
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/c70772f6-9f19-3faa-b00d-0174b2453ae8.roa
File: c70772f6-9f19-3faa-b00d-0174b2453ae8.roa (raw, json)
Hash identifier: W65jbS1EmWTLWcH1Csf0WxIv4EdWty0AkknsOgPFRdg=
Subject key identifier: C9:E5:56:9B:24:74:55:DD:97:BE:CA:DF:68:2D:D3:D3:98:C9:AA:0C
Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial: 010D0C9F4328584D3C55D7318B1407DFF6A24DC0
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/c70772f6-9f19-3faa-b00d-0174b2453ae8.roa
Signing time: Fri 20 Mar 2026 22:43:02 +0000
ROA not before: Fri 20 Mar 2026 22:43:02 +0000
ROA not after: Thu 18 Jun 2026 22:43:02 +0000
asID: 54702
IP address blocks: 104.238.251.0/24 maxlen: 24
198.145.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:3c:55:d7:31:8b:14:07:df:f6:a2:4d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Validity
Not Before: Mar 20 22:43:02 2026 GMT
Not After : Jun 18 22:43:02 2026 GMT
Subject: CN=7e92bcb6-671a-4ab9-b790-ab6afab16a32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:0b:0d:40:06:3c:8b:80:02:dc:8b:78:dc:3b:
5e:3b:1a:c6:bd:a7:4e:de:b2:fd:d8:d9:5d:2d:a8:
70:b4:a9:68:c6:08:06:67:f9:7f:e0:30:56:ae:3c:
60:53:5d:39:da:53:dd:da:31:a9:6c:a4:0e:9c:40:
52:af:cd:0f:3d:99:9e:6c:26:74:22:7e:0f:c7:91:
43:7e:2d:7d:32:fc:c9:5e:33:80:bb:5a:cb:7c:f0:
33:9a:19:60:23:1c:1c:7c:f1:19:6e:dc:e0:d6:05:
c5:47:35:9e:a7:d1:44:a8:fb:5d:dd:25:c1:c0:85:
25:41:3a:a2:11:4f:e8:02:0c:8c:b1:a2:d5:1a:83:
07:03:f1:56:cb:f1:5e:26:a2:8a:c0:b6:33:c6:03:
71:ae:2d:7f:ad:94:d8:57:34:b4:20:30:db:50:ef:
48:f2:1a:46:e9:8b:4e:95:a0:71:45:77:3a:57:7e:
93:89:f2:2f:33:33:a9:47:f9:0c:b6:57:9e:60:5d:
27:01:a6:8c:35:f8:eb:07:34:2f:dd:6a:74:c6:9b:
59:45:c7:32:c0:29:7d:08:35:66:b7:e6:80:dc:f2:
ad:33:da:75:2e:33:7a:63:bf:87:49:f1:98:4d:b3:
60:02:76:a9:47:1d:38:6e:b0:64:bf:ee:6f:fb:db:
d2:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:E5:56:9B:24:74:55:DD:97:BE:CA:DF:68:2D:D3:D3:98:C9:AA:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/c70772f6-9f19-3faa-b00d-0174b2453ae8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
X509v3 Authority Key Identifier:
keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
sbgp-ipAddrBlock: critical
IPv4:
104.238.251.0/24
198.145.144.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:08:09:10:17:f5:74:52:fa:53:56:a9:83:e6:e2:2e:62:4d:
5a:8b:46:d4:2c:76:f9:b1:bf:54:f6:87:5a:05:81:8d:45:40:
16:e6:15:50:68:fa:91:cb:fa:3a:2a:39:1a:83:4e:e2:0e:99:
93:56:32:62:a0:d2:cb:5c:db:6d:0e:eb:e6:14:a1:e5:f9:f5:
b0:56:c8:96:9c:11:a1:15:ef:3c:4f:93:5f:1d:ad:f6:1d:3d:
bc:1e:69:11:42:16:34:39:e5:c8:76:a1:5b:cb:d8:48:d8:82:
7a:12:8e:c4:92:fc:04:de:4f:2f:c1:1f:96:05:61:b6:bd:17:
45:84:1b:78:39:30:02:62:3b:ed:9a:97:a3:c9:83:27:8a:4a:
61:a4:d6:2a:a8:a8:12:07:5e:55:08:9a:08:55:d2:1f:ee:e0:
8d:f5:6a:94:47:c9:8a:8f:28:01:72:a3:07:df:65:9a:59:9c:
85:f5:26:ac:2e:0a:ea:48:32:ef:4d:2c:b8:4b:28:f7:8f:f6:
93:1b:52:e8:b4:78:d8:62:7c:df:0c:35:63:31:35:ed:14:dd:
4e:01:e6:af:dd:17:07:db:f2:78:10:b9:6d:f7:36:7b:7c:e6:
d9:4a:5d:44:eb:cb:ab:78:e5:a6:7e:3c:14:b6:94:3d:c1:1f:
61:db:34:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:49:12 2026 by rpki-client