
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/a61681db-9c2d-39f4-ae56-91f2600f6136.roa
File: a61681db-9c2d-39f4-ae56-91f2600f6136.roa (raw, json)
Hash identifier: wuBfi2Kgd7enR0YctSajplgBjKus0SET9RcMkmbPd/Y=
Subject key identifier: A3:23:19:23:BB:E4:C4:48:CE:40:45:05:9B:3D:60:49:EC:60:61:2E
Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial: 010D0C9F4328584F4973CC0109E7AB21B0582100
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/a61681db-9c2d-39f4-ae56-91f2600f6136.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 262287
IP address blocks: 198.145.67.0/24 maxlen: 24
209.20.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 29 Sep 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:73:cc:01:09:e7:ab:21:b0:58:21:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=a73dfacc-a9ae-4a2b-bb72-99b4d94550a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a2:7f:bb:ec:3a:53:7a:bd:f6:73:1c:d4:9b:
37:0d:65:5a:db:33:fd:1b:6d:db:10:0c:9c:45:40:
23:60:3c:fe:0a:f1:a2:2c:dc:93:c5:b3:ae:a6:59:
8a:17:2b:89:3b:8f:05:dd:93:44:a2:42:2e:58:58:
67:c7:2f:02:b3:46:c0:a1:2c:58:db:5f:1d:6d:90:
9c:73:9f:0b:1e:ba:bc:13:60:e5:0a:c8:b8:f9:a6:
27:ba:29:ea:06:6a:88:b2:42:32:34:73:f4:e9:3e:
fc:7e:9d:c7:fe:80:90:82:0b:5f:08:e3:02:2c:e5:
6a:01:88:00:4b:90:f3:63:91:79:a9:b7:6b:4a:71:
87:53:40:3e:49:a8:e6:1d:f0:b2:c4:c5:fb:77:70:
49:af:7e:e2:cf:83:03:7e:00:d8:e8:08:3e:26:40:
27:14:c1:3e:f4:20:de:45:b2:78:8c:36:32:c4:c7:
07:9e:a7:33:de:e7:0c:3e:91:86:21:3f:34:45:13:
fc:13:96:b5:01:a0:7a:29:5d:37:d4:e1:16:ba:8f:
45:57:ad:63:ca:92:7d:34:9f:46:54:aa:e4:7a:9b:
b1:08:f1:9e:80:55:e2:80:95:ce:81:78:ac:48:9b:
ff:8e:da:0a:8f:8c:47:84:54:0b:c1:8b:5d:da:11:
91:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:23:19:23:BB:E4:C4:48:CE:40:45:05:9B:3D:60:49:EC:60:61:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/a61681db-9c2d-39f4-ae56-91f2600f6136.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
X509v3 Authority Key Identifier:
keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
sbgp-ipAddrBlock: critical
IPv4:
198.145.67.0/24
209.20.133.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:dd:68:25:b8:4d:43:6c:68:d0:d2:37:a9:39:cc:27:f5:68:
63:43:c3:37:fc:11:ec:1a:d5:ac:a6:a4:23:f1:08:27:b2:e1:
13:b3:a8:cb:7c:d2:e3:70:e4:45:f7:d3:da:97:6a:ac:6b:7a:
99:a8:41:41:b9:93:51:62:5a:c5:11:eb:e3:04:d3:09:63:18:
3b:ec:85:e9:2c:b4:3e:46:05:4d:b6:e8:9c:59:a0:73:4c:46:
f0:06:be:69:d2:06:d5:91:0d:4f:db:2a:e3:da:22:ee:20:8a:
77:fa:37:a6:98:04:c5:9a:f7:37:7a:0d:80:67:dc:2d:b1:2b:
4c:6a:ea:28:cd:c8:a5:29:ab:f0:0b:19:b7:7b:13:3d:6e:08:
a7:1e:76:e5:3f:26:fc:62:dc:56:72:93:34:09:bf:22:d7:9b:
00:48:01:85:e9:71:ac:a5:db:ca:be:26:d5:54:fd:ea:32:f6:
59:3a:1e:3c:3d:09:83:b3:2c:49:9a:43:2b:cb:9e:b9:cb:b1:
46:ea:66:05:bc:ee:60:47:e3:62:14:12:a3:2b:de:79:9f:72:
e1:e8:6b:d0:5b:72:45:3b:d2:d0:d8:ab:05:74:44:fc:e5:05:
77:ec:ec:2d:a8:f3:1f:90:ad:bf:01:85:fb:84:5d:90:30:df:
26:8f:7f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 06:18:39 2026 by rpki-client