
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c2f3afb1-2bf4-4716-903b-29dfa1e88176/dc6b981b-3332-38fa-b76d-e398bcf36767.roa
File: dc6b981b-3332-38fa-b76d-e398bcf36767.roa (raw, json)
Hash identifier: ahUgpnub6itAbIuUfuZAAQbZ9t9G1noKGTcMQPyWOck=
Subject key identifier: 31:D4:E7:D7:E4:4D:BF:F3:12:BA:FF:DB:A1:93:BE:62:97:9A:4F:E5
Certificate issuer: /CN=c2f3afb1-2bf4-4716-903b-29dfa1e88176
Certificate serial: 010D0C9F4328584D0EA7BBB92030DAFD29963280
Authority key identifier: 6B:50:59:E9:0D:73:07:19:DF:4F:0D:0B:C1:A3:E4:D8:A4:D3:A6:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c2f3afb1-2bf4-4716-903b-29dfa1e88176.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c2f3afb1-2bf4-4716-903b-29dfa1e88176/dc6b981b-3332-38fa-b76d-e398bcf36767.roa
Signing time: Wed 04 Mar 2026 14:00:41 +0000
ROA not before: Wed 04 Mar 2026 14:00:41 +0000
ROA not after: Tue 02 Jun 2026 13:00:41 +0000
asID: 20473
IP address blocks: 67.159.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c2f3afb1-2bf4-4716-903b-29dfa1e88176/c2f3afb1-2bf4-4716-903b-29dfa1e88176.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c2f3afb1-2bf4-4716-903b-29dfa1e88176/c2f3afb1-2bf4-4716-903b-29dfa1e88176.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c2f3afb1-2bf4-4716-903b-29dfa1e88176.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 20 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:0e:a7:bb:b9:20:30:da:fd:29:96:32:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2f3afb1-2bf4-4716-903b-29dfa1e88176
Validity
Not Before: Mar 4 14:00:41 2026 GMT
Not After : Jun 2 13:00:41 2026 GMT
Subject: CN=32d3f394-c2a2-447a-b971-3f369dc72c34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:50:5a:f2:7e:5b:d3:13:83:06:81:ec:67:50:
74:33:59:1a:4b:79:24:2a:34:26:7f:ad:cc:17:ef:
e8:1d:08:32:91:e0:bb:b1:f6:26:67:d0:f3:9e:05:
b9:b8:08:bc:b5:34:e9:16:0a:c0:36:e5:a5:3b:ca:
e3:ac:9c:be:7b:73:f8:0b:0e:64:9d:bb:69:98:68:
9d:32:74:0d:20:f0:cc:b5:29:4f:15:c2:de:9c:26:
ee:44:1b:45:7b:0e:73:ff:8c:1f:68:74:06:45:59:
2b:3b:5c:d0:42:eb:f2:82:0e:4a:3b:e0:8b:43:d4:
8f:e8:73:cf:3b:68:d2:94:20:68:66:15:ed:6f:75:
1c:a2:14:8e:18:fc:60:34:14:46:7f:01:45:20:4f:
f6:ba:44:0e:a5:00:9b:b0:ce:f3:22:47:04:eb:a2:
19:f3:15:a3:50:38:6d:4b:88:85:b8:07:03:48:49:
7e:36:20:fa:8d:d5:6e:f4:ad:09:a9:3a:01:d7:3a:
75:e3:9d:c8:9d:05:e2:72:26:1c:75:50:19:35:dd:
b5:f0:63:ee:5c:8b:eb:53:d5:1f:9e:93:68:83:6d:
97:1a:fe:34:22:4b:bf:29:bb:6c:23:e9:7c:4e:b7:
97:46:04:88:d3:1e:56:b8:ac:75:0d:ed:21:c1:70:
02:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:D4:E7:D7:E4:4D:BF:F3:12:BA:FF:DB:A1:93:BE:62:97:9A:4F:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c2f3afb1-2bf4-4716-903b-29dfa1e88176/dc6b981b-3332-38fa-b76d-e398bcf36767.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c2f3afb1-2bf4-4716-903b-29dfa1e88176/c2f3afb1-2bf4-4716-903b-29dfa1e88176.crl
X509v3 Authority Key Identifier:
keyid:6B:50:59:E9:0D:73:07:19:DF:4F:0D:0B:C1:A3:E4:D8:A4:D3:A6:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c2f3afb1-2bf4-4716-903b-29dfa1e88176.cer
sbgp-ipAddrBlock: critical
IPv4:
67.159.203.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:9e:8d:9b:5c:d2:8d:39:21:c3:e8:04:5c:89:6c:e5:05:e6:
0f:57:0f:11:c9:db:e2:3c:32:9e:9c:09:98:69:98:17:85:a6:
03:02:1d:d1:c3:7d:13:3f:c1:35:0a:ae:ad:a5:bb:6d:83:78:
5d:98:33:c5:b5:43:06:ec:42:46:b3:69:8e:7f:17:d7:3b:dc:
82:3b:14:0c:fb:c6:25:f3:ae:71:a2:3c:ac:e3:df:e7:92:0e:
6a:83:49:1c:3d:f8:5b:4f:f0:0c:7c:e3:e1:d2:30:36:b5:ef:
b3:2b:57:90:e4:f4:71:dd:07:b9:34:60:90:8b:3c:e8:73:8e:
98:45:67:63:2b:45:54:e5:14:94:38:9d:8f:fb:a8:f9:42:67:
4d:bb:fc:4c:62:f2:62:31:15:f0:76:ed:5d:71:7a:e4:eb:5f:
78:ce:85:d5:76:10:8b:9c:86:5d:0b:f9:f7:1f:ab:63:6c:55:
76:9b:36:25:1e:4e:58:a1:70:9f:67:f1:0b:41:c6:28:e4:0e:
09:78:7a:84:2c:46:ca:6a:ba:90:78:48:b3:48:9a:1e:77:19:
a4:7b:6b:20:ee:ea:a4:4e:e3:a6:d7:ec:b0:2b:08:27:00:bb:
6d:b5:6c:f6:b6:79:b1:08:f5:37:35:3e:a6:21:57:49:b1:0f:
13:60:00:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 17 23:32:56 2026 by rpki-client