
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/d8a8de41-f511-3076-8f1b-f9b1ad4fec20.roa
File: d8a8de41-f511-3076-8f1b-f9b1ad4fec20.roa (raw, json)
Hash identifier: 5wOoWrVxdD651XzyqPdRV1fLpmI2IyWEtI551l4Yx10=
Subject key identifier: 39:8D:B8:89:88:AA:80:52:16:67:53:30:93:D7:50:BC:4C:F5:5E:AF
Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial: 010D0C9F4328584E86F502D21ABEE7E14EEF6AC0
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/d8a8de41-f511-3076-8f1b-f9b1ad4fec20.roa
Signing time: Fri 17 Jul 2026 09:00:14 +0000
ROA not before: Fri 17 Jul 2026 09:00:14 +0000
ROA not after: Thu 15 Oct 2026 09:00:14 +0000
asID: 14618
IP address blocks: 170.114.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 23 Jul 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:86:f5:02:d2:1a:be:e7:e1:4e:ef:6a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
Validity
Not Before: Jul 17 09:00:14 2026 GMT
Not After : Oct 15 09:00:14 2026 GMT
Subject: CN=419cecc3-838f-4fc3-b803-61d7650f3d1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:45:70:6a:6f:31:87:b4:d3:aa:ff:94:92:6b:
46:cf:41:9e:a0:e3:d7:06:c6:76:17:db:de:14:8b:
f3:aa:8f:ce:07:27:cd:07:98:8e:b8:e3:18:0d:e9:
23:f1:bf:87:95:ec:c1:d7:4e:4d:25:37:10:11:70:
2c:c7:6c:da:18:13:6d:bb:d1:e4:5e:c3:75:ad:3f:
9c:ca:dc:05:11:c8:d9:65:41:34:4c:ef:f6:84:ea:
5a:f7:0b:00:ad:83:81:b6:dc:f2:ab:b9:60:37:78:
89:7b:84:b6:9e:83:6d:57:19:1d:1b:47:cf:53:8b:
00:d2:57:c0:42:e9:26:06:12:dc:64:b3:5e:db:7f:
86:fe:3d:fb:73:7c:f2:e3:1e:f2:f5:1e:7c:ad:b9:
c9:b3:a9:cd:fe:88:a5:7a:5d:64:2f:5d:ce:cf:ae:
44:96:80:b1:d3:f0:18:65:e7:c9:c8:fd:21:09:01:
69:f4:c2:02:74:cf:32:d6:c0:0b:6b:51:ab:79:60:
c9:14:4a:38:37:0c:d9:83:9d:72:fc:ac:e9:84:5a:
04:22:49:84:b3:f0:9f:64:45:44:83:4c:2a:29:7b:
37:31:1f:b2:6b:e1:d0:6a:96:80:6a:c4:58:65:1c:
8b:56:1f:89:d2:1a:b7:10:47:81:e4:86:b3:57:76:
68:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:8D:B8:89:88:AA:80:52:16:67:53:30:93:D7:50:BC:4C:F5:5E:AF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/d8a8de41-f511-3076-8f1b-f9b1ad4fec20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
X509v3 Authority Key Identifier:
keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
sbgp-ipAddrBlock: critical
IPv4:
170.114.84.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:c6:52:7d:c3:e2:89:8f:45:b5:6a:bc:53:ec:5d:98:68:0c:
a9:0d:6b:88:c4:69:1a:0e:29:c7:2e:a5:aa:d8:dd:cf:c1:cb:
83:ba:df:9c:1d:ca:b3:fc:c6:70:eb:c9:3a:52:ef:22:bb:ee:
44:e0:f2:8f:61:3e:fe:c0:94:50:64:ff:14:94:8b:50:47:a6:
d5:59:5b:21:d0:8e:7c:04:18:15:d2:10:8c:76:bd:95:62:87:
e1:8e:2a:65:f7:f7:76:d5:68:93:1f:69:ae:0f:51:4f:e2:a1:
eb:20:5a:bc:53:50:99:13:0c:b3:61:4d:c1:cc:08:e8:49:f4:
10:67:38:97:c8:96:bb:bd:a2:7a:2a:8e:dc:8d:17:05:8b:d7:
9c:fc:02:30:44:3c:ad:70:92:70:bc:28:54:5a:94:96:d9:fb:
58:8a:81:41:47:cc:03:79:67:8d:74:d1:30:45:04:38:41:d2:
04:51:df:55:58:a2:6a:a5:aa:37:db:b3:a0:b7:1f:92:64:78:
13:00:37:ef:94:72:a9:72:09:68:e2:13:90:75:71:e8:cb:20:
50:4c:b7:f8:af:ae:10:41:c2:e1:b1:78:e4:88:01:6c:7b:03:
96:ce:9d:7c:ec:d5:71:3f:90:ac:e0:05:72:5b:5f:73:bc:01:
db:1c:a4:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 00:11:23 2026 by rpki-client