
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/5436d452-212f-3c99-87de-33e74da49ce3.roa
File: 5436d452-212f-3c99-87de-33e74da49ce3.roa (raw, json)
Hash identifier: l4ke3ZjDZ8gjeKIFWfhW4ndEffndLfN2HQB0ujCrJuA=
Subject key identifier: A2:14:A3:10:B5:31:10:22:58:8E:34:2F:50:30:F0:FD:63:97:17:9A
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F4328584D0D426B5D5BD752ED71F4DD00
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/5436d452-212f-3c99-87de-33e74da49ce3.roa
Signing time: Wed 04 Mar 2026 02:00:32 +0000
ROA not before: Wed 04 Mar 2026 02:00:32 +0000
ROA not after: Tue 02 Jun 2026 01:00:32 +0000
asID: 3360
IP address blocks: 216.240.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:0d:42:6b:5d:5b:d7:52:ed:71:f4:dd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Mar 4 02:00:32 2026 GMT
Not After : Jun 2 01:00:32 2026 GMT
Subject: CN=743a95e2-dbf4-44ee-ace4-c532ceb6f331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:fb:0e:54:60:83:e7:c9:0d:1d:36:7f:c5:7a:
27:63:5a:e9:81:c5:d7:be:5b:7c:27:db:a4:c4:7f:
9e:4e:a8:16:12:eb:b6:32:8c:45:30:fd:27:6a:90:
bd:61:54:b1:da:ab:b4:8a:ce:c8:e7:b3:9c:59:00:
db:db:d3:ca:ca:35:5d:d5:5c:7b:eb:bf:1b:75:fe:
66:c1:a1:7e:b6:2c:f9:e5:78:e0:bc:71:25:77:90:
b4:2c:f6:f9:d4:ca:89:13:09:8b:b2:81:51:8a:5b:
44:c6:df:69:a8:c4:31:cc:07:bc:58:54:b0:55:90:
4c:a9:db:63:9f:e1:37:3f:17:35:f4:b3:fd:b2:55:
3e:87:46:18:93:1a:8b:b7:90:e3:af:c3:54:0b:52:
23:72:32:1c:55:0f:1c:2b:76:85:72:b6:fb:e6:d8:
c9:83:1f:0a:d3:a6:67:34:41:e0:62:f6:d5:40:20:
f7:43:bc:90:fe:46:6f:7b:9c:6f:fc:fc:e6:13:4b:
13:4a:0e:9b:35:7d:e4:07:3d:e2:05:f7:10:4a:2a:
8a:62:b9:31:6c:2b:4d:47:05:33:7e:02:ee:6c:d6:
c3:8e:26:4f:c1:36:8e:f4:f3:6a:2a:63:48:06:1a:
51:29:b7:31:88:f4:56:ce:6e:fb:94:f9:54:96:52:
6b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:14:A3:10:B5:31:10:22:58:8E:34:2F:50:30:F0:FD:63:97:17:9A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/5436d452-212f-3c99-87de-33e74da49ce3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv4:
216.240.196.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:16:50:74:62:4b:60:d3:1a:6b:1a:55:95:ad:a7:55:fd:12:
70:5a:5e:b5:33:65:4e:c0:08:00:60:cc:ec:e7:e9:db:aa:75:
c8:bc:6d:23:b4:0f:b4:b7:78:8a:5a:3c:61:3b:57:86:c0:fd:
1c:ee:4e:2b:64:cb:8c:b3:4d:bf:35:78:45:4d:c1:c9:eb:e5:
0e:4a:59:e4:8a:f6:bb:23:c9:48:e1:6a:e7:83:cc:ae:c8:6c:
65:cf:43:1c:07:a0:18:d9:2d:61:59:6e:d0:89:72:b9:e7:13:
50:c9:20:cf:c0:23:72:af:68:d0:a0:54:76:07:4e:9d:98:3e:
d3:6d:f1:f9:fd:97:9c:4d:c7:e3:25:16:4e:87:c4:22:37:ec:
8d:e8:d5:12:d4:2f:3b:f9:58:1f:fd:6f:26:9a:3f:2e:f4:ee:
55:cd:ab:20:be:11:37:d1:b0:1a:16:53:94:ad:17:51:b7:fa:
4a:47:e4:d2:49:91:d9:1e:76:98:05:cf:43:48:84:83:6d:71:
0c:93:29:8b:07:07:bd:0a:1c:f0:60:22:e9:04:19:17:4a:6b:
1e:1e:32:5f:8c:b4:f8:55:48:7b:05:5b:ed:74:82:f4:83:68:
d2:79:ce:c0:53:b2:5c:a6:70:71:20:4a:49:ff:15:d4:f6:58:
28:8a:31:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:32:51 2026 by rpki-client