
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4592d18-89a2-4b31-a14b-b5ea3eae2c4a/ba76b78a-4097-3d8e-a77d-74d3cb984e23.roa
File: ba76b78a-4097-3d8e-a77d-74d3cb984e23.roa (raw, json)
Hash identifier: c2zx1Pw1jfILKrdxx/724LZWgo2VovgGos4aIqb4iPI=
Subject key identifier: 12:78:3A:A8:84:E8:75:67:84:54:0B:C4:AF:19:7A:BD:29:7A:D7:0E
Certificate issuer: /CN=e4592d18-89a2-4b31-a14b-b5ea3eae2c4a
Certificate serial: 010D0C9F4328584D5234F65940CCDC6CE3D80880
Authority key identifier: 87:5F:A2:FF:E5:93:3B:B5:16:DE:44:BF:B9:3E:AF:BF:FD:FD:59:85
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4592d18-89a2-4b31-a14b-b5ea3eae2c4a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4592d18-89a2-4b31-a14b-b5ea3eae2c4a/ba76b78a-4097-3d8e-a77d-74d3cb984e23.roa
Signing time: Sat 28 Mar 2026 18:44:34 +0000
ROA not before: Sat 28 Mar 2026 18:44:34 +0000
ROA not after: Wed 27 May 2026 15:20:59 +0000
asID: 6939
IP address blocks: 104.161.10.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4592d18-89a2-4b31-a14b-b5ea3eae2c4a/e4592d18-89a2-4b31-a14b-b5ea3eae2c4a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4592d18-89a2-4b31-a14b-b5ea3eae2c4a/e4592d18-89a2-4b31-a14b-b5ea3eae2c4a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4592d18-89a2-4b31-a14b-b5ea3eae2c4a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:52:34:f6:59:40:cc:dc:6c:e3:d8:08:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4592d18-89a2-4b31-a14b-b5ea3eae2c4a
Validity
Not Before: Mar 28 18:44:34 2026 GMT
Not After : May 27 15:20:59 2026 GMT
Subject: CN=4b3ed07c-70e5-462d-93fc-e3bfc79cd5f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:1e:26:ee:43:3d:59:9e:9b:5f:aa:45:37:3e:
de:77:ae:af:57:04:5b:03:66:db:ea:87:50:14:de:
31:36:98:4a:d0:54:cb:85:50:a5:64:6e:62:96:7d:
b0:49:af:de:16:e2:42:d2:5e:c6:b8:6c:98:b9:96:
da:61:7d:3b:21:b9:25:e2:af:18:c9:f7:4d:5a:a7:
29:77:99:67:8e:09:c7:8f:6e:de:0b:5b:16:10:56:
22:20:53:66:4b:b5:c9:03:70:d2:ab:0f:4e:1d:38:
20:0e:b1:92:ef:d8:2d:0c:55:67:d3:fa:c5:e5:c5:
1e:2f:c5:2e:b8:66:d5:f5:00:e6:38:b0:cb:3d:a5:
17:a4:ad:77:9c:eb:3a:57:4a:f4:49:18:cf:6c:7a:
0c:8f:a4:85:00:65:53:df:f6:2b:8f:76:0e:bf:50:
2d:64:40:59:82:92:82:10:9a:98:9f:17:9a:fa:e1:
9d:c7:f0:d1:26:04:4d:6e:4b:a3:d9:28:12:17:14:
fe:48:b3:5c:a9:8b:1d:bf:aa:bd:b5:20:3b:cf:d2:
11:c7:9e:28:ce:df:96:47:4f:97:eb:eb:15:60:32:
e2:21:90:88:f2:f1:bb:35:45:a4:52:7a:c6:53:47:
58:e8:c1:5e:4a:7b:84:f3:30:7c:ec:ca:f9:ce:c0:
50:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:78:3A:A8:84:E8:75:67:84:54:0B:C4:AF:19:7A:BD:29:7A:D7:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4592d18-89a2-4b31-a14b-b5ea3eae2c4a/ba76b78a-4097-3d8e-a77d-74d3cb984e23.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4592d18-89a2-4b31-a14b-b5ea3eae2c4a/e4592d18-89a2-4b31-a14b-b5ea3eae2c4a.crl
X509v3 Authority Key Identifier:
keyid:87:5F:A2:FF:E5:93:3B:B5:16:DE:44:BF:B9:3E:AF:BF:FD:FD:59:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e4592d18-89a2-4b31-a14b-b5ea3eae2c4a.cer
sbgp-ipAddrBlock: critical
IPv4:
104.161.10.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:fc:33:13:b5:c9:67:97:9c:b7:12:2e:77:cb:e2:b7:77:e1:
41:77:78:97:b5:b4:cd:36:48:29:ec:83:11:ae:6a:14:a2:48:
88:ff:3e:7d:c3:13:53:fd:db:b2:fc:bb:4e:ef:6c:f3:49:b0:
53:2e:64:35:1b:fb:1c:b0:3d:95:3c:0e:b0:54:ba:db:a9:70:
c4:0f:8d:fb:90:4b:ec:e2:e3:2f:af:d8:7e:fc:b0:94:ed:42:
25:25:35:bf:27:19:cd:db:b9:09:b9:48:91:c3:bf:6a:19:6f:
aa:3a:8b:50:43:b5:6c:68:e9:b1:95:d8:91:2a:82:63:3d:e6:
a7:31:2a:6a:da:cf:35:ba:f8:1a:7d:73:10:28:a3:e9:52:5e:
ed:77:da:48:0b:3a:80:83:7f:eb:58:e0:2e:0d:6c:9b:f5:0e:
6d:74:73:b8:03:38:40:52:28:46:95:85:a5:f5:28:4e:7f:da:
fd:44:90:7e:82:42:e6:55:72:41:9f:a0:59:59:86:ef:f6:e1:
99:bb:31:34:7b:d0:da:6a:01:3e:f3:9d:54:a5:63:eb:03:6c:
c0:3c:92:2d:94:81:bf:9a:40:60:8d:f7:a3:b9:93:74:c0:6d:
22:25:90:ff:40:63:7a:f4:7b:6b:39:6b:55:48:91:e2:36:f4:
37:76:e4:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:56:39 2026 by rpki-client