
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/00fb6efe-dbc1-45a8-b266-ca72f7e079c2/899fae21-fa2d-3995-9804-e288a337300f.roa
File: 899fae21-fa2d-3995-9804-e288a337300f.roa (raw, json)
Hash identifier: c5w0V9y8LrWxYB99ch7rpItS4ZzbwWcL5CDl+kdoGyE=
Subject key identifier: 3F:ED:13:55:78:B9:23:FD:8C:C7:23:B1:7C:E9:43:73:B3:6E:BD:67
Certificate issuer: /CN=00fb6efe-dbc1-45a8-b266-ca72f7e079c2
Certificate serial: 010D0C9F4328584D730A70CE392F237F018C2E00
Authority key identifier: D7:85:1F:AA:F6:15:70:21:20:57:58:8B:1C:D1:C3:BE:BA:D2:F4:77
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/00fb6efe-dbc1-45a8-b266-ca72f7e079c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/00fb6efe-dbc1-45a8-b266-ca72f7e079c2/899fae21-fa2d-3995-9804-e288a337300f.roa
Signing time: Thu 09 Apr 2026 13:00:30 +0000
ROA not before: Thu 09 Apr 2026 13:00:30 +0000
ROA not after: Wed 08 Jul 2026 13:00:30 +0000
asID: 25816
IP address blocks: 104.254.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/00fb6efe-dbc1-45a8-b266-ca72f7e079c2/00fb6efe-dbc1-45a8-b266-ca72f7e079c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/00fb6efe-dbc1-45a8-b266-ca72f7e079c2/00fb6efe-dbc1-45a8-b266-ca72f7e079c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/00fb6efe-dbc1-45a8-b266-ca72f7e079c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:73:0a:70:ce:39:2f:23:7f:01:8c:2e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00fb6efe-dbc1-45a8-b266-ca72f7e079c2
Validity
Not Before: Apr 9 13:00:30 2026 GMT
Not After : Jul 8 13:00:30 2026 GMT
Subject: CN=a355703d-562d-4d48-9533-3e3d180fbc9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:0c:36:35:27:7b:78:4d:c0:83:2c:87:08:54:
2e:b5:72:08:82:0e:82:bb:f1:a2:54:7d:a4:a0:b4:
59:76:e5:a5:a4:5c:a3:b7:b7:c4:55:b1:38:58:83:
5c:de:ab:61:69:56:d7:c0:42:c2:b6:12:d1:43:ed:
94:24:4e:07:18:5f:3d:97:17:4e:23:75:3d:b0:83:
bc:a5:7d:73:07:40:ce:23:ee:a2:b6:8e:8c:d2:9b:
19:fd:12:58:dc:9d:51:80:b1:52:a7:30:7b:19:1c:
4f:05:4f:fc:fd:35:7a:35:57:22:83:cd:f8:28:48:
58:8e:1e:70:0c:cb:cd:02:68:27:c5:6c:6e:bb:34:
cc:3f:7b:67:b4:36:c2:08:ae:a8:ed:e2:ce:56:ef:
f3:5c:f4:3f:29:d9:2b:85:d6:3e:7c:fb:c2:e6:51:
2a:c4:9f:fb:a3:14:1b:76:ac:db:66:9d:90:78:5e:
8f:26:d4:8a:d3:e1:19:c6:bd:72:df:2f:75:76:f4:
c7:4c:52:30:bb:08:33:01:eb:3f:06:be:00:52:c9:
4b:ac:7f:54:01:c2:fe:92:de:05:f3:96:75:c6:62:
34:3c:27:3b:0a:5f:42:d4:48:40:c6:b1:ff:e0:30:
5b:1a:c1:e2:36:8d:f6:ac:5b:00:75:e1:a9:00:bf:
79:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:ED:13:55:78:B9:23:FD:8C:C7:23:B1:7C:E9:43:73:B3:6E:BD:67
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/00fb6efe-dbc1-45a8-b266-ca72f7e079c2/899fae21-fa2d-3995-9804-e288a337300f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/00fb6efe-dbc1-45a8-b266-ca72f7e079c2/00fb6efe-dbc1-45a8-b266-ca72f7e079c2.crl
X509v3 Authority Key Identifier:
keyid:D7:85:1F:AA:F6:15:70:21:20:57:58:8B:1C:D1:C3:BE:BA:D2:F4:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/00fb6efe-dbc1-45a8-b266-ca72f7e079c2.cer
sbgp-ipAddrBlock: critical
IPv4:
104.254.45.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:70:2f:7d:34:e7:0f:50:86:be:fa:1c:ab:b3:3c:94:01:8e:
be:2d:e4:7b:0f:e9:5d:b1:1a:44:9c:6d:6b:b0:9f:5e:e7:46:
c3:30:7e:e1:0c:31:49:6a:16:6a:60:d3:3b:41:8f:78:68:73:
90:45:89:ce:84:ee:f7:fc:b1:c8:21:34:01:18:d1:f2:9f:58:
1a:17:2f:36:59:bc:59:dd:36:cb:e0:79:3d:19:16:14:cd:47:
c9:10:8c:d3:24:93:b3:f8:b0:95:66:84:46:50:14:6a:37:51:
b1:d9:46:24:34:75:c0:c5:6e:ef:b3:a3:9f:e3:7e:be:a4:c7:
ea:3c:f2:77:ec:d7:50:61:73:6d:03:b9:55:e0:dd:0c:7e:27:
22:f4:10:7f:0c:f0:43:87:ce:63:04:56:cb:31:3f:b6:ad:af:
a3:4f:68:7f:9f:4a:bc:2f:11:05:43:cf:18:ad:0b:e3:b5:40:
ad:01:5b:47:f8:e4:c7:54:21:f0:23:e2:6d:e2:32:f8:6c:cd:
12:5b:f0:5d:5c:25:3b:2a:df:fd:f5:40:dc:fe:bc:32:05:d6:
47:38:47:86:90:37:1c:2f:45:c1:a4:c0:59:5d:17:4b:2a:54:
32:a5:b3:52:fa:68:7a:84:72:dc:21:63:2e:9d:29:bd:62:30:
50:f2:fb:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:00:31 2026 by rpki-client