
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/bd21da79-c196-325c-9eec-91498463fd08.roa
File: bd21da79-c196-325c-9eec-91498463fd08.roa (raw, json)
Hash identifier: PnF1b003vpEaKbg6SMAOT8P6c9zdkRtBaZoxBWf1Ocw=
Subject key identifier: 2D:C6:C6:6C:BD:48:E7:81:F9:47:C2:77:96:41:7D:F2:F5:27:65:3E
Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial: 010D0C9F4328584DA11AB1E4801BB642CD7D7800
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/bd21da79-c196-325c-9eec-91498463fd08.roa
Signing time: Sun 26 Apr 2026 01:00:25 +0000
ROA not before: Sun 26 Apr 2026 01:00:25 +0000
ROA not after: Sat 25 Jul 2026 01:00:25 +0000
asID: 14618
IP address blocks: 168.87.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:a1:1a:b1:e4:80:1b:b6:42:cd:7d:78:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
Validity
Not Before: Apr 26 01:00:25 2026 GMT
Not After : Jul 25 01:00:25 2026 GMT
Subject: CN=c0c043ba-9e41-4297-b92b-84581076e55f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:8a:27:c1:ef:9d:4d:7f:44:3e:39:db:d9:1d:
54:d4:30:c7:e7:3f:c0:df:1c:08:0a:67:50:72:8f:
b9:b1:ba:08:19:d7:be:03:64:c9:a9:c0:38:8b:a2:
19:54:c3:b3:32:1c:b0:1b:6d:69:42:2c:e6:cf:da:
f8:44:51:3a:08:60:4d:c5:76:af:23:62:8e:0a:d2:
20:9f:5d:c1:85:8e:6b:04:37:71:45:a1:ab:2a:1b:
11:4f:b5:c6:bb:34:a5:75:e3:99:77:ad:8b:21:43:
67:7f:96:06:36:c2:8b:b8:9d:09:8c:7f:14:a1:4b:
12:bc:bb:2c:f7:29:0d:3f:fb:69:3b:6a:4f:6d:d7:
35:6a:dd:54:56:38:57:f8:af:e9:1b:75:91:0b:3a:
16:f9:38:52:0e:c5:01:a8:9e:fe:56:4c:b9:d1:a0:
00:00:ab:a3:f0:e4:e7:c3:26:77:11:e1:c7:ec:9d:
91:b5:97:cf:43:fd:88:07:e6:59:41:c9:68:4c:ef:
cd:00:ce:5d:b6:e6:17:d0:54:d1:59:b6:47:4c:30:
76:ac:86:5f:d8:ae:32:2f:f0:62:f8:74:a7:e2:5b:
16:9e:9d:48:1c:d8:3c:16:83:1a:dc:bc:7c:e5:b2:
1f:f8:2f:54:27:92:70:a4:83:77:4b:15:77:1e:3b:
1b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:C6:C6:6C:BD:48:E7:81:F9:47:C2:77:96:41:7D:F2:F5:27:65:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/bd21da79-c196-325c-9eec-91498463fd08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
X509v3 Authority Key Identifier:
keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
sbgp-ipAddrBlock: critical
IPv4:
168.87.181.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:92:4f:5a:b2:a7:22:e5:9e:23:eb:e7:2c:37:92:cc:02:2f:
5e:18:12:6a:62:7c:6a:90:76:19:f9:80:ce:93:33:66:82:dd:
22:db:65:01:a0:20:5d:6f:bc:4f:40:36:71:3a:2b:1b:d1:b5:
09:de:65:05:ea:05:ac:4f:4c:2e:d1:02:e4:e3:c3:66:a3:8c:
a5:c4:b9:9b:5b:a1:c4:71:3a:c0:be:1a:ef:84:e3:c3:c4:b7:
b6:40:18:84:c9:29:e0:39:ab:02:12:46:c9:be:11:27:f0:2b:
29:df:34:61:e0:25:e8:9b:bb:f3:5c:10:fb:e8:7d:91:ae:ad:
c7:3a:95:04:df:8f:80:3e:fc:75:97:d5:c0:b6:4b:1f:dc:6e:
82:27:1f:d1:54:5f:cd:ab:8e:7c:97:54:b8:92:23:7d:75:76:
8b:84:88:03:30:4e:57:52:04:4f:b2:e8:bb:4e:cc:33:ce:1e:
72:4e:92:b9:1a:47:06:60:ba:b8:55:7e:49:c6:1b:bb:ae:fe:
eb:a5:c9:f5:9e:df:a7:ec:f2:c7:65:08:ae:9a:67:3c:6c:15:
90:b2:d0:89:41:d7:13:fe:14:02:9d:65:f0:f0:62:f6:80:de:
c0:97:bc:98:24:c7:91:0d:85:9b:5a:94:2e:09:5b:f3:ce:dd:
27:39:78:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:04:06 2026 by rpki-client