
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/7b7757b8-4651-3569-a743-24788a3666d4.roa
File: 7b7757b8-4651-3569-a743-24788a3666d4.roa (raw, json)
Hash identifier: ZqsDFPR7H6zQcSDHeXsW8yxPGxRW0g+DVR2vLiC6P84=
Subject key identifier: A1:68:7C:F9:4F:FD:C7:F5:79:8A:58:DF:78:AA:74:DD:07:36:94:F2
Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial: 010D0C9F4328584CAE5E90E8CCD62EAD8FF1F700
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/7b7757b8-4651-3569-a743-24788a3666d4.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 7015
IP address blocks: 198.145.48.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:5e:90:e8:cc:d6:2e:ad:8f:f1:f7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=8e949d76-6ac7-4fb7-aeb4-ffb81fe5e1d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:24:c8:8f:e0:5f:7a:0b:2c:f9:4d:04:bd:99:
21:1b:ea:fa:ca:c9:f0:09:5d:04:b3:25:77:1a:e1:
f2:77:d1:4c:15:4e:0c:cb:04:eb:b9:f4:29:2e:4d:
65:d4:33:e7:55:0e:23:7b:a8:4a:2f:71:fd:47:f1:
30:23:e5:7c:56:70:be:16:e6:8f:60:cf:91:3d:43:
c7:37:91:df:19:05:bb:d6:58:c3:66:b6:5a:05:81:
dd:2c:63:9e:d0:c6:3c:f1:a2:ba:78:83:6c:75:05:
62:12:22:cf:4c:6d:fe:58:f2:38:4c:a7:bc:4c:a4:
63:6d:8a:8b:05:b8:57:31:6a:64:05:b4:4e:a4:2c:
09:80:5a:33:61:6d:63:ac:f3:f2:1e:bd:47:c5:f2:
65:cf:f6:af:a6:7c:70:99:50:b8:fa:db:a5:d3:1e:
e6:3f:c0:ce:bc:f1:90:f9:b7:5b:20:96:a9:fc:d5:
c9:37:3c:91:39:f2:0c:e0:09:ad:3c:21:2c:bb:4b:
f9:62:80:8f:bf:38:5e:3e:d7:83:2d:5d:1c:05:ef:
50:d8:15:af:78:29:cc:73:7e:1c:dc:7b:42:47:d3:
5c:80:b8:d3:a5:71:d0:1e:3c:c2:db:6d:8b:3e:e1:
ce:d9:04:a8:45:ac:b9:30:17:8c:c2:c6:09:4c:aa:
9d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:68:7C:F9:4F:FD:C7:F5:79:8A:58:DF:78:AA:74:DD:07:36:94:F2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/7b7757b8-4651-3569-a743-24788a3666d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
X509v3 Authority Key Identifier:
keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
sbgp-ipAddrBlock: critical
IPv4:
198.145.48.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c6:eb:c3:bc:fc:57:ce:8c:f7:2c:29:92:42:c7:d7:a2:5b:51:
91:21:8c:83:fe:9f:d1:a7:57:a9:b8:cb:d3:6e:e0:5c:48:c8:
ef:99:56:23:23:9a:71:2d:d4:4f:51:16:86:aa:a4:0a:c3:3a:
ee:22:69:59:09:e9:39:b5:75:1b:af:49:f8:de:aa:d2:d9:19:
d8:dc:81:bf:ab:82:ed:8f:53:07:f6:e8:2e:7d:6b:9c:f5:89:
ba:01:aa:f8:91:dd:fd:6e:ea:6a:8c:6d:fa:24:36:39:81:49:
4f:4e:35:fa:56:0b:af:9d:03:ca:50:69:e9:3f:60:c1:57:43:
80:2f:65:63:a1:e1:0e:4b:6d:eb:ce:7c:76:ab:5f:a7:af:19:
4e:2a:3a:f1:7b:59:11:20:16:ee:9c:3e:51:74:39:c6:e1:d6:
8d:fd:8a:52:2b:e7:b3:f9:b2:3f:60:b1:97:e7:e2:9f:16:7f:
46:7a:00:0b:89:8e:33:8d:c1:73:8f:3f:b1:4c:05:48:6b:0f:
80:0c:2f:03:41:9e:31:5c:dd:0c:ff:30:20:d4:79:73:72:30:
9d:68:f6:88:89:b3:6f:24:b8:c2:05:30:80:29:64:f5:1a:d1:
b1:81:c7:78:fd:ea:88:5d:e4:f8:a8:a9:7f:93:29:3c:be:f0:
c7:1e:fa:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:49:52 2026 by rpki-client