
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6c81d7c0-8217-43f2-9047-5e6c0b85a8e3/eb71a70a-24f1-3abd-8225-b45fd87b3249.roa
File: eb71a70a-24f1-3abd-8225-b45fd87b3249.roa (raw, json)
Hash identifier: HejPnb1+WAfSix6Vx6bheAk2xmCRW0U1Kc0h2jcu0UQ=
Subject key identifier: C2:A7:C4:FF:85:5A:93:60:3A:28:13:94:39:05:37:38:4C:7B:9E:78
Certificate issuer: /CN=6c81d7c0-8217-43f2-9047-5e6c0b85a8e3
Certificate serial: 010D0C9F4328584CAA27182A2BE9A85717C78C80
Authority key identifier: 2D:6B:BC:FC:B9:38:B9:2C:D4:BA:07:0C:1B:C1:B9:D2:DD:F1:A1:A3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6c81d7c0-8217-43f2-9047-5e6c0b85a8e3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6c81d7c0-8217-43f2-9047-5e6c0b85a8e3/eb71a70a-24f1-3abd-8225-b45fd87b3249.roa
Signing time: Tue 27 Jan 2026 14:00:36 +0000
ROA not before: Tue 27 Jan 2026 14:00:36 +0000
ROA not after: Mon 27 Apr 2026 13:00:36 +0000
asID: 54060
IP address blocks: 164.104.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6c81d7c0-8217-43f2-9047-5e6c0b85a8e3/6c81d7c0-8217-43f2-9047-5e6c0b85a8e3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6c81d7c0-8217-43f2-9047-5e6c0b85a8e3/6c81d7c0-8217-43f2-9047-5e6c0b85a8e3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6c81d7c0-8217-43f2-9047-5e6c0b85a8e3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:aa:27:18:2a:2b:e9:a8:57:17:c7:8c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c81d7c0-8217-43f2-9047-5e6c0b85a8e3
Validity
Not Before: Jan 27 14:00:36 2026 GMT
Not After : Apr 27 13:00:36 2026 GMT
Subject: CN=ccb3ed22-6ff0-4a63-86c8-335e7ddb26eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:db:fd:68:74:2a:e1:f4:8f:71:6f:74:60:d7:
2b:73:f4:d6:2b:27:49:73:0f:b4:d2:23:fd:b1:93:
4f:dd:4e:5b:59:4f:ca:33:36:68:5b:cd:92:90:33:
4a:31:59:c3:ca:c1:d7:4b:99:45:71:d6:19:44:ee:
ad:ba:46:c8:d8:04:75:e5:56:fb:eb:b4:38:bf:37:
2e:fd:d2:97:b2:b7:9c:78:35:44:27:fd:b4:aa:3d:
af:c9:fc:17:02:dc:34:a5:e4:38:2a:d2:e3:3b:5f:
2c:13:b1:5a:06:f2:4a:39:76:9c:21:97:50:55:b0:
31:3a:cc:a8:9f:c1:c0:ab:d5:32:f0:97:41:d0:9d:
a2:ed:74:8b:e0:6c:6e:c1:bd:e4:8a:83:86:7d:8f:
fc:82:39:37:52:b9:1b:0f:8c:16:84:f5:c6:0e:66:
56:3c:b1:95:8d:33:c8:4e:6f:b9:4e:79:3e:1a:37:
e1:fe:46:ae:ad:40:bd:ab:ce:eb:7e:73:72:6a:73:
31:51:ce:37:da:d0:8e:b6:fd:a9:ff:ed:ef:26:b0:
bd:f1:56:7b:4e:65:69:89:de:77:31:12:c0:98:4e:
d0:7e:3f:87:df:bd:91:a7:08:5b:7e:5b:4b:01:cd:
ac:09:14:c6:28:35:86:59:f7:dc:61:8e:17:16:31:
72:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:A7:C4:FF:85:5A:93:60:3A:28:13:94:39:05:37:38:4C:7B:9E:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6c81d7c0-8217-43f2-9047-5e6c0b85a8e3/eb71a70a-24f1-3abd-8225-b45fd87b3249.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6c81d7c0-8217-43f2-9047-5e6c0b85a8e3/6c81d7c0-8217-43f2-9047-5e6c0b85a8e3.crl
X509v3 Authority Key Identifier:
keyid:2D:6B:BC:FC:B9:38:B9:2C:D4:BA:07:0C:1B:C1:B9:D2:DD:F1:A1:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6c81d7c0-8217-43f2-9047-5e6c0b85a8e3.cer
sbgp-ipAddrBlock: critical
IPv4:
164.104.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:85:16:fd:82:24:c6:d1:20:42:a6:a5:a1:91:72:35:79:43:
f5:c5:fb:74:97:1a:b8:36:23:3f:73:0b:31:1c:cc:c0:2c:39:
1f:1a:95:25:90:b0:6a:84:71:5c:ef:c3:f0:b2:90:ce:22:cd:
a8:ed:17:d5:dc:cf:b1:30:95:85:f4:77:74:91:ed:a6:7e:98:
6f:c6:64:50:21:38:34:57:ef:18:51:dc:5c:34:07:c8:32:d8:
47:df:ae:a3:ae:2d:19:db:43:10:ec:f3:ea:80:3a:3c:04:5b:
23:25:cf:2c:ed:54:ec:07:fc:19:38:93:75:ee:c3:aa:2a:3f:
c0:74:01:7c:ad:74:09:67:3e:95:e0:8a:b8:8f:db:f5:9c:3c:
aa:bf:28:e8:8d:65:d5:4a:6d:e2:7a:27:e4:4f:32:28:93:5e:
07:5d:97:07:2d:3c:91:fd:13:30:15:c6:88:cf:67:50:f5:77:
28:e7:78:77:8c:65:47:69:8f:26:4a:40:50:09:ab:8e:a0:39:
68:5f:90:b3:37:50:9f:b8:b9:06:fc:b4:5c:33:f7:47:7c:36:
e3:4c:e6:60:2b:9b:26:75:b0:86:b0:7c:6f:fa:aa:a8:e6:94:
57:6d:90:ac:44:55:45:78:6b:64:7d:e7:93:12:9a:f0:b2:a1:
fb:54:a9:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:17:19 2026 by rpki-client