
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d1f3fb34-9d61-4476-8110-8ca2876e7928/8ab98763-57d8-3406-a6ea-f78fae4ed6ca.roa
File: 8ab98763-57d8-3406-a6ea-f78fae4ed6ca.roa (raw, json)
Hash identifier: dB5wKyMoDBexbaPkHBpE9KOft0ZHlaa2tlz7Ec5eTC4=
Subject key identifier: 1B:3F:40:4C:EF:56:D6:1C:DF:6E:D7:D2:14:33:8B:B0:63:47:8B:8C
Certificate issuer: /CN=d1f3fb34-9d61-4476-8110-8ca2876e7928
Certificate serial: 010D0C9F4328584D52434F448639B101ECF23A26
Authority key identifier: 1D:5C:6D:97:7B:0E:D0:8B:17:07:49:4E:9F:2D:CF:14:CE:B9:8A:26
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d1f3fb34-9d61-4476-8110-8ca2876e7928.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d1f3fb34-9d61-4476-8110-8ca2876e7928/8ab98763-57d8-3406-a6ea-f78fae4ed6ca.roa
Signing time: Sat 28 Mar 2026 19:13:19 +0000
ROA not before: Sat 28 Mar 2026 19:13:19 +0000
ROA not after: Fri 26 Jun 2026 19:13:19 +0000
asID: 14618
IP address blocks: 68.70.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d1f3fb34-9d61-4476-8110-8ca2876e7928/d1f3fb34-9d61-4476-8110-8ca2876e7928.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d1f3fb34-9d61-4476-8110-8ca2876e7928/d1f3fb34-9d61-4476-8110-8ca2876e7928.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d1f3fb34-9d61-4476-8110-8ca2876e7928.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 08 Apr 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:52:43:4f:44:86:39:b1:01:ec:f2:3a:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1f3fb34-9d61-4476-8110-8ca2876e7928
Validity
Not Before: Mar 28 19:13:19 2026 GMT
Not After : Jun 26 19:13:19 2026 GMT
Subject: CN=a00b169d-ee0d-40a0-a278-64d5c0059a34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:67:72:5c:fa:eb:05:23:62:17:62:c8:64:95:
0b:1c:1d:ca:e0:62:8e:06:40:13:90:3d:f7:ba:b4:
54:f8:61:a5:18:36:02:92:e1:9c:ab:ad:4f:56:48:
2e:a9:51:c8:a4:bc:0d:e7:44:84:5b:ad:46:e1:c4:
40:3e:bd:cf:d9:89:11:c4:82:f1:d3:57:47:66:91:
bc:18:f9:57:92:0e:fc:e2:d6:bf:11:b8:e8:4a:f8:
1d:ed:42:4b:c3:76:70:9f:80:d1:78:a2:00:fc:b0:
87:17:0b:f0:00:47:86:cd:92:90:67:e2:5f:87:dc:
16:37:ab:2a:71:d6:da:25:40:97:4f:42:51:ae:f2:
0f:51:f2:7c:5e:8a:58:b7:17:51:79:7f:2d:df:18:
35:71:d8:23:c0:bc:8d:36:86:56:fa:2a:1e:ea:43:
ef:a5:45:78:04:80:38:3e:a0:87:e7:2a:f9:a6:13:
f8:da:aa:5a:8d:5a:96:a3:c7:7f:25:12:55:0c:bb:
7b:d9:36:0e:b1:b1:1a:8d:eb:cd:ea:de:23:e1:1e:
c6:4a:ef:3f:90:d3:f2:60:c6:db:a6:9f:dd:8f:e1:
04:f2:fa:18:f3:ef:c2:4f:d8:15:a7:f0:22:b4:cb:
c4:26:fe:52:cd:e2:5d:03:cb:63:58:48:05:a3:15:
59:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:3F:40:4C:EF:56:D6:1C:DF:6E:D7:D2:14:33:8B:B0:63:47:8B:8C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d1f3fb34-9d61-4476-8110-8ca2876e7928/8ab98763-57d8-3406-a6ea-f78fae4ed6ca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d1f3fb34-9d61-4476-8110-8ca2876e7928/d1f3fb34-9d61-4476-8110-8ca2876e7928.crl
X509v3 Authority Key Identifier:
keyid:1D:5C:6D:97:7B:0E:D0:8B:17:07:49:4E:9F:2D:CF:14:CE:B9:8A:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d1f3fb34-9d61-4476-8110-8ca2876e7928.cer
sbgp-ipAddrBlock: critical
IPv4:
68.70.127.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:3d:07:57:20:e8:ce:bf:4c:15:4f:22:fd:8a:69:d0:3c:62:
80:16:83:2b:9d:e0:24:e5:1b:32:c3:92:f9:1e:22:6a:13:c8:
d7:ea:bc:3d:11:bb:00:6c:9f:5f:d7:e7:c0:bd:3d:f0:c9:75:
2d:bc:4a:ff:d0:a6:ba:6a:b6:e8:2b:ab:44:d8:6b:26:21:3f:
29:bc:87:31:cf:3d:dd:72:a0:41:ba:9f:98:12:51:ff:1f:b2:
54:84:28:f9:28:21:cd:c1:f8:f8:b5:63:72:ba:b9:13:25:0b:
71:d3:2a:d9:6d:07:f0:bb:3b:8f:d5:81:52:05:37:76:f3:40:
e0:40:b8:36:2a:70:3b:c1:3c:77:4a:44:0c:52:4f:38:86:c7:
d5:c1:d2:1a:88:05:50:1f:e8:11:43:c1:5a:8c:22:c1:e6:9f:
95:4c:a5:ab:95:61:f4:71:d6:cf:00:a8:7e:41:8c:3c:ef:ec:
67:1e:34:a0:b0:1d:a9:e4:14:1c:c4:9d:8d:78:3e:1f:aa:14:
61:50:81:49:eb:ff:9a:5b:b2:c2:32:f8:f5:06:c4:0f:23:74:
e5:91:8c:7a:79:19:b7:dc:29:32:7d:6d:47:7b:8a:02:b6:c6:
b8:76:ce:9f:ce:18:04:df:5d:40:10:2c:c2:a9:a5:0b:41:af:
1b:9d:ec:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 10:36:03 2026 by rpki-client