
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a78600ec-48a2-4f1a-8904-302418a38c57/2e6a1ed3-6ebb-3ea1-a2d7-839dc48ec0a6.roa
File: 2e6a1ed3-6ebb-3ea1-a2d7-839dc48ec0a6.roa (raw, json)
Hash identifier: sbni9P/IRQH/vNopAem5ns7W50ZffTI9ZXU6gi0k6k0=
Subject key identifier: CF:54:EE:BC:87:01:A4:73:F3:5A:D1:E3:12:E5:41:FF:1E:5E:1A:B5
Certificate issuer: /CN=a78600ec-48a2-4f1a-8904-302418a38c57
Certificate serial: 010D0C9F4328584C794C324C06F5DB17615D7080
Authority key identifier: 01:D2:A5:C1:99:85:CE:F6:57:D4:73:D3:A7:10:72:87:1B:43:48:9D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a78600ec-48a2-4f1a-8904-302418a38c57.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a78600ec-48a2-4f1a-8904-302418a38c57/2e6a1ed3-6ebb-3ea1-a2d7-839dc48ec0a6.roa
Signing time: Sat 10 Jan 2026 02:00:31 +0000
ROA not before: Sat 10 Jan 2026 02:00:31 +0000
ROA not after: Fri 10 Apr 2026 01:00:31 +0000
asID: 16509
IP address blocks: 167.124.104.0/24 maxlen: 24
167.124.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a78600ec-48a2-4f1a-8904-302418a38c57/a78600ec-48a2-4f1a-8904-302418a38c57.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a78600ec-48a2-4f1a-8904-302418a38c57/a78600ec-48a2-4f1a-8904-302418a38c57.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a78600ec-48a2-4f1a-8904-302418a38c57.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:79:4c:32:4c:06:f5:db:17:61:5d:70:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a78600ec-48a2-4f1a-8904-302418a38c57
Validity
Not Before: Jan 10 02:00:31 2026 GMT
Not After : Apr 10 01:00:31 2026 GMT
Subject: CN=4950f345-2865-4d92-bd74-3c383f5e37ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:48:f6:5a:b2:58:8a:51:3b:c1:42:fb:3d:9d:
65:b8:a1:d4:a1:97:d0:61:fa:4f:03:42:97:96:b4:
1b:d5:4b:c4:e6:67:56:20:e2:3d:11:2e:ca:29:bb:
ef:1f:55:f0:d0:e2:be:91:93:88:57:e7:4b:2c:38:
57:bf:fc:ee:7f:21:e6:91:cf:5e:6a:a9:aa:78:70:
05:f3:cd:98:c5:e7:b6:15:57:30:91:17:ce:3f:27:
99:0b:fe:15:1b:ed:27:39:ce:03:11:68:4c:f5:23:
ae:94:ac:57:9f:41:ca:38:75:1d:9b:dc:18:3d:1f:
bd:4e:19:34:22:ce:d2:3c:3a:25:b9:c7:9b:55:a2:
11:3d:ba:7c:5c:ba:ca:31:e1:df:a4:61:d6:46:22:
ef:32:ca:0c:2e:72:37:60:87:d0:49:28:e8:f2:6c:
14:ef:33:b9:82:bd:a8:db:5c:9a:f2:b8:88:ed:27:
50:4f:c2:a8:08:ce:f1:b9:13:53:d7:2f:50:76:f3:
78:9e:06:63:e0:18:42:06:db:ee:cf:c4:03:4e:7b:
b7:98:73:ab:2c:9b:9a:68:cd:52:18:c3:eb:90:3a:
48:bf:3c:eb:4b:7a:d4:2a:78:fb:4d:2d:e5:63:83:
4e:e7:21:ad:ec:b8:8c:f3:75:db:41:70:79:a0:ae:
77:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:54:EE:BC:87:01:A4:73:F3:5A:D1:E3:12:E5:41:FF:1E:5E:1A:B5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a78600ec-48a2-4f1a-8904-302418a38c57/2e6a1ed3-6ebb-3ea1-a2d7-839dc48ec0a6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a78600ec-48a2-4f1a-8904-302418a38c57/a78600ec-48a2-4f1a-8904-302418a38c57.crl
X509v3 Authority Key Identifier:
keyid:01:D2:A5:C1:99:85:CE:F6:57:D4:73:D3:A7:10:72:87:1B:43:48:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a78600ec-48a2-4f1a-8904-302418a38c57.cer
sbgp-ipAddrBlock: critical
IPv4:
167.124.104.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
af:66:d7:d6:53:1b:79:ac:12:c1:a7:19:cd:7e:57:de:24:aa:
66:ff:78:9b:27:71:7e:14:ad:fb:a6:29:b6:47:96:a7:70:72:
0c:21:f6:d1:61:97:9b:fb:85:2c:e8:0a:0b:40:f5:53:b0:e1:
c8:a8:15:b6:52:71:f0:46:ac:c7:e4:dc:b0:2e:19:fd:ae:f2:
81:0f:5c:51:e6:eb:c0:83:09:1f:cf:df:b4:98:2e:61:31:68:
09:22:fb:a0:70:93:c7:4d:ba:94:3d:0f:fd:db:a7:a0:9a:0d:
37:f1:f0:03:61:50:ec:36:dc:2a:6e:0e:de:dd:d0:f3:61:da:
4d:18:e9:22:78:33:6c:b5:0e:59:b6:b3:59:bd:18:12:1e:62:
ac:ef:46:4c:6c:4b:57:55:ec:6d:48:dc:d1:0c:70:9b:e3:a2:
5b:85:5a:f9:9a:87:5f:f8:2d:1a:d5:6a:84:1b:43:c0:12:0c:
28:fb:75:b7:e8:b8:32:57:97:77:ca:04:4e:e7:b3:a8:cb:8d:
c1:cf:5c:cf:81:e6:ca:19:91:92:f9:6c:35:af:6e:67:fc:ca:
e6:3c:f7:f0:e6:52:30:ea:12:9b:45:81:38:5a:8d:31:df:41:
76:b1:ad:ef:c7:71:7f:02:a9:9d:3e:9d:8d:12:31:0d:d0:a2:
24:7a:93:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:13:56 2026 by rpki-client