
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/15c3c9f9-a08d-37ad-a6a6-d2133cf5f1cf.roa
File: 15c3c9f9-a08d-37ad-a6a6-d2133cf5f1cf.roa (raw, json)
Hash identifier: iVMCRLDcckBs+sCwI2/pa0Ea/EjQRNJNKp/8OpmiSWo=
Subject key identifier: 34:AF:CF:0F:68:30:4B:FF:02:48:27:A4:98:67:7C:06:14:0E:7C:6C
Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial: 010D0C9F4328584D237A703CA06695F64D89DB00
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/15c3c9f9-a08d-37ad-a6a6-d2133cf5f1cf.roa
Signing time: Thu 12 Mar 2026 01:00:32 +0000
ROA not before: Thu 12 Mar 2026 01:00:32 +0000
ROA not after: Wed 10 Jun 2026 01:00:32 +0000
asID: 23473
IP address blocks: 104.145.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 22 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:23:7a:70:3c:a0:66:95:f6:4d:89:db:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Validity
Not Before: Mar 12 01:00:32 2026 GMT
Not After : Jun 10 01:00:32 2026 GMT
Subject: CN=32a661e4-a56d-4b63-8731-730be1a5450a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5a:51:6f:b9:ee:d7:0c:eb:ef:80:88:28:44:
97:bc:59:47:cf:f4:68:e4:4e:75:93:ad:a7:ca:7b:
50:9f:61:25:35:f3:14:a5:7d:d1:44:ee:87:77:65:
21:a9:ce:6a:6f:3e:20:4a:f2:62:34:e6:45:c6:ee:
e8:4a:36:11:1e:b3:a1:b3:15:8a:fc:39:65:8c:6f:
af:6e:cf:b0:ca:12:91:97:51:91:03:d7:be:78:bb:
34:f8:ce:48:34:48:b3:32:00:47:cb:41:fc:a0:0c:
8c:3e:2a:3d:a4:d1:0a:57:23:ed:b4:73:3d:05:07:
67:07:8f:78:10:7e:3f:5b:92:b3:3d:fc:aa:d4:e3:
dc:7f:4d:e1:b6:04:74:8e:4a:b7:e2:89:06:8a:17:
74:33:6e:f1:f5:49:c3:de:23:2d:7e:93:80:e3:7b:
f5:95:a6:fc:33:dc:82:92:d3:6f:e9:e5:f3:e4:eb:
ca:d9:04:49:1e:6e:c8:49:50:e5:4c:c7:0d:ba:8c:
b3:29:8d:ed:78:fb:c9:50:dc:1d:ad:11:6c:c8:27:
25:4b:63:c5:ea:bb:d3:da:5e:0b:b3:7c:91:4a:aa:
59:15:c3:59:38:76:10:b8:64:c4:e8:8c:22:ea:27:
50:9c:36:f0:fc:cd:48:c2:36:0c:a6:ec:d3:48:0f:
f6:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:AF:CF:0F:68:30:4B:FF:02:48:27:A4:98:67:7C:06:14:0E:7C:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/15c3c9f9-a08d-37ad-a6a6-d2133cf5f1cf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
X509v3 Authority Key Identifier:
keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
sbgp-ipAddrBlock: critical
IPv4:
104.145.86.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:0f:db:21:64:6d:0c:7f:1c:58:96:c9:d5:55:65:4c:32:8d:
b6:f3:f2:2c:82:2a:65:d7:2f:88:0b:90:3a:c2:c6:d1:06:b4:
79:05:bf:b4:55:d5:68:ac:e9:4d:4e:91:3c:5a:8c:a1:2e:60:
45:91:88:a5:af:9f:61:c2:80:5f:fd:f0:18:5b:fb:c3:19:11:
03:1d:ac:8a:83:25:22:1f:4f:71:c8:b9:71:4f:8d:b8:56:6f:
55:40:c6:43:e8:e5:65:fb:5b:60:d6:f6:0c:7f:e8:bc:0f:19:
a8:27:d7:96:d2:4c:54:fa:d7:43:8f:15:4f:4e:df:4a:20:c9:
a7:19:b6:f5:ce:28:fd:69:42:6e:68:54:f8:2b:69:ea:3f:36:
b7:cf:b0:2c:04:0d:20:bd:d6:c0:1a:72:eb:d8:43:ef:3b:19:
01:00:7b:f1:41:ca:38:a9:6c:0a:1b:41:10:45:75:d9:34:a0:
05:d2:f5:52:38:bb:fc:a1:b6:47:34:cf:96:fc:d9:fe:57:04:
72:c2:24:a0:e7:83:2b:5e:90:d2:50:46:0f:ac:77:64:2b:dd:
0b:6e:6e:61:46:6b:4d:d8:8c:61:b9:01:e1:54:4e:e0:88:b8:
b1:d8:86:57:a2:0d:f6:5a:55:25:10:b8:b0:d8:77:cc:36:fd:
f6:58:08:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 20:58:16 2026 by rpki-client