
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/1092ed51-9f14-3ebb-8463-c759a5546a52.roa
File: 1092ed51-9f14-3ebb-8463-c759a5546a52.roa (raw, json)
Hash identifier: okN6t7aXRd4xCVe/xrt81MBCzz0PCPLwVeGYkyTjbjg=
Subject key identifier: D9:DD:D2:6D:EE:BE:AD:17:D7:39:AC:04:37:B0:8C:0A:9C:8C:E1:FF
Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8
Certificate serial: 010D0C9F4328584DB7703A208B794B6CD6756F00
Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/1092ed51-9f14-3ebb-8463-c759a5546a52.roa
Signing time: Mon 04 May 2026 01:00:25 +0000
ROA not before: Mon 04 May 2026 01:00:25 +0000
ROA not after: Sun 02 Aug 2026 01:00:25 +0000
asID: 20648
IP address blocks: 96.43.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:b7:70:3a:20:8b:79:4b:6c:d6:75:6f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8
Validity
Not Before: May 4 01:00:25 2026 GMT
Not After : Aug 2 01:00:25 2026 GMT
Subject: CN=2bd5651e-f400-4946-8454-619000c46074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:a6:bc:c2:93:6d:37:d3:e1:e0:a6:51:86:19:
77:44:eb:d1:fb:10:15:15:ca:c8:e8:1c:e2:ef:25:
a6:b8:ad:6d:fa:60:09:c0:d3:f1:cc:53:74:52:40:
c7:34:01:78:e6:a4:b7:14:84:33:86:ee:02:e5:47:
34:32:85:50:c7:bd:8b:cf:96:21:46:04:ef:2f:de:
23:86:00:fd:5e:ec:6f:e3:6c:b6:25:f2:e3:33:6f:
aa:25:4b:56:da:2c:2c:ae:0a:2a:5b:5a:8a:72:82:
69:8b:18:4b:a5:5d:90:d1:3b:bf:a1:47:04:00:f0:
0b:f2:f2:6f:c8:64:d6:53:e2:b5:ba:60:4d:74:bc:
7b:0e:54:9d:cb:d2:f4:5a:df:a8:65:a0:4d:98:5f:
5e:eb:1b:42:cc:50:62:2a:a8:ca:dc:a9:59:76:44:
87:23:aa:a6:4c:6f:ea:5f:59:3c:f0:73:d3:d8:c8:
fa:c8:15:c2:d8:52:c4:b5:7e:07:bf:12:31:8d:e3:
ce:d7:8b:d2:8e:ca:1d:cc:70:c4:ab:54:cb:2a:7b:
77:00:06:f7:18:97:9f:84:81:76:21:0d:34:d0:c8:
79:7c:dd:68:3e:a2:58:19:36:19:cd:89:61:a8:f4:
19:47:58:e9:af:35:01:e8:63:23:28:f6:2a:72:48:
68:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:DD:D2:6D:EE:BE:AD:17:D7:39:AC:04:37:B0:8C:0A:9C:8C:E1:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/1092ed51-9f14-3ebb-8463-c759a5546a52.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl
X509v3 Authority Key Identifier:
keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
sbgp-ipAddrBlock: critical
IPv4:
96.43.109.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:63:d8:c2:94:0a:30:7c:8c:2f:9f:07:82:76:3c:ab:c4:a9:
29:08:a6:93:04:d9:ac:a1:03:06:82:b6:42:85:4b:7d:6d:df:
22:72:2d:81:6c:c2:cb:05:13:09:ed:55:70:2d:1c:24:8b:bd:
6c:96:91:c6:c9:da:a9:fb:e2:a5:91:31:56:97:40:dc:39:38:
98:c7:71:d9:b1:f5:b4:c7:b9:13:ba:17:da:cc:53:6f:a0:a1:
48:f0:d5:f1:72:05:37:26:df:55:6d:1c:9e:4c:db:70:43:77:
c9:ed:b6:3f:7d:8b:bc:de:c5:93:ad:f6:5b:18:d0:dd:54:e9:
96:64:2d:f5:ac:69:c5:11:e2:e6:e9:0c:0d:00:39:b4:08:15:
44:95:87:51:23:7e:05:7f:5e:80:f8:42:08:48:f5:50:e3:87:
27:86:03:12:81:f5:e1:f2:f9:93:fa:d5:fb:39:74:53:5f:4c:
00:36:e5:d6:9d:c0:fe:da:16:6e:e6:2b:ab:d0:bb:aa:d5:37:
45:c6:bf:d5:ea:0e:82:cb:93:c2:d4:4d:cc:8e:02:89:39:64:
28:5d:84:08:dc:8a:61:05:e6:12:7e:e5:22:7e:02:59:f6:e6:
5a:4b:57:93:a1:0b:4d:44:8e:fa:14:28:60:50:fe:13:66:4c:
2c:85:be:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:26:51 2026 by rpki-client