
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/097952e5-3fea-3e53-aed7-9597238cda72.roa
File: 097952e5-3fea-3e53-aed7-9597238cda72.roa (raw, json)
Hash identifier: Gwvyl0DA9BNgvavaAiPIFukbtKRBKVzZTYez0OrA7PM=
Subject key identifier: 7B:4B:EF:74:48:C1:86:38:53:AE:8A:08:06:26:10:70:AE:0C:6D:C6
Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial: 010D0C9F4328584D6AAA7598D75E5C4386562440
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/097952e5-3fea-3e53-aed7-9597238cda72.roa
Signing time: Mon 06 Apr 2026 13:00:30 +0000
ROA not before: Mon 06 Apr 2026 13:00:30 +0000
ROA not after: Sun 05 Jul 2026 13:00:30 +0000
asID: 14618
IP address blocks: 170.114.0.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:6a:aa:75:98:d7:5e:5c:43:86:56:24:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
Validity
Not Before: Apr 6 13:00:30 2026 GMT
Not After : Jul 5 13:00:30 2026 GMT
Subject: CN=cf68d5ae-4ca0-4c68-9596-a75a0d90701a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:07:9f:54:0b:9c:82:f1:eb:5d:ee:6e:33:d8:
60:9d:ed:ac:2a:c3:e0:b6:19:b8:14:77:bf:4a:9f:
15:37:4e:c7:c4:a6:72:a0:58:90:37:7b:58:85:ec:
33:19:da:1b:2a:fb:ee:0f:2a:e1:61:ae:ba:70:74:
0e:58:24:d0:b3:ae:85:ec:d9:f2:5e:8c:7e:f7:2f:
0e:7c:7a:b3:1b:09:53:26:1a:72:57:07:d9:e6:29:
af:a6:94:48:d4:04:b5:d5:9a:e4:5e:60:6a:b9:f3:
5d:7c:b7:77:85:be:1c:b0:bf:8b:30:f0:ea:dd:b1:
ea:4a:bd:dc:cb:71:08:5a:4f:88:00:91:84:67:dd:
e2:d1:a6:4e:92:e8:7c:01:46:9c:9a:54:d3:85:29:
f5:bd:66:ce:39:72:ab:b9:e5:a1:f0:b1:d6:b3:bd:
62:dc:9d:35:2a:b4:6f:89:e6:bd:da:70:e5:24:45:
42:f1:76:39:f6:1d:e2:32:c3:68:01:ae:19:f3:ed:
01:ff:d5:ee:6c:4b:c3:4d:1e:87:65:d5:9c:82:39:
21:be:5b:f7:42:25:26:d6:46:ba:25:e6:8c:4a:5d:
d0:ff:eb:31:e0:03:a9:91:a5:35:35:f0:fa:35:0d:
19:1a:92:c6:bd:8f:6e:8a:55:49:df:2b:9c:21:4e:
3c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:4B:EF:74:48:C1:86:38:53:AE:8A:08:06:26:10:70:AE:0C:6D:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/097952e5-3fea-3e53-aed7-9597238cda72.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
X509v3 Authority Key Identifier:
keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
sbgp-ipAddrBlock: critical
IPv4:
170.114.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ac:71:f2:40:e5:18:4b:1c:a8:95:92:04:9f:74:65:47:7f:3a:
e3:b6:fd:64:7b:17:e0:d5:5c:4b:76:83:67:c6:7e:6d:82:2f:
73:c5:9d:19:c7:33:37:40:5e:13:fa:5d:b2:e2:97:ee:17:63:
44:70:7f:a2:49:83:80:c1:0e:c9:9e:75:ce:62:0e:21:0a:3b:
a3:a4:60:cf:f1:de:fe:a9:ac:cb:2b:5b:d0:7a:48:1a:9a:e0:
25:d5:35:e9:5b:ab:3e:a9:b2:67:53:87:d6:71:a7:da:0d:56:
0e:93:c0:f1:81:56:5d:c8:26:3a:8c:9a:8b:49:0f:ed:d2:da:
02:ea:1e:66:c8:93:de:c7:44:3d:cc:28:21:f1:57:40:72:41:
39:fa:1c:71:2c:8a:01:88:76:78:77:0f:0d:92:af:73:2a:ca:
db:c5:10:35:85:bc:0b:4c:79:14:0e:02:8b:d3:47:fd:14:58:
fd:29:18:c3:dc:84:44:1c:f9:9d:7e:4f:76:a4:18:b3:69:42:
6a:50:26:a8:f7:73:9f:6f:32:95:95:60:31:af:45:31:80:f0:
08:87:58:37:24:c8:f4:38:bc:81:29:8e:ec:c2:4f:01:b6:b1:
84:8e:19:a6:c8:a0:de:c8:6d:7e:de:ff:9e:68:4b:25:dc:e3:
8f:f7:e4:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:18:06 2026 by rpki-client