
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7/86e34e6c-0e06-342b-9c88-f3f080f46e40.roa
File: 86e34e6c-0e06-342b-9c88-f3f080f46e40.roa (raw, json)
Hash identifier: lwZYigkz5mb/7lWESTqgq0AfpHMzO3dl7RShrMG/byA=
Subject key identifier: 71:FB:0D:08:86:00:0B:98:39:AA:10:DC:4D:65:06:C5:30:37:A7:CC
Certificate issuer: /CN=c178d21b-9bf0-4172-9ece-4a4d84fc66e7
Certificate serial: 010D0C9F4328584E1FA996C06D8C418DD74D1C00
Authority key identifier: 98:1B:22:24:7B:4C:CC:8D:BA:0F:59:A9:01:99:8A:D9:CF:BE:CF:83
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7/86e34e6c-0e06-342b-9c88-f3f080f46e40.roa
Signing time: Wed 10 Jun 2026 09:00:13 +0000
ROA not before: Wed 10 Jun 2026 09:00:13 +0000
ROA not after: Tue 08 Sep 2026 09:00:13 +0000
asID: 399507
IP address blocks: 91.106.220.0/22 maxlen: 24
204.52.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7/c178d21b-9bf0-4172-9ece-4a4d84fc66e7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7/c178d21b-9bf0-4172-9ece-4a4d84fc66e7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 16 Jun 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:1f:a9:96:c0:6d:8c:41:8d:d7:4d:1c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c178d21b-9bf0-4172-9ece-4a4d84fc66e7
Validity
Not Before: Jun 10 09:00:13 2026 GMT
Not After : Sep 8 09:00:13 2026 GMT
Subject: CN=c48645ac-add9-4716-823d-9e1cefee0a31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c9:02:9b:e9:25:30:3c:02:a6:a1:25:87:ba:
21:74:12:cf:e8:ae:35:75:16:fa:e7:52:79:c8:02:
08:08:63:76:06:24:ec:9f:82:18:70:22:d7:c5:b8:
30:75:c0:73:fa:2c:69:74:37:e4:c1:e2:2f:b9:5d:
e4:f2:82:03:47:de:08:a6:1b:68:af:f4:7e:fe:3c:
67:b0:e9:7a:17:9e:fd:ce:03:2e:2f:e0:44:86:b8:
29:11:da:66:c9:41:8c:67:e7:db:1a:92:b1:83:0e:
6a:54:90:83:8b:10:0c:e1:ac:4e:5c:46:3a:25:85:
c3:96:ad:4e:10:4f:9a:0f:3c:20:5e:25:3c:50:a9:
ba:6d:e0:32:94:b3:3d:66:57:24:d3:9d:c6:91:8b:
aa:14:3a:b5:01:17:5e:fb:c6:65:c2:67:f1:ed:9d:
2f:dc:97:0e:92:ad:65:d3:1c:52:7f:22:59:c4:60:
9e:76:a8:3d:3a:80:24:1d:60:34:eb:57:51:d5:d0:
0e:e8:61:e1:02:0e:7d:22:cd:34:bc:97:2d:8a:97:
55:42:10:38:a5:13:f7:b6:03:35:a6:12:46:05:7b:
3e:a5:f9:7f:28:84:87:14:47:01:9f:f7:06:62:6e:
6e:7d:63:9a:3b:31:85:73:e3:97:7b:c9:db:93:24:
ca:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:FB:0D:08:86:00:0B:98:39:AA:10:DC:4D:65:06:C5:30:37:A7:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7/86e34e6c-0e06-342b-9c88-f3f080f46e40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7/c178d21b-9bf0-4172-9ece-4a4d84fc66e7.crl
X509v3 Authority Key Identifier:
keyid:98:1B:22:24:7B:4C:CC:8D:BA:0F:59:A9:01:99:8A:D9:CF:BE:CF:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7.cer
sbgp-ipAddrBlock: critical
IPv4:
91.106.220.0/22
204.52.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:1c:26:12:ae:13:49:8e:51:49:1d:b4:b0:77:66:76:fd:1d:
9f:ba:b1:5d:49:d0:03:38:15:90:4f:c6:2c:f1:9b:74:b1:b5:
23:ab:9e:41:00:85:c3:b9:9c:91:da:aa:e0:b7:30:ef:aa:3d:
bf:86:0d:9e:68:c2:39:a7:f2:38:83:2f:62:88:6b:22:4a:16:
c8:d3:6b:b6:72:b8:ec:a1:58:ab:9d:bb:fd:bf:a4:ea:45:65:
fc:f7:a5:8e:7d:b1:be:6e:28:62:bd:e5:93:6e:44:3c:10:e0:
48:ca:49:4d:e5:e4:7e:8f:bd:41:c7:4f:60:eb:97:4c:2e:ac:
9b:30:03:c0:f5:2a:39:9e:7e:bb:53:64:12:b0:26:9d:af:fa:
b2:db:8a:ea:d6:a9:46:6b:63:15:5a:e3:27:29:df:14:71:51:
ec:d4:e6:83:cb:d0:cd:09:53:03:70:76:90:31:84:92:3a:3d:
32:cb:04:b4:0b:23:c6:71:2f:0b:04:27:88:d6:c2:93:ed:eb:
d5:cd:67:6d:ad:7d:68:ce:e2:63:12:1e:65:fa:e8:d1:68:33:
56:ad:e1:1d:62:e8:90:3c:bd:85:c4:8f:d6:d8:4f:ed:2d:6b:
00:d1:b7:f0:91:3a:39:44:27:67:32:6d:12:49:69:ab:3a:cd:
14:a6:ab:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:10:32 2026 by rpki-client