
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8cc002dc-5652-4cb7-8a1c-de91edd9d9b2/96c281dd-57c3-39da-8b6d-39750b727d15.roa
File: 96c281dd-57c3-39da-8b6d-39750b727d15.roa (raw, json)
Hash identifier: i9kg5nkw5A0DJJGWTbMd3noYqU+GwvYYZqg5viNqv/k=
Subject key identifier: DC:96:14:CA:C9:67:59:32:01:3F:DE:96:C6:B8:B2:EB:51:70:71:73
Certificate issuer: /CN=8cc002dc-5652-4cb7-8a1c-de91edd9d9b2
Certificate serial: 010D0C9F4328584D2BDA12F8FF5859B9E9F89E40
Authority key identifier: 2E:60:D0:8B:02:8B:C2:95:4C:4C:78:BB:39:61:2B:6A:45:67:41:28
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8cc002dc-5652-4cb7-8a1c-de91edd9d9b2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8cc002dc-5652-4cb7-8a1c-de91edd9d9b2/96c281dd-57c3-39da-8b6d-39750b727d15.roa
Signing time: Sun 15 Mar 2026 01:00:32 +0000
ROA not before: Sun 15 Mar 2026 01:00:32 +0000
ROA not after: Sat 13 Jun 2026 01:00:32 +0000
asID: 26140
IP address blocks: 65.39.220.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8cc002dc-5652-4cb7-8a1c-de91edd9d9b2/8cc002dc-5652-4cb7-8a1c-de91edd9d9b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8cc002dc-5652-4cb7-8a1c-de91edd9d9b2/8cc002dc-5652-4cb7-8a1c-de91edd9d9b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8cc002dc-5652-4cb7-8a1c-de91edd9d9b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:2b:da:12:f8:ff:58:59:b9:e9:f8:9e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cc002dc-5652-4cb7-8a1c-de91edd9d9b2
Validity
Not Before: Mar 15 01:00:32 2026 GMT
Not After : Jun 13 01:00:32 2026 GMT
Subject: CN=3d2e49d0-bbf3-4e80-83e7-f5b5390a830c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e2:87:d5:41:f5:59:e0:f4:26:ce:14:f0:51:
d7:e1:78:31:9b:90:f8:fd:65:34:10:38:fd:38:77:
50:c1:ba:bc:6e:c3:40:e4:9c:5e:58:a2:3c:a5:7d:
34:0e:18:2f:3e:3c:cf:3a:a2:6a:bf:48:8a:75:f8:
4a:10:3e:3a:25:47:ea:16:2c:68:14:b6:3c:5d:ef:
38:a3:ea:ec:d6:a3:d9:36:b9:f1:a9:c6:90:66:01:
93:ad:23:4f:c7:1c:c0:53:df:2c:f4:62:ae:1e:77:
06:e5:f6:fa:87:7c:ce:29:af:62:2f:ad:7e:96:16:
73:7a:77:75:7e:c2:e4:e7:6c:f1:6b:fa:08:32:7f:
0d:95:c5:31:44:e9:9e:5f:a2:ce:4a:1b:8f:73:cd:
2d:1f:26:bf:b8:86:77:48:d3:65:34:d2:9c:e4:d7:
1c:3e:cf:6e:34:6c:84:0c:b6:1b:16:e6:c7:63:85:
69:50:3f:d8:58:f7:fc:b2:04:3c:0c:e6:2b:3a:fe:
5d:c1:a7:fb:4e:a2:ea:67:e4:84:12:9e:00:a7:d4:
1e:93:e6:07:3d:1b:22:08:00:87:bb:f5:60:81:9f:
c6:44:0c:8e:6e:d6:7d:3f:db:c0:54:7a:49:04:bd:
c2:ac:5d:79:9e:b9:5b:1c:bd:8f:00:ef:75:2d:8c:
7b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:96:14:CA:C9:67:59:32:01:3F:DE:96:C6:B8:B2:EB:51:70:71:73
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8cc002dc-5652-4cb7-8a1c-de91edd9d9b2/96c281dd-57c3-39da-8b6d-39750b727d15.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8cc002dc-5652-4cb7-8a1c-de91edd9d9b2/8cc002dc-5652-4cb7-8a1c-de91edd9d9b2.crl
X509v3 Authority Key Identifier:
keyid:2E:60:D0:8B:02:8B:C2:95:4C:4C:78:BB:39:61:2B:6A:45:67:41:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8cc002dc-5652-4cb7-8a1c-de91edd9d9b2.cer
sbgp-ipAddrBlock: critical
IPv4:
65.39.220.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:c6:7c:7f:d8:27:11:a0:fa:58:73:53:4e:de:34:63:b4:fb:
2b:c1:0f:a3:99:28:87:5d:4a:4b:ea:e9:bd:08:e5:51:0f:ce:
b8:a1:12:9e:ac:55:87:d9:40:64:dc:3e:06:5b:03:9c:66:4f:
1a:5a:d9:1a:9e:13:b1:65:11:71:67:33:57:42:0f:34:43:34:
0f:1f:03:cb:e5:42:29:02:c0:70:42:dc:2c:06:7f:bb:38:a1:
69:c6:df:18:cd:06:c4:bc:ba:6f:66:45:16:32:f2:28:92:6c:
66:57:d4:02:ce:d7:22:27:5e:63:30:bd:87:2d:27:5b:02:71:
50:18:84:55:0c:73:5f:6f:47:f2:2b:c5:f2:72:a1:6f:b0:9f:
fc:41:c4:af:13:38:52:5f:71:d2:de:49:fd:40:67:7e:35:44:
af:e9:59:5a:4e:a9:64:97:aa:39:31:f6:5e:98:4d:2e:a7:27:
6b:e1:82:e4:e7:f0:cc:cd:dd:6b:54:b4:6b:b7:65:23:cd:3a:
e7:cf:c0:ac:d9:82:0f:ed:a9:a8:fd:5b:5d:cc:2c:5f:86:d0:
2f:1d:30:97:10:35:36:ce:43:b3:5a:53:02:14:fa:49:95:4b:
3d:1a:d0:49:af:3a:98:ff:eb:09:71:af:fe:75:b1:9e:52:0b:
45:80:49:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 03:09:27 2026 by rpki-client