
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b91f67eb-4bf9-45bb-a591-6b22acfd30c7/d2b1a3a0-3d78-3916-bb20-5651dcec79b0.roa
File: d2b1a3a0-3d78-3916-bb20-5651dcec79b0.roa (raw, json)
Hash identifier: nx0RrJI3+goE7HK7LdHfn56qkly5WXk0yYfHiLyvDoQ=
Subject key identifier: 51:02:1B:AA:08:18:33:B2:5D:07:C9:06:0B:7F:7A:9C:B2:21:61:0D
Certificate issuer: /CN=b91f67eb-4bf9-45bb-a591-6b22acfd30c7
Certificate serial: 010D0C9F4328584D67DFF91DB097096A593E9140
Authority key identifier: 6C:74:58:36:BA:A1:ED:D1:CA:C4:8A:49:98:25:3B:5F:90:75:5D:8A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b91f67eb-4bf9-45bb-a591-6b22acfd30c7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b91f67eb-4bf9-45bb-a591-6b22acfd30c7/d2b1a3a0-3d78-3916-bb20-5651dcec79b0.roa
Signing time: Sun 05 Apr 2026 13:00:31 +0000
ROA not before: Sun 05 Apr 2026 13:00:31 +0000
ROA not after: Sat 04 Jul 2026 13:00:31 +0000
asID: 14691
IP address blocks: 23.135.100.0/24 maxlen: 24
2620:d4:2000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b91f67eb-4bf9-45bb-a591-6b22acfd30c7/b91f67eb-4bf9-45bb-a591-6b22acfd30c7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b91f67eb-4bf9-45bb-a591-6b22acfd30c7/b91f67eb-4bf9-45bb-a591-6b22acfd30c7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b91f67eb-4bf9-45bb-a591-6b22acfd30c7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:67:df:f9:1d:b0:97:09:6a:59:3e:91:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b91f67eb-4bf9-45bb-a591-6b22acfd30c7
Validity
Not Before: Apr 5 13:00:31 2026 GMT
Not After : Jul 4 13:00:31 2026 GMT
Subject: CN=baf555a7-b447-435c-ac33-f0c5bddd921d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:9c:b2:6f:2f:61:1b:d0:0a:ac:0d:88:eb:af:
a8:32:ed:f3:cd:fd:a0:b2:c0:1c:53:87:48:16:d1:
61:8d:23:dd:8b:dd:10:7f:47:71:76:a3:d1:b9:39:
bf:e6:86:5a:3b:a5:6e:ae:62:77:cf:76:84:25:48:
d4:d0:b2:da:b8:2a:6e:c4:ab:74:00:79:3a:04:d2:
a9:dc:8f:3a:99:7e:14:3e:b0:63:67:ba:53:a6:03:
43:93:d0:53:e0:36:10:75:9f:90:f3:bd:3d:c7:48:
af:5d:37:55:3d:c1:f5:0f:8c:c2:94:b1:cf:09:6b:
3c:9d:60:e6:16:ef:12:90:d2:4e:e0:37:98:27:11:
20:0b:00:b2:60:da:8a:ba:7d:87:88:ed:6d:1f:75:
a1:99:c5:15:7e:3f:df:f1:b5:f4:c3:70:2d:bf:d2:
5d:ee:4c:0a:8e:04:49:f5:ea:1d:df:82:25:df:33:
e9:ea:4f:38:0c:cc:32:0f:c5:cd:49:b8:bf:12:5d:
02:18:fa:35:56:53:e9:6f:2d:82:83:19:72:c9:03:
b1:a4:07:81:e5:97:f3:75:28:ac:98:7d:3d:80:82:
10:21:42:68:4b:52:13:aa:1b:24:c9:9a:32:bc:c6:
aa:e2:36:eb:40:50:57:a4:f1:e9:02:1b:ce:35:2f:
d7:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:02:1B:AA:08:18:33:B2:5D:07:C9:06:0B:7F:7A:9C:B2:21:61:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b91f67eb-4bf9-45bb-a591-6b22acfd30c7/d2b1a3a0-3d78-3916-bb20-5651dcec79b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b91f67eb-4bf9-45bb-a591-6b22acfd30c7/b91f67eb-4bf9-45bb-a591-6b22acfd30c7.crl
X509v3 Authority Key Identifier:
keyid:6C:74:58:36:BA:A1:ED:D1:CA:C4:8A:49:98:25:3B:5F:90:75:5D:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b91f67eb-4bf9-45bb-a591-6b22acfd30c7.cer
sbgp-ipAddrBlock: critical
IPv4:
23.135.100.0/24
IPv6:
2620:d4:2000::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:09:c7:2d:89:b2:78:27:b3:f1:98:b6:3c:17:9e:8f:aa:75:
1e:23:85:c7:c1:8a:7e:ed:23:b7:3a:3a:1c:e9:ef:4d:c1:2b:
14:8b:e8:f1:f9:07:86:57:e7:f0:2d:ca:9d:38:8f:d7:89:1a:
91:cf:45:cd:7b:eb:c0:0a:1e:ed:19:b0:15:ab:41:19:84:96:
84:eb:66:8f:61:7c:b1:57:a2:15:07:0b:9c:6f:ae:b0:51:79:
b7:4d:b2:f8:0e:6a:5e:6c:8d:7e:3a:c7:cb:4d:02:62:57:68:
13:a0:95:7f:bc:79:37:a9:57:fb:dc:af:90:2b:33:af:c3:ac:
48:27:71:9b:82:a2:ea:07:d0:c0:bb:0d:16:7c:99:da:f1:f1:
78:38:be:85:52:9c:75:b0:28:eb:e8:76:1d:a1:a1:32:dd:d3:
b3:48:76:50:c3:2a:c5:0e:cc:79:4b:4d:cd:b6:b5:13:d1:06:
a4:61:7a:a9:36:81:72:f9:50:e7:a9:75:fe:68:0e:74:78:98:
9e:d8:c4:87:fc:4c:a7:77:ed:d2:56:8d:eb:43:d9:8f:71:e5:
35:82:a4:91:f8:93:6b:4f:3c:37:99:8e:08:04:ff:31:fc:ba:
21:89:8e:13:26:67:24:8d:17:94:a0:fd:26:ed:d0:f2:66:52:
24:75:e7:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:19:14 2026 by rpki-client