
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/78b57014-1aa5-3718-9292-533882360efc.roa
File: 78b57014-1aa5-3718-9292-533882360efc.roa (raw, json)
Hash identifier: O2AZImcBJs7WEKuK5gg5DnbV8kf1RcW99rAALhMtQhI=
Subject key identifier: 0F:23:73:37:77:AA:3C:70:17:93:8E:B0:59:56:8C:08:D5:4F:BB:3E
Certificate issuer: /CN=ff6475f1-b52e-4c86-8d20-188751c350e8
Certificate serial: 010D0C9F4328584D948AA4199776A5A664FCEC80
Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/78b57014-1aa5-3718-9292-533882360efc.roa
Signing time: Tue 21 Apr 2026 13:00:31 +0000
ROA not before: Tue 21 Apr 2026 13:00:31 +0000
ROA not after: Mon 20 Jul 2026 13:00:31 +0000
asID: 23470
IP address blocks: 96.43.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:94:8a:a4:19:97:76:a5:a6:64:fc:ec:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8
Validity
Not Before: Apr 21 13:00:31 2026 GMT
Not After : Jul 20 13:00:31 2026 GMT
Subject: CN=54ab9a6f-3830-4efb-bfb8-6eb19d8bd24d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:40:78:cf:16:85:ad:58:69:c9:48:1e:2f:d7:
30:4d:75:0e:2a:3a:72:16:34:25:fa:cf:b2:dc:5d:
b3:1b:7f:ed:6a:99:88:ae:6a:b3:24:43:e8:94:56:
9b:6b:76:bd:a7:ef:ae:fd:6d:85:49:ab:22:be:3c:
00:2c:ef:47:29:fb:bf:93:fd:8f:51:22:63:50:64:
77:e2:cb:75:d2:27:f4:ab:ba:b1:f2:19:9c:af:20:
0c:68:23:af:74:93:d4:4a:f8:f1:22:25:1f:7c:a5:
32:b0:98:4f:5e:0e:68:9c:55:b5:37:78:5a:e5:79:
4c:12:ea:99:f9:83:08:fa:c7:f2:d0:f8:ac:d0:3c:
46:db:82:09:e5:41:b3:2f:07:71:2d:9a:31:b9:c8:
97:5c:d4:cb:b2:15:f4:86:9c:98:9c:0c:35:a7:d0:
8e:06:44:2b:80:9c:ef:93:ef:76:77:5f:6c:c7:85:
b3:52:4c:ef:41:37:11:7e:99:14:3c:5f:ce:1c:c2:
36:d7:72:e2:a2:df:aa:30:a5:52:82:2e:5f:60:aa:
f4:c5:75:d4:34:d5:4c:1c:04:ab:af:18:64:4b:3c:
f2:c4:97:4f:88:10:70:86:ed:87:fc:6f:4e:23:cd:
38:41:c1:7d:9b:c7:e1:a6:42:df:c8:b6:f9:93:3f:
d0:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:23:73:37:77:AA:3C:70:17:93:8E:B0:59:56:8C:08:D5:4F:BB:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/78b57014-1aa5-3718-9292-533882360efc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl
X509v3 Authority Key Identifier:
keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
sbgp-ipAddrBlock: critical
IPv4:
96.43.108.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:e3:f8:e5:5b:99:37:c0:ec:d8:46:35:00:7b:fe:9a:08:aa:
dd:b1:a1:7a:57:b4:3a:61:7e:6b:f0:3b:cf:99:68:8b:91:22:
d4:05:16:4b:b8:f4:da:68:cf:e2:d0:ae:b2:66:5a:a4:ad:4a:
51:89:bd:3e:e8:ab:c6:6b:86:a5:c5:e0:3e:e4:bb:16:71:28:
bd:9c:0c:71:40:3d:d8:9e:11:6a:e2:89:4f:9b:3d:9c:25:02:
ed:2e:56:87:81:36:1d:62:ee:f9:24:14:5a:d5:27:b7:5f:0b:
6e:e1:2e:21:1b:c8:b4:85:90:53:bb:f6:16:d4:25:64:a6:79:
6f:64:18:4d:a8:9c:25:d3:b1:e9:32:e8:ef:26:20:74:3d:b2:
c2:af:af:41:40:1b:a8:1f:11:ed:1c:12:aa:ae:7c:f9:f9:8a:
ae:7b:be:3c:a9:02:0b:73:71:ef:17:f7:7b:01:53:d7:94:e8:
08:ee:3a:6a:a0:d4:42:98:4e:bb:96:a2:d7:da:e9:dc:c2:37:
cd:25:fc:f6:9b:1c:b7:8a:0d:a6:12:14:a2:ff:87:d9:e2:06:
e6:b5:4a:4a:8f:8e:0f:e1:25:70:db:fe:6d:44:ca:cb:f9:50:
21:a9:4b:c2:e0:ef:ed:dc:f3:a1:33:77:35:db:e5:c8:59:36:
c2:33:f2:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:31:58 2026 by rpki-client