
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/9faccfb4-cf9a-30e0-a406-825e6e5e98d5.roa
File: 9faccfb4-cf9a-30e0-a406-825e6e5e98d5.roa (raw, json)
Hash identifier: dX/0xXYGE3ngigBwslgbAEI3nhd10bkSW5AuOIuysC4=
Subject key identifier: 76:FA:04:2E:66:E4:D9:9D:93:24:60:BB:B2:19:25:F3:98:BE:97:AB
Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial: 010D0C9F4328584DB3402C1B354DE15BA5271080
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/9faccfb4-cf9a-30e0-a406-825e6e5e98d5.roa
Signing time: Sat 02 May 2026 13:00:31 +0000
ROA not before: Sat 02 May 2026 13:00:31 +0000
ROA not after: Fri 31 Jul 2026 13:00:31 +0000
asID: 16509
IP address blocks: 170.114.98.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:b3:40:2c:1b:35:4d:e1:5b:a5:27:10:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
Validity
Not Before: May 2 13:00:31 2026 GMT
Not After : Jul 31 13:00:31 2026 GMT
Subject: CN=583f4175-b0de-4da9-8ac0-eebed09d1899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3e:a6:05:ae:66:ff:e5:2f:48:b8:f6:f8:82:
b4:45:2e:ae:f1:f1:81:7d:15:b0:cc:52:28:6e:46:
32:bf:10:78:2c:37:40:b1:2a:a8:28:40:0b:3d:9b:
cb:2b:b4:c9:ca:f4:1e:95:6a:98:47:30:a3:58:2a:
b2:73:5f:99:71:b3:e6:fc:4b:c3:54:74:6b:90:08:
98:3b:8c:70:9b:05:fb:ea:c8:3b:06:96:f4:77:37:
d7:31:fb:d6:6f:67:af:31:ee:0f:6b:23:94:36:65:
fa:81:d4:c5:0c:b5:cf:10:ee:3a:ee:20:5e:1a:88:
90:91:a7:84:c3:0f:1e:5f:32:79:09:b0:34:15:67:
eb:31:05:ee:86:fa:28:3d:13:61:aa:d3:6c:5a:28:
a2:b0:99:dd:9d:f1:b4:2b:a3:97:0d:5b:e0:cf:b4:
1b:48:4d:1d:f2:55:9c:a0:62:16:0b:55:7b:0f:3f:
b5:af:fb:4a:07:f0:70:b5:e3:93:34:44:68:e9:24:
8c:8a:9b:f3:ce:e0:a1:59:8c:77:45:25:db:55:77:
18:7f:ba:e2:bc:4b:df:dc:e6:79:ec:9b:9b:77:20:
dd:f0:d0:8c:42:2e:5a:1a:07:57:3a:43:44:06:99:
50:1b:58:50:59:73:a6:14:04:fb:2b:18:79:0f:8e:
dd:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:FA:04:2E:66:E4:D9:9D:93:24:60:BB:B2:19:25:F3:98:BE:97:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/9faccfb4-cf9a-30e0-a406-825e6e5e98d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
X509v3 Authority Key Identifier:
keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
sbgp-ipAddrBlock: critical
IPv4:
170.114.98.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
aa:d3:85:40:e6:fa:aa:d5:35:3b:00:30:62:20:a5:64:6f:70:
22:1f:87:74:0c:1a:40:eb:41:5f:f8:6a:14:4d:0c:66:e2:a5:
f1:53:15:63:3d:6f:3a:dd:4b:03:4d:a4:f4:8f:99:84:2b:88:
ac:de:e2:14:d4:06:6c:11:49:7f:75:4a:6b:f4:91:37:0b:ff:
f2:d1:73:ac:5e:d8:bd:0f:10:0b:68:7a:00:2b:24:e4:a4:d9:
94:e6:9b:49:72:b0:17:71:6c:c5:51:ab:99:da:59:9c:fe:ad:
03:f4:73:4c:86:88:5b:1e:d9:7f:a7:a6:33:88:ca:84:71:9f:
b2:1b:b6:b5:20:1c:d0:09:4d:f2:34:54:0d:96:b1:cb:06:97:
af:72:1b:4d:e7:d1:b5:6e:a0:e6:29:61:13:0d:9c:84:61:fc:
89:40:4e:93:03:38:97:ce:a5:cf:96:3e:af:6c:5b:d1:a9:dc:
6b:0d:66:d9:53:45:3e:4c:a9:3c:41:67:f5:ca:a3:ac:83:c0:
54:73:76:48:49:93:8e:15:3a:cd:3e:fe:b1:a1:8d:72:ea:d8:
db:4e:61:9d:d7:17:8a:42:7f:b6:05:33:15:a4:c0:9d:36:25:
07:cf:24:81:bd:c2:02:ae:f3:6e:d1:03:6d:ad:1c:45:24:ae:
4a:de:fe:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:37:36 2026 by rpki-client