
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c/731e66c1-a71e-3d9f-a838-e78228e9ff90.roa
File: 731e66c1-a71e-3d9f-a838-e78228e9ff90.roa (raw, json)
Hash identifier: xxAbTCI1tMcsBieggVfNuhTxke60WXNh4LQNnMTuA/Q=
Subject key identifier: 30:7F:A1:3E:6E:96:33:C1:FC:A0:C6:F2:00:C6:14:5F:4C:EE:6D:75
Certificate issuer: /CN=43ac5ede-1d27-41a5-932c-21832f3ef95c
Certificate serial: 010D0C9F4328584D6AAA743994F28626353F0100
Authority key identifier: 09:3E:48:28:77:AE:C9:66:5D:E7:F1:3F:39:E3:B7:7E:84:9F:9A:CD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c/731e66c1-a71e-3d9f-a838-e78228e9ff90.roa
Signing time: Mon 06 Apr 2026 13:00:30 +0000
ROA not before: Mon 06 Apr 2026 13:00:30 +0000
ROA not after: Sun 05 Jul 2026 13:00:30 +0000
asID: 11734
IP address blocks: 104.151.136.0/21 maxlen: 24
104.153.192.0/22 maxlen: 24
199.19.208.0/22 maxlen: 24
199.189.64.0/22 maxlen: 24
208.74.28.0/22 maxlen: 24
208.74.48.0/22 maxlen: 24
208.82.204.0/22 maxlen: 24
208.91.48.0/22 maxlen: 24
209.134.48.0/20 maxlen: 24
2607:f148::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c/43ac5ede-1d27-41a5-932c-21832f3ef95c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c/43ac5ede-1d27-41a5-932c-21832f3ef95c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 08 Apr 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:6a:aa:74:39:94:f2:86:26:35:3f:01:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43ac5ede-1d27-41a5-932c-21832f3ef95c
Validity
Not Before: Apr 6 13:00:30 2026 GMT
Not After : Jul 5 13:00:30 2026 GMT
Subject: CN=f66322c2-fd25-419e-af48-236bf2f7908d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:20:d9:47:5a:51:90:7e:b8:3b:38:70:95:de:
e3:b9:be:7f:30:fd:30:a9:c3:a4:e3:f6:19:d4:0c:
b9:54:a0:08:77:06:ba:34:aa:ed:a9:7c:88:99:17:
51:08:6e:f7:7f:57:14:28:24:a6:70:11:f6:f9:f9:
9e:63:02:91:1f:9e:35:d6:01:1f:86:14:3b:5d:a1:
74:fe:86:5a:85:aa:25:fb:a2:c4:7e:41:6f:2a:27:
ce:cd:50:eb:c5:1f:e7:91:3b:ee:92:54:8e:0f:b8:
da:b0:36:c3:cb:89:3f:8d:ea:52:4a:6e:0f:c6:4c:
11:ff:c3:8f:96:0d:6f:8d:dd:cc:54:a6:74:db:6e:
8a:ae:dc:ca:67:24:f9:c8:fc:7e:c0:57:09:48:57:
c0:2e:c6:83:63:21:e8:96:e7:d0:7e:94:a3:1a:d9:
89:2f:eb:9b:b5:2a:50:84:b5:7f:69:0d:0c:c6:4a:
ba:e7:1d:ae:8d:fa:fc:91:04:bc:18:ff:ba:98:76:
44:f6:e3:8d:54:35:35:60:9d:4d:f0:12:86:e3:8f:
5c:a5:f6:6f:8d:2f:52:d7:18:60:68:22:f9:97:29:
f0:ee:a2:96:99:39:94:47:52:2f:8b:d0:38:13:4f:
5f:ad:ff:79:a9:29:27:2d:2b:51:6c:0f:00:bf:37:
9b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:7F:A1:3E:6E:96:33:C1:FC:A0:C6:F2:00:C6:14:5F:4C:EE:6D:75
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c/731e66c1-a71e-3d9f-a838-e78228e9ff90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c/43ac5ede-1d27-41a5-932c-21832f3ef95c.crl
X509v3 Authority Key Identifier:
keyid:09:3E:48:28:77:AE:C9:66:5D:E7:F1:3F:39:E3:B7:7E:84:9F:9A:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/43ac5ede-1d27-41a5-932c-21832f3ef95c.cer
sbgp-ipAddrBlock: critical
IPv4:
104.151.136.0/21
104.153.192.0/22
199.19.208.0/22
199.189.64.0/22
208.74.28.0/22
208.74.48.0/22
208.82.204.0/22
208.91.48.0/22
209.134.48.0/20
IPv6:
2607:f148::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:97:cf:74:0d:99:19:fd:3d:de:af:b9:01:ed:60:71:67:ad:
5c:73:25:81:ec:0b:91:ae:e5:5a:15:45:46:64:9e:0a:d4:01:
3a:3a:fb:73:29:21:e4:a3:4c:b1:66:86:43:ae:48:9a:1b:d7:
0e:5a:62:a0:e4:16:60:28:89:3f:a1:b0:eb:e7:e0:00:0e:fc:
e5:eb:e1:41:26:fe:c3:cc:f5:d5:cd:99:ec:be:ff:be:af:85:
49:13:7f:a0:d7:3b:90:c9:87:99:2a:75:d7:bc:cb:68:81:f4:
21:f1:4d:4c:ff:dc:2a:22:33:bc:85:7e:6c:fa:13:cb:e7:54:
5c:65:55:73:78:ce:20:55:0b:38:79:c6:ff:69:47:12:04:93:
0d:85:fd:52:65:98:26:79:89:6b:eb:87:74:76:0c:e8:fe:bc:
76:a1:7c:28:5b:58:90:88:6f:8e:4b:4a:2d:75:9f:97:9f:81:
4b:15:6a:ae:d5:23:6b:9e:e5:0c:72:7e:7f:4b:b5:25:d8:e1:
6a:8b:82:34:56:60:a8:e8:ba:ae:82:f8:39:00:76:3d:6d:3b:
13:b0:44:c8:ee:6d:c1:42:a8:75:ad:c4:23:da:d9:84:2a:ce:
17:43:77:64:14:08:66:25:0b:fe:bf:67:9a:71:5a:40:87:dd:
83:63:07:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 20:04:18 2026 by rpki-client