
01:e3:57:72:be:5d:66:d1:47:a9:f2:e5:aa:88:df:4f:44:22:
d1:52:22:66:81:49:ba:7a:92:4d:f5:7a:60:5e:0f:29:d0:69:
a4:e9:71:79:ba:d7:77:b6:d1:d9:ed:b7:92:7b:a4:f2:77:b9:
ff:71:81:0d:fe:1e:63:48:0f:84:4c:bf:61:44:33:19:c1:72:
90:82:20:cf:5b:43:76:c6:39:f2:95:6b:22:df:d5:11:de:9f:
c7:84:f3:d2:7b:e0:71:bc:3c:b3:a7:e8:d0:2c:87:73:24:c2:
67:b9:25:ae:3a:9d:7a:42:15:a2:77:9c:95:6d:19:52:65:9c:
ea:72:66:57:b8:91:5f:8a:2d:1b:a8:f7:f4:fd:bf:de:5c:f5:
f1:d3:52:65:ee:f8:a4:92:37:fc:77:23:16:b8:d3:c3:19:b1:
a8:a6:7c:23:5c:c9:1a:37:9e:b1:ae:5d:f2:ad:23:a6:ea:99:
2b:e2:12:fd:25:8c:f7:a2:49:c8:d7:52:2f:ea:0d:f6:90:0a:
ee:1f:37:24:c6:9e:8e:01:e3:09:9b:16:0e:07:d8:97:58:39:
a4:1c:83:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:01:09 2026 by rpki-client