
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/10b9f552-b9a4-3676-bead-6e1a7bef29bc.roa
File: 10b9f552-b9a4-3676-bead-6e1a7bef29bc.roa (raw, json)
Hash identifier: 86ct5KElSCrGZJCGizf8FXkex3285Fov4IRCdXEQiPU=
Subject key identifier: 58:DB:38:E7:B1:39:B8:9A:64:C4:B2:07:3C:4C:CC:ED:13:99:CD:2B
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328584D1F4A571D11D1961978D30F80
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/10b9f552-b9a4-3676-bead-6e1a7bef29bc.roa
Signing time: Tue 10 Mar 2026 13:00:41 +0000
ROA not before: Tue 10 Mar 2026 13:00:41 +0000
ROA not after: Mon 08 Jun 2026 13:00:41 +0000
asID: 396982
IP address blocks: 108.170.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 19 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:1f:4a:57:1d:11:d1:96:19:78:d3:0f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Mar 10 13:00:41 2026 GMT
Not After : Jun 8 13:00:41 2026 GMT
Subject: CN=f1f25f4a-b271-45af-856d-f85fd4b414a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f6:c1:5b:54:c4:9f:50:9b:2d:d9:78:d5:97:
4b:7a:4d:d3:6c:e6:8e:6f:8c:b6:a2:a2:62:48:49:
12:a5:99:c8:87:6f:27:cd:92:81:2b:cb:54:ab:11:
d1:ff:f0:3a:7d:1f:ec:78:e4:d5:30:07:08:50:7b:
c4:38:66:58:40:41:8f:89:1c:79:f5:33:5c:dd:b3:
05:0e:26:bc:7d:f8:10:e8:a9:6d:da:56:3a:41:79:
71:ba:2c:ba:3e:85:e4:15:8b:ec:9a:9b:5e:84:96:
ae:25:d3:76:88:20:54:76:8e:47:20:80:47:9a:37:
2e:b8:7e:16:9f:dc:1d:83:4b:cd:e1:79:c5:02:34:
4d:e3:02:8a:c5:43:ed:f2:a8:e8:df:e3:a7:8c:28:
97:6b:63:f4:41:3e:4e:74:ef:42:b4:56:f6:cb:66:
d6:bd:18:76:f4:99:1a:cf:71:ba:c3:5f:92:19:e4:
87:1f:85:1e:62:71:84:c4:bb:b3:49:fb:bd:99:d6:
40:40:dd:99:d4:9a:ea:22:88:aa:d7:2a:81:c8:b9:
eb:e7:d5:ff:49:cd:c4:14:b3:d4:43:bb:da:c9:b3:
01:7a:f5:2c:15:2f:0a:11:fa:fe:17:31:58:87:e6:
37:d9:35:a9:2c:d7:e6:69:72:21:75:b3:35:14:ed:
8c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:DB:38:E7:B1:39:B8:9A:64:C4:B2:07:3C:4C:CC:ED:13:99:CD:2B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/10b9f552-b9a4-3676-bead-6e1a7bef29bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
108.170.201.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:3b:6a:01:de:dd:5f:af:18:93:30:22:e9:94:7c:6f:37:13:
7c:1f:37:dc:e3:9f:3f:25:5f:ae:6a:c5:73:96:32:be:71:91:
6e:7b:f6:7f:3e:61:42:4e:42:43:49:d4:88:f7:1c:30:ce:5f:
6c:50:ce:34:93:02:56:17:ff:f3:72:ea:a9:3e:85:3f:df:f3:
09:b8:28:46:4e:b0:1c:8a:96:cf:5f:fa:ae:ec:70:93:69:98:
c0:eb:77:89:39:71:00:2f:e8:f6:e7:f8:8b:e5:46:6d:31:c1:
65:d9:a2:2e:f6:b7:f2:e1:98:a9:80:39:9c:71:cd:07:44:90:
cb:81:d1:7f:80:94:46:2c:7e:e4:8b:68:3e:cb:db:15:1f:f8:
19:00:79:e6:e3:10:4d:0b:b6:65:2a:78:d8:63:57:b4:84:87:
4c:6d:95:57:9a:c1:9a:44:64:34:62:54:1a:ba:62:b7:39:89:
be:38:13:a9:a0:d2:29:a5:99:6f:ef:09:ae:06:d8:e9:22:5f:
c2:7a:d9:e4:a4:5e:bf:0d:f9:b9:a5:65:5e:96:08:88:7a:84:
2d:bc:bd:94:18:75:08:ed:a8:1d:50:7a:f3:d0:b6:3c:e6:58:
36:62:62:e1:22:08:c2:31:ba:38:17:8b:82:3d:0c:e4:f9:aa:
11:48:f4:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 18 20:31:09 2026 by rpki-client