
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/d212f7d8-713f-3286-9603-26498524616d.roa
File: d212f7d8-713f-3286-9603-26498524616d.roa (raw, json)
Hash identifier: VchoYZtOzs7CPUeE6jG5kTzPY/uHvD71gyXoGGGKNU0=
Subject key identifier: 02:6C:69:38:B2:56:F6:AC:03:63:D3:7F:6F:55:2F:75:76:B1:91:D2
Certificate issuer: /CN=95a66ba6-9469-47f7-8328-e12b21a9be23
Certificate serial: 010D0C9F4328584D316F615A8784696A25CA0640
Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/d212f7d8-713f-3286-9603-26498524616d.roa
Signing time: Tue 17 Mar 2026 01:00:32 +0000
ROA not before: Tue 17 Mar 2026 01:00:32 +0000
ROA not after: Mon 15 Jun 2026 01:00:32 +0000
asID: 21433
IP address blocks: 170.248.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:31:6f:61:5a:87:84:69:6a:25:ca:06:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23
Validity
Not Before: Mar 17 01:00:32 2026 GMT
Not After : Jun 15 01:00:32 2026 GMT
Subject: CN=086f6b1e-ffa0-41f7-b76f-870dbebafad6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ce:f3:34:b6:d9:ab:98:5d:bb:02:06:8a:56:
ed:8b:4b:05:f6:8b:79:ba:20:53:00:a7:67:ec:da:
43:e3:44:05:cb:31:17:5d:11:f2:3b:f4:7b:fa:51:
a2:e2:27:bc:b0:01:9d:0e:f2:fe:6b:88:a5:8e:e4:
64:7e:a4:70:d6:36:c0:3f:ff:6c:70:56:71:5f:bf:
1b:d0:ac:34:bb:38:81:5e:9d:0c:b5:55:98:86:42:
99:e1:bb:84:37:15:eb:e6:62:cb:b0:4f:d2:a2:86:
1f:c6:3d:cf:57:07:02:23:ee:e8:75:de:23:fd:df:
36:de:f9:ec:af:49:e0:a1:88:a1:f4:64:56:c5:fe:
11:01:d2:c1:78:3c:69:7d:67:61:49:a8:c4:4d:d7:
b8:dc:07:c8:fe:6f:6e:3b:c7:57:a8:80:e5:fc:c6:
79:41:b2:df:e6:a9:8c:87:bd:8f:d0:15:69:e5:78:
0d:53:1e:10:be:01:f2:f9:73:17:39:d0:36:17:44:
55:b1:1e:17:c6:f5:0d:bd:4f:99:09:9a:da:fd:34:
68:b4:0c:96:b3:da:be:12:7a:ef:3f:e8:fb:8c:02:
64:58:54:51:96:30:1b:d0:41:56:32:c9:7c:e4:21:
05:d0:36:e1:39:3e:7c:c8:3f:9e:4d:4e:03:ff:af:
bc:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:6C:69:38:B2:56:F6:AC:03:63:D3:7F:6F:55:2F:75:76:B1:91:D2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/d212f7d8-713f-3286-9603-26498524616d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl
X509v3 Authority Key Identifier:
keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
sbgp-ipAddrBlock: critical
IPv4:
170.248.100.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:11:bb:4a:43:3e:b1:d6:01:be:06:e4:34:75:1d:ee:d6:f2:
6a:76:58:dc:cf:10:cc:ba:47:c8:83:83:b5:64:b1:c9:84:0f:
c8:11:5a:5a:e0:88:10:84:bb:0a:d7:10:c8:bf:83:ba:e4:f1:
13:2f:59:75:cb:1a:43:7d:55:30:1c:0f:1a:9f:89:85:ca:ec:
9a:27:16:2e:f8:fd:56:08:ad:f2:be:10:81:6e:f5:f0:7f:22:
f2:39:b6:14:a8:a0:55:12:52:72:06:5d:be:7a:96:6e:8b:9e:
1c:16:c2:c3:d4:91:d4:49:a2:75:a6:a9:9a:a2:2a:e8:e8:b6:
14:99:48:12:5f:e6:bf:88:04:f0:32:51:bf:f0:14:db:52:d7:
32:74:cd:83:09:1c:12:4d:0d:41:5e:c7:ae:b3:cf:e8:c8:95:
26:cc:77:51:d6:39:e1:14:ef:d2:05:75:3e:93:d8:67:b7:2a:
ee:40:fb:cf:90:63:32:44:73:c9:03:58:31:62:9e:d4:20:c8:
d3:06:23:ab:4a:b3:57:d0:d5:17:83:96:64:45:04:07:4a:91:
36:a4:08:52:a5:58:7b:04:7a:df:13:da:41:3c:0c:82:7b:8e:
5f:79:c7:f3:fe:46:a0:8a:f4:45:56:22:e4:a2:b2:b7:cf:df:
8e:85:7d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:31:57 2026 by rpki-client