
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/a61681db-9c2d-39f4-ae56-91f2600f6136.roa
File: a61681db-9c2d-39f4-ae56-91f2600f6136.roa (raw, json)
Hash identifier: SSFfoVwNxBxTfFYAtUB8IfwCQ4m3cYfIMGa9Reuoung=
Subject key identifier: 6E:8E:42:87:14:8A:9C:0F:EC:FD:88:C1:C6:3B:38:D8:4B:EE:1F:1D
Certificate issuer: /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial: 010D0C9F4328584D1F4A0BAB9554BFD7E887B150
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/a61681db-9c2d-39f4-ae56-91f2600f6136.roa
Signing time: Tue 10 Mar 2026 13:00:41 +0000
ROA not before: Tue 10 Mar 2026 13:00:41 +0000
ROA not after: Mon 08 Jun 2026 13:00:41 +0000
asID: 262287
IP address blocks: 198.145.67.0/24 maxlen: 24
209.20.132.0/24 maxlen: 24
209.20.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 17 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:1f:4a:0b:ab:95:54:bf:d7:e8:87:b1:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Validity
Not Before: Mar 10 13:00:41 2026 GMT
Not After : Jun 8 13:00:41 2026 GMT
Subject: CN=c887d4f9-e8b0-44b0-b859-dda2c5f54de8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f8:a6:56:0b:4f:97:b0:db:2a:7a:a3:48:bf:
52:28:8c:52:23:ee:2d:45:6d:9d:50:b6:43:1c:7b:
2f:de:d9:37:b1:d8:06:2f:e0:c6:9d:cb:ed:2b:56:
ed:bb:aa:fe:93:5a:b1:01:e5:c0:12:0b:6a:3e:98:
ac:ac:56:c6:19:a0:ae:00:ec:21:77:96:4c:64:5b:
ae:2a:79:af:24:55:d1:5e:de:0c:a2:36:3e:30:05:
29:6e:81:d9:b0:36:5f:7e:a5:67:f7:5c:d5:44:c8:
ee:a6:92:e4:4e:f2:50:28:73:0c:92:70:ce:db:ec:
2b:62:de:f5:ae:88:85:f2:8c:0a:1e:e2:0f:f5:49:
c4:49:2f:95:2d:90:e6:6c:91:78:59:ef:23:dd:e8:
e7:69:ed:24:79:37:99:ce:30:66:00:b8:02:47:1e:
b5:a9:02:98:a8:24:62:88:84:a8:20:d8:12:fb:ad:
1e:46:7c:31:35:f7:31:11:f8:31:1e:b3:cf:45:bc:
e5:93:4b:dc:22:ca:80:60:b6:8f:0b:13:d9:77:34:
1d:10:b2:fb:72:64:4f:06:1a:13:a6:7d:d5:7d:de:
ec:36:d6:8e:f1:5c:ce:21:b5:6f:8f:b7:c3:b2:09:
00:86:a8:dd:63:78:8e:b4:b4:8c:97:4e:e8:f0:54:
d0:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:8E:42:87:14:8A:9C:0F:EC:FD:88:C1:C6:3B:38:D8:4B:EE:1F:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/a61681db-9c2d-39f4-ae56-91f2600f6136.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
X509v3 Authority Key Identifier:
keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
sbgp-ipAddrBlock: critical
IPv4:
198.145.67.0/24
209.20.132.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:65:38:a4:0e:ba:96:68:d0:16:12:74:ca:5c:0c:55:9b:3a:
56:a1:36:31:8a:19:1b:0b:b6:92:ac:e6:9e:1a:5b:83:6e:c7:
51:69:19:f6:4b:ae:48:cd:1b:3f:ac:a5:a3:33:21:bf:30:4a:
4e:37:de:75:2f:34:db:b4:4b:4a:fc:d9:c2:d3:02:83:3c:62:
3f:8d:3b:45:3f:41:6e:22:5a:ef:ef:29:50:c6:19:2f:b6:c8:
f8:d8:01:1a:61:22:10:fa:83:ea:c5:b2:15:9d:b7:6d:84:e6:
78:00:51:1f:75:ef:c8:86:6b:75:b5:c9:27:11:ef:1a:a1:ae:
1a:17:48:21:7d:8d:32:94:7d:45:11:d6:d5:20:93:ba:f4:0b:
58:84:fe:c2:ba:c6:87:e6:d4:37:d9:0c:a7:f2:d0:5a:60:dd:
ab:0b:79:6c:72:1d:ea:cd:80:81:6f:b9:a7:45:0e:ec:28:e3:
61:c0:18:07:12:67:6a:c8:e4:a8:91:11:9e:49:34:e2:22:75:
18:f2:86:66:40:b9:dc:93:7c:25:22:4b:08:d5:c7:b6:1b:47:
41:99:67:b4:16:2d:33:e0:7e:d5:e1:d5:db:c0:52:e4:87:f5:
98:bb:85:a9:21:59:a4:00:ea:f9:45:a0:c3:d0:99:97:2e:4c:
5d:5a:c2:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 15:49:43 2026 by rpki-client