
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/7950ff86-7690-33fa-bde4-a5e2852ee979.roa
File: 7950ff86-7690-33fa-bde4-a5e2852ee979.roa (raw, json)
Hash identifier: kTsszu9+Y+avQV6Z9XKJ1BsRhxRz1aOZ6H0zeCL2cKY=
Subject key identifier: D3:DE:00:9F:D1:3B:05:F5:D8:DA:59:39:22:F7:BE:EC:48:69:38:C3
Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial: 010D0C9F4328584DAC4585327F70740C3C9FE500
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/7950ff86-7690-33fa-bde4-a5e2852ee979.roa
Signing time: Thu 30 Apr 2026 01:00:26 +0000
ROA not before: Thu 30 Apr 2026 01:00:26 +0000
ROA not after: Wed 29 Jul 2026 01:00:26 +0000
asID: 54858
IP address blocks: 104.220.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:ac:45:85:32:7f:70:74:0c:3c:9f:e5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Validity
Not Before: Apr 30 01:00:26 2026 GMT
Not After : Jul 29 01:00:26 2026 GMT
Subject: CN=82570e8c-f3c7-48e0-9f4e-b20b3e0f0612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:25:de:f6:cf:d8:10:f6:b6:9c:68:6c:86:74:
2d:d5:8e:d0:ca:5c:c9:04:b9:94:86:ea:90:03:74:
08:ff:54:5c:6c:94:43:25:1b:ec:0a:c2:37:54:7b:
24:dc:0d:cb:eb:6a:1f:4f:eb:89:bc:c5:b2:54:95:
1e:af:03:c5:c3:73:f5:e3:19:5d:68:ee:f1:f4:aa:
1d:d5:2f:b5:3c:44:58:f5:8e:e7:96:5d:aa:4b:6b:
92:89:ed:cb:c0:84:88:da:ec:1e:91:54:e0:95:e7:
b7:17:d8:9e:90:ef:08:20:e4:15:d9:8f:1d:5e:e7:
89:8b:17:3c:1e:75:2e:aa:d0:9e:5d:15:99:7f:95:
46:5e:fc:27:80:8d:b5:cf:e2:2e:0d:e1:6f:12:17:
09:f6:94:7e:27:64:e6:1e:7a:ef:64:e4:ed:aa:f7:
b9:a0:47:13:61:df:c8:fb:6d:80:0e:71:f5:03:fe:
83:5b:1c:17:97:7e:c1:13:24:81:1a:47:9b:3d:4c:
8b:c4:36:e1:df:2f:35:b0:d0:5a:13:2b:bc:00:27:
e6:c5:ea:85:a7:78:f9:fe:49:14:58:36:cd:b7:f6:
e3:33:ee:2b:57:0e:d7:0a:5c:e6:91:a7:81:80:b7:
8a:14:f8:29:58:2b:a8:64:ad:4e:7d:58:d1:0a:eb:
74:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:DE:00:9F:D1:3B:05:F5:D8:DA:59:39:22:F7:BE:EC:48:69:38:C3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/7950ff86-7690-33fa-bde4-a5e2852ee979.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
X509v3 Authority Key Identifier:
keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
sbgp-ipAddrBlock: critical
IPv4:
104.220.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:f5:61:42:81:77:77:05:67:1b:78:3e:40:1c:ae:47:68:53:
69:2b:a7:fb:ac:29:18:b6:24:15:b5:f0:10:23:43:c2:89:84:
61:3f:bb:54:df:85:38:99:52:32:00:1c:37:9d:10:9f:f9:de:
0e:be:9b:c8:89:e3:48:6b:ca:e3:0f:9a:b7:02:2f:d6:3d:ce:
35:b4:c2:4d:90:46:77:bc:9d:13:10:9b:82:3b:11:ed:47:87:
20:19:35:59:50:72:4a:ec:01:72:50:35:4c:e1:bd:22:e3:3d:
b6:2b:db:c9:e5:68:2a:d7:e1:de:19:de:b4:3c:71:77:f4:b6:
5d:66:95:42:ba:10:f3:1d:64:8d:26:28:f9:5d:1e:dd:e0:92:
00:dd:6e:53:d3:21:d6:47:09:e8:4c:25:d2:19:a1:a5:5b:cc:
a7:5c:af:6e:3f:a9:30:a7:71:4e:10:ae:e2:33:48:98:e0:fb:
81:b8:e4:78:db:11:3b:97:cd:3e:20:32:cf:a7:b4:4d:e3:70:
e6:33:df:cc:67:ae:cd:72:59:ae:07:7c:af:41:aa:36:07:e9:
1b:3d:d6:d3:fe:96:dd:b7:2d:ac:2f:79:b9:e9:4c:09:d9:41:
56:50:e1:c4:f8:18:c0:30:a7:6a:d9:0d:46:b8:73:7d:53:de:
bb:f4:f1:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:33:30 2026 by rpki-client