
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f4dd615-5a9e-4057-98d2-c069dd16f4f7/60ca95e7-2975-3b09-b8ee-ceb3d1df912f.roa
File: 60ca95e7-2975-3b09-b8ee-ceb3d1df912f.roa (raw, json)
Hash identifier: vZWApAeV7kZXPU+bP3A8g7/kmgaZWePGCwWBNYB7Z/U=
Subject key identifier: 71:9A:BA:E8:CC:A7:8D:FF:A2:36:43:94:9C:C1:36:94:35:66:B3:82
Certificate issuer: /CN=2f4dd615-5a9e-4057-98d2-c069dd16f4f7
Certificate serial: 010D0C9F4328584D39CF82097E433A630D8E9E00
Authority key identifier: 91:19:AF:EC:80:9F:5F:21:48:94:A1:B7:8D:E6:61:E5:8B:78:C1:D0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f4dd615-5a9e-4057-98d2-c069dd16f4f7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f4dd615-5a9e-4057-98d2-c069dd16f4f7/60ca95e7-2975-3b09-b8ee-ceb3d1df912f.roa
Signing time: Fri 20 Mar 2026 01:00:32 +0000
ROA not before: Fri 20 Mar 2026 01:00:32 +0000
ROA not after: Thu 18 Jun 2026 01:00:32 +0000
asID: 14618
IP address blocks: 172.99.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f4dd615-5a9e-4057-98d2-c069dd16f4f7/2f4dd615-5a9e-4057-98d2-c069dd16f4f7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f4dd615-5a9e-4057-98d2-c069dd16f4f7/2f4dd615-5a9e-4057-98d2-c069dd16f4f7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f4dd615-5a9e-4057-98d2-c069dd16f4f7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:39:cf:82:09:7e:43:3a:63:0d:8e:9e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f4dd615-5a9e-4057-98d2-c069dd16f4f7
Validity
Not Before: Mar 20 01:00:32 2026 GMT
Not After : Jun 18 01:00:32 2026 GMT
Subject: CN=08e36a3c-24dc-485f-9b11-3e19761bdc62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ba:3e:21:1c:d8:c9:12:b5:80:6e:86:2c:b9:
73:f1:9d:6f:fd:6a:2c:20:2f:fa:63:ed:6a:d5:d7:
9e:a8:03:b3:d2:18:34:fa:10:6d:1e:5d:81:d4:f2:
e5:1b:38:c3:7e:98:07:6a:d9:a3:1e:10:07:5e:94:
be:a2:bd:e3:60:63:02:e1:68:e3:c6:24:c0:f2:7b:
c7:32:1e:4e:4d:b7:8f:08:69:c4:17:b5:a8:74:a6:
d2:6b:19:ea:13:77:e1:1b:23:bc:07:9f:e3:09:94:
ae:c4:9c:9f:ff:e5:04:f7:db:29:0e:f9:41:77:68:
49:86:2f:32:24:71:47:07:4a:49:7b:f4:83:02:5b:
d8:95:54:02:33:58:11:5b:40:80:ba:79:bf:24:88:
ef:27:6d:2d:9c:4e:c9:2c:da:9d:4a:fd:34:49:6e:
08:26:19:90:eb:1b:9b:85:d5:6d:bd:df:13:0b:4f:
47:38:13:4f:2f:7b:f1:46:44:43:31:98:ae:77:9d:
3a:ed:55:5b:de:25:73:b7:5e:4d:32:a8:f2:95:43:
5b:12:ef:bd:d6:44:d7:92:3f:00:38:ef:09:94:11:
ab:6e:9f:11:72:11:b2:db:89:10:1f:07:88:83:65:
65:e1:2a:65:57:af:3e:d5:b9:3c:40:cf:17:b4:99:
5a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:9A:BA:E8:CC:A7:8D:FF:A2:36:43:94:9C:C1:36:94:35:66:B3:82
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f4dd615-5a9e-4057-98d2-c069dd16f4f7/60ca95e7-2975-3b09-b8ee-ceb3d1df912f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f4dd615-5a9e-4057-98d2-c069dd16f4f7/2f4dd615-5a9e-4057-98d2-c069dd16f4f7.crl
X509v3 Authority Key Identifier:
keyid:91:19:AF:EC:80:9F:5F:21:48:94:A1:B7:8D:E6:61:E5:8B:78:C1:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2f4dd615-5a9e-4057-98d2-c069dd16f4f7.cer
sbgp-ipAddrBlock: critical
IPv4:
172.99.250.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:ee:64:6b:cb:b0:8c:a9:b4:52:e2:36:b7:29:bc:84:25:94:
b7:b8:10:2d:95:30:60:28:e7:c2:16:6c:86:59:bc:78:db:f6:
8b:f2:59:3f:8a:d1:03:02:cb:e9:f6:dd:fd:13:c8:b5:f9:0e:
9a:d6:83:4b:1e:5f:ec:f4:98:38:b3:10:49:9d:9c:10:b7:4b:
31:0f:fa:ac:01:a3:8e:a4:cf:ee:80:ac:7a:2b:63:4e:5a:6e:
69:b9:c8:d4:00:a7:22:0c:09:88:4d:3a:05:d6:c3:4b:dd:ac:
fa:6a:2f:24:87:95:b1:79:0f:d8:d3:82:23:6f:6f:81:44:06:
87:e7:d1:7e:6b:2b:e3:3e:16:d0:18:dd:11:16:18:6b:54:76:
d1:6c:26:56:57:5e:6e:c4:7c:77:37:09:50:e4:8b:97:82:24:
21:40:e0:a3:58:b4:f7:7c:1d:22:c4:ac:6d:d1:fe:fe:89:76:
ea:bd:79:c4:b8:b3:9f:ff:df:fd:36:21:43:3a:e4:bb:10:6d:
52:d8:e1:a5:e8:33:83:e4:d8:9f:be:21:7d:b0:70:1f:08:35:
30:69:55:5e:09:58:fa:dd:92:e4:66:f6:87:15:52:cc:6e:24:
45:6f:57:ee:07:8a:aa:f5:b1:fd:1e:ed:dd:45:17:c2:00:9a:
1f:8c:0a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:21:14 2026 by rpki-client