
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/1bad068c-3a7e-3488-8d50-a5e1755f7430.roa
File: 1bad068c-3a7e-3488-8d50-a5e1755f7430.roa (raw, json)
Hash identifier: BTlKzyFBkauXL/13lXolwCw7VUc/DzJJdoKT1x5lJoE=
Subject key identifier: 9F:6C:77:F4:32:C5:61:96:18:C7:39:1C:3F:77:0B:BA:A9:9B:58:1D
Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial: 010D0C9F4328584E059B423B625C1D9B3C7A2D00
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/1bad068c-3a7e-3488-8d50-a5e1755f7430.roa
Signing time: Mon 01 Jun 2026 01:00:10 +0000
ROA not before: Mon 01 Jun 2026 01:00:10 +0000
ROA not after: Sun 30 Aug 2026 01:00:10 +0000
asID: 174
IP address blocks: 216.131.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Jun 2026 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:05:9b:42:3b:62:5c:1d:9b:3c:7a:2d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Validity
Not Before: Jun 1 01:00:10 2026 GMT
Not After : Aug 30 01:00:10 2026 GMT
Subject: CN=99fcdfd7-bef8-4dfb-8ece-e704aea9af64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:3f:74:8e:9b:37:a9:cc:83:7d:08:11:09:ed:
76:b8:37:de:6e:3a:88:69:4a:b2:87:88:1d:28:10:
a7:fd:02:73:68:33:7e:83:d2:36:a5:e9:6e:49:58:
d9:04:c3:00:dd:f3:e4:a8:88:4b:51:43:7d:85:f5:
ff:52:70:76:fe:c3:c4:40:31:72:87:88:d2:2f:b4:
97:80:ad:e5:23:bf:e3:cc:c0:06:d1:15:ab:cf:21:
48:18:52:3a:e5:2e:a4:12:6f:fa:3a:3c:45:77:a7:
cb:60:79:1a:42:d8:97:f0:fc:42:ca:7d:43:32:99:
cd:74:33:89:00:cf:91:fd:68:c6:31:df:22:48:34:
80:7d:1b:ee:49:4d:49:0f:d6:4a:0b:bd:a7:22:45:
c6:15:74:7f:f1:2f:29:cf:ec:07:98:fe:e6:f2:bb:
b5:89:61:48:6a:f8:92:06:69:cd:92:42:84:87:48:
e0:12:23:bf:98:4e:16:70:26:05:ef:00:70:65:7f:
4a:1f:15:e4:81:1d:1d:9c:93:e8:f4:64:1a:35:2f:
f3:c6:fa:76:83:c3:cf:65:2b:1f:f2:83:d4:47:d7:
67:a3:26:95:b7:e8:20:fd:8d:47:54:93:5a:8a:07:
db:ad:9e:11:02:a7:ed:03:d6:e9:e1:61:4b:32:3a:
dc:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:6C:77:F4:32:C5:61:96:18:C7:39:1C:3F:77:0B:BA:A9:9B:58:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/1bad068c-3a7e-3488-8d50-a5e1755f7430.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
X509v3 Authority Key Identifier:
keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
sbgp-ipAddrBlock: critical
IPv4:
216.131.104.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:37:19:49:26:2b:ef:9d:de:0a:8e:a7:8b:83:b6:51:e2:51:
74:fe:da:92:61:48:4a:5b:ab:84:4b:2e:19:17:1b:61:7f:a8:
3a:3c:c6:80:25:a5:81:c3:49:19:4f:95:1e:c8:e9:02:30:58:
f3:d2:64:57:be:38:8a:6e:c1:32:ba:e1:34:f5:4b:df:bf:4a:
5a:e2:c1:fc:69:d3:72:12:71:8b:b2:10:9d:be:ff:a3:31:87:
ae:d7:73:b5:07:dc:a8:b7:4e:07:bf:07:82:81:b3:4a:f0:e1:
e6:db:36:54:42:b6:68:80:b7:4f:28:7d:3a:cb:d7:ec:64:89:
f4:83:a3:ff:7f:82:42:d1:f7:a8:f0:fd:31:ac:58:82:9b:cc:
34:e6:3e:b9:7e:a6:66:6f:20:e6:df:da:ea:54:c9:76:af:5f:
b3:f4:cd:84:0c:6b:c9:4b:b6:3f:4a:6b:4a:26:d6:8d:fe:1a:
91:f8:7a:db:68:c1:52:56:25:62:29:eb:4f:36:61:ca:4b:43:
86:be:92:a2:9d:f3:d8:96:e5:ce:f6:63:f8:05:2d:cd:da:28:
e9:f2:ae:77:29:7d:38:43:c3:1d:f0:87:2b:c7:c9:36:25:69:
d7:af:d7:b1:be:3e:b0:d5:4b:e0:b2:b7:64:91:b0:85:48:9a:
bd:f9:2e:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 14:21:37 2026 by rpki-client