
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/94ad24d3-b615-3d1d-9ca1-5dce283fab54.roa
File: 94ad24d3-b615-3d1d-9ca1-5dce283fab54.roa (raw, json)
Hash identifier: KbWTxUvSBN8vd0YW6r50EY469CFhNAnJEVyrnv5iMek=
Subject key identifier: B2:4C:A8:C3:EA:A0:0F:E5:9D:60:4E:DF:06:EA:B8:BD:2A:2E:9D:63
Certificate issuer: /CN=95a66ba6-9469-47f7-8328-e12b21a9be23
Certificate serial: 010D0C9F4328584D422F81303E218499C6E4B800
Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/94ad24d3-b615-3d1d-9ca1-5dce283fab54.roa
Signing time: Mon 23 Mar 2026 01:00:32 +0000
ROA not before: Mon 23 Mar 2026 01:00:32 +0000
ROA not after: Sun 21 Jun 2026 01:00:32 +0000
asID: 21433
IP address blocks: 144.36.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:42:2f:81:30:3e:21:84:99:c6:e4:b8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23
Validity
Not Before: Mar 23 01:00:32 2026 GMT
Not After : Jun 21 01:00:32 2026 GMT
Subject: CN=546940cd-4cb7-4f9b-8d43-b95524c1f032
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ff:ba:d2:51:63:40:f8:f9:7a:33:ba:d7:f8:
ef:c7:cb:65:6a:d3:27:46:54:18:af:c4:d2:d2:6f:
15:0b:a5:15:90:fa:c5:70:bb:03:ba:5e:de:63:34:
66:7d:63:b0:83:a4:82:cc:f4:17:c3:df:45:9f:43:
0e:f0:81:96:c0:c6:21:f4:91:fb:99:c7:8d:12:9e:
a7:dd:b3:87:6b:ae:cb:1d:2a:df:58:c5:39:01:b3:
ed:c8:40:ee:f1:5a:29:88:63:ed:c3:59:4b:f1:8f:
3b:dc:e4:7c:02:06:ff:41:92:2f:9b:c3:29:b7:7e:
10:38:2a:62:93:67:9a:22:c5:2b:bb:41:6b:b8:7a:
a2:c8:56:8e:71:eb:90:5e:cc:3e:d8:d1:09:82:78:
0c:58:93:bf:a2:42:a4:8d:77:55:1f:75:4e:99:9c:
14:2a:c4:34:c9:6e:7d:62:58:f2:95:fa:c0:c9:af:
1e:aa:61:c5:d2:9f:af:df:05:31:35:72:15:fa:18:
32:8f:d2:18:de:d4:91:fd:f0:ea:15:87:c1:e0:f3:
20:82:fa:f6:8d:01:f9:b2:d1:06:d1:e9:33:53:52:
9f:e7:79:88:d3:3a:67:69:0c:16:1a:50:25:87:21:
49:d3:a9:ed:54:94:95:bd:d4:e8:9b:67:6d:22:b8:
c3:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:4C:A8:C3:EA:A0:0F:E5:9D:60:4E:DF:06:EA:B8:BD:2A:2E:9D:63
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/94ad24d3-b615-3d1d-9ca1-5dce283fab54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl
X509v3 Authority Key Identifier:
keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
sbgp-ipAddrBlock: critical
IPv4:
144.36.114.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:bd:df:f5:88:dc:b5:f7:e1:fb:ea:8a:48:8b:b8:8c:e2:71:
18:93:da:6b:fb:ff:5e:5f:3d:f6:1c:95:5d:cf:67:5b:67:3b:
ce:02:1c:1a:cf:31:45:af:4e:86:3e:3f:b8:a2:93:52:99:d4:
68:43:02:70:4c:37:7c:c5:e2:43:e9:ba:61:45:99:cb:15:6d:
54:78:de:7d:ad:18:a2:07:43:90:b3:0e:b5:93:43:2e:b7:5a:
20:50:c7:75:bb:07:58:d4:69:8c:43:0b:ab:d4:c6:c6:7d:81:
f9:5d:45:bb:1a:fc:0f:a3:43:6f:63:0d:d0:f8:e2:11:5e:3b:
f8:63:b2:15:9f:2f:1b:51:b8:4f:1f:b2:17:5a:00:13:b4:ad:
7f:82:d8:6c:b7:7f:8c:16:33:cb:27:88:29:f3:d1:5c:c5:27:
f0:d1:3d:bd:e8:86:c4:42:5b:8f:a4:8e:51:5d:93:47:c8:e6:
2f:9b:c7:d4:7d:67:b3:21:a1:40:86:14:16:8d:74:e4:0e:ea:
21:7c:38:bf:ed:25:79:2e:4d:db:69:0f:00:9c:da:f5:19:83:
fa:c3:6a:aa:8a:93:be:8d:13:d7:f7:d6:dd:1d:10:86:53:4a:
50:71:91:9d:83:9b:23:ca:9c:1a:68:ab:a2:d3:16:80:a6:59:
17:a8:88:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:39:11 2026 by rpki-client