
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/df6aa9a0-b32f-3d29-a147-04d62aa1e742.roa
File: df6aa9a0-b32f-3d29-a147-04d62aa1e742.roa (raw, json)
Hash identifier: R46RHH3Fmdlh0ZGotzGs8cB9gxhi8n2qWGOkDIsiT+U=
Subject key identifier: C0:A7:18:10:DE:D5:8B:61:17:86:BC:51:CE:28:D4:94:0D:D0:75:4E
Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial: 010D0C9F4328584CCBA77BDC4F8A422A3AC73680
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/df6aa9a0-b32f-3d29-a147-04d62aa1e742.roa
Signing time: Sun 08 Feb 2026 14:00:41 +0000
ROA not before: Sun 08 Feb 2026 14:00:41 +0000
ROA not after: Sat 09 May 2026 13:00:41 +0000
asID: 54858
IP address blocks: 172.81.152.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:cb:a7:7b:dc:4f:8a:42:2a:3a:c7:36:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Validity
Not Before: Feb 8 14:00:41 2026 GMT
Not After : May 9 13:00:41 2026 GMT
Subject: CN=d91b2f2b-dc36-4c61-bc38-c8fb96946798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:65:f3:3d:a6:20:6e:14:c4:9e:88:1a:f0:dc:
e1:1e:7f:1f:17:df:a4:16:fa:fd:ea:8d:87:e3:6a:
72:0c:11:5e:9b:d3:f8:c8:fc:ef:c8:8c:e1:7f:72:
25:34:ca:ab:35:b0:96:62:a4:2a:74:84:8a:fa:d2:
6b:ed:74:e5:da:53:29:84:06:cf:42:c7:7a:2a:e3:
12:f1:47:50:51:35:9a:f4:56:d9:85:53:c1:36:a6:
10:16:a6:55:e3:5c:b2:9e:f5:ab:f6:90:29:5b:0d:
12:19:7b:3a:d4:f3:13:04:bd:89:bb:9a:9f:4f:3c:
3d:1c:25:3d:a1:c7:8c:98:d8:5f:1a:51:60:5e:75:
2c:13:a1:66:5d:e0:95:5e:d5:6f:4f:e8:10:31:31:
d3:03:a7:90:e7:e3:3e:09:3a:80:ad:15:b0:03:38:
fd:bd:4f:a8:10:df:11:8c:e8:23:68:65:a1:9e:80:
ee:28:2c:2c:55:a6:e6:0a:f6:78:fd:bf:6c:4d:85:
ec:ca:64:21:17:bd:af:96:df:7d:8f:c0:00:36:8d:
e2:32:08:a6:0f:41:9c:18:5d:c9:06:2a:db:6c:5e:
a4:cb:1b:2d:61:ae:da:17:45:da:00:97:b5:91:c0:
cb:ba:88:3d:83:69:c5:a5:cc:e4:55:da:ce:87:be:
c0:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:A7:18:10:DE:D5:8B:61:17:86:BC:51:CE:28:D4:94:0D:D0:75:4E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/df6aa9a0-b32f-3d29-a147-04d62aa1e742.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
X509v3 Authority Key Identifier:
keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
sbgp-ipAddrBlock: critical
IPv4:
172.81.152.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:1d:eb:4f:d5:92:cf:88:fc:25:73:73:c6:5c:6a:b1:93:e7:
35:c8:6b:c7:9f:88:a7:a4:eb:40:26:19:39:b5:33:8c:d3:15:
82:09:11:b8:4e:08:52:ff:c1:b4:98:88:89:f1:9a:1b:35:b1:
b3:f2:ec:ac:0c:cd:77:ca:6f:1c:fe:56:9e:a4:f1:b3:55:d6:
a7:37:cd:ca:e6:43:f8:78:20:35:fa:ad:f8:3e:e3:80:7d:f7:
86:09:d9:ef:26:63:ce:9c:ae:46:24:b3:d7:0a:e4:22:ce:3d:
e8:9b:0c:0e:06:7c:a2:ed:64:db:cb:6d:58:06:d1:f6:3b:27:
5f:0f:dc:ea:90:50:50:3f:cd:86:d5:45:55:f3:79:10:ba:d1:
be:db:fb:6a:33:df:9f:57:1f:23:00:61:0d:d5:b5:bd:73:5f:
90:3f:31:f7:c3:62:25:d8:0f:60:fc:65:cb:bc:0f:ee:b8:e8:
9c:3e:3e:a3:a3:4c:47:58:3e:8b:ab:14:8a:d2:2c:49:ec:f5:
43:90:9b:be:0a:38:0a:a0:71:f0:e7:50:88:4e:e0:4b:6c:0a:
a3:96:e9:e2:f5:52:b2:af:cd:ab:e2:ec:65:43:7b:5b:73:2b:
ac:21:00:ed:eb:fb:21:4c:28:75:53:22:4d:f5:9f:73:b7:18:
9d:bb:aa:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:03:18 2026 by rpki-client