
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/d2e78fa7-1081-3971-8c13-1d464eb50b2d.roa
File: d2e78fa7-1081-3971-8c13-1d464eb50b2d.roa (raw, json)
Hash identifier: 28VYD7NEb1ebDIlabR9BVGz9XNCXLxAQ+CVGZ34ulNw=
Subject key identifier: 03:AC:7D:DA:FD:79:E6:FD:03:FD:13:DE:C4:EB:7C:12:2F:3B:A1:59
Certificate issuer: /CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
Certificate serial: 010D0C9F4328584DB1DC511AE8BC8C42A6975EC0
Authority key identifier: 92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/d2e78fa7-1081-3971-8c13-1d464eb50b2d.roa
Signing time: Sat 02 May 2026 01:03:34 +0000
ROA not before: Sat 02 May 2026 01:03:34 +0000
ROA not after: Fri 31 Jul 2026 01:03:34 +0000
asID: 36829
IP address blocks: 104.156.149.0/24 maxlen: 24
141.195.98.0/24 maxlen: 24
141.195.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:b1:dc:51:1a:e8:bc:8c:42:a6:97:5e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
Validity
Not Before: May 2 01:03:34 2026 GMT
Not After : Jul 31 01:03:34 2026 GMT
Subject: CN=f4bf09cc-0ea5-4700-b2d6-8c056d59ded7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0e:14:8a:6a:ab:85:f2:f2:e3:1a:69:83:9d:
45:c3:20:fc:00:7f:f6:73:cc:f4:66:89:2d:4f:27:
fe:46:f2:6d:b6:89:2c:ee:4f:a8:46:2e:41:52:ef:
fd:fe:d1:ac:b7:7f:9e:29:b1:41:6b:5a:66:69:e3:
58:12:e5:2e:72:4c:d0:37:bc:dd:9f:73:f3:bc:0a:
fa:9b:1c:7a:e4:73:6c:aa:71:da:11:4a:e5:54:38:
1c:01:b4:a0:2f:86:86:30:6e:87:21:ca:19:f2:24:
b3:2d:b5:4b:9e:b8:70:a7:f0:8b:58:ab:91:ee:73:
f5:23:61:d6:71:99:94:85:44:bc:63:b1:8e:d2:d4:
ad:85:d8:3d:fe:f1:52:0b:e6:bb:d9:5e:1e:69:27:
f0:d6:e9:ca:c0:af:ad:b7:47:99:3c:16:a1:78:76:
9e:66:04:ff:38:95:f2:cf:bb:d7:13:15:d7:e3:e9:
d6:40:40:31:70:e9:9a:0e:38:0c:5e:5f:9d:75:99:
34:a9:0f:35:6c:da:8d:d6:8a:00:b8:b4:c6:9f:4f:
6e:a4:87:ee:8f:82:fb:85:7c:86:5f:97:f3:f7:a4:
c0:a5:b3:2f:3a:69:77:35:42:ee:4a:72:b0:85:9d:
95:4a:51:a4:b8:e8:88:47:4d:b8:02:67:14:11:c8:
8b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:AC:7D:DA:FD:79:E6:FD:03:FD:13:DE:C4:EB:7C:12:2F:3B:A1:59
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/d2e78fa7-1081-3971-8c13-1d464eb50b2d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl
X509v3 Authority Key Identifier:
keyid:92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
sbgp-ipAddrBlock: critical
IPv4:
104.156.149.0/24
141.195.98.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:5c:ba:5c:78:81:76:29:a1:11:d5:9f:32:19:33:ca:3f:cc:
6c:47:68:77:23:96:0b:22:0f:1e:db:a6:60:05:d4:f6:d7:ce:
89:c2:e4:2f:14:bf:9f:16:e3:d1:64:fd:ae:a1:33:b8:cb:e8:
c3:60:73:b0:24:1c:89:b4:e7:91:49:11:55:df:72:b0:d3:13:
cc:a2:22:ae:c5:e7:38:79:cb:79:b6:90:37:bf:6e:9c:a2:20:
25:88:93:53:49:f9:e1:2b:72:b7:3b:ec:df:30:42:06:d9:e0:
c2:cc:29:fa:7d:cb:42:1c:09:f0:2c:a8:65:c4:4c:f3:6f:7c:
4a:80:e5:55:8e:5f:9b:30:fa:68:5b:3b:17:50:5b:b5:02:09:
07:58:39:6c:6c:e6:3c:ae:bd:61:47:4b:d2:d9:f1:39:15:94:
04:6e:2f:fc:a3:82:4c:e7:73:b7:16:c1:27:01:24:d9:a6:28:
64:5c:7c:8d:c4:ca:c5:ce:f1:f2:8a:2e:1b:b5:19:e0:43:65:
58:b7:17:1e:c3:5e:49:08:d7:04:0b:09:5f:00:39:9d:be:08:
f6:a8:3d:c7:33:33:13:fa:e8:6b:f7:3f:a4:ac:2e:b1:36:97:
4c:77:c6:fd:7d:3d:56:67:8b:3f:e4:c7:1d:7c:0c:5b:8e:10:
68:c8:df:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:40:01 2026 by rpki-client