
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/2eef4e43-a7e4-38c3-9a41-7d896c9f68b4.roa
File: 2eef4e43-a7e4-38c3-9a41-7d896c9f68b4.roa (raw, json)
Hash identifier: OPu/0ksxD572dliatAsn5EBXqxakyKpDLKKdo1IIPyI=
Subject key identifier: 5D:0B:C9:A8:B3:5C:98:BD:F2:DA:D0:5C:99:83:1F:44:A9:F3:09:2E
Certificate issuer: /CN=614c4e09-0317-4410-a7a2-52c308a201b1
Certificate serial: 010D0C9F4328584E0435EF4A3FE64EC2A8C47480
Authority key identifier: 7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/2eef4e43-a7e4-38c3-9a41-7d896c9f68b4.roa
Signing time: Sun 31 May 2026 13:00:10 +0000
ROA not before: Sun 31 May 2026 13:00:10 +0000
ROA not after: Sat 29 Aug 2026 13:00:10 +0000
asID: 9009
IP address blocks: 168.91.72.0/24 maxlen: 24
168.91.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 04 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:04:35:ef:4a:3f:e6:4e:c2:a8:c4:74:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=614c4e09-0317-4410-a7a2-52c308a201b1
Validity
Not Before: May 31 13:00:10 2026 GMT
Not After : Aug 29 13:00:10 2026 GMT
Subject: CN=846f1d8c-0c78-4961-8286-fd0ea6c5fdfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:74:09:0e:36:b3:78:a9:31:35:39:5f:14:88:
38:f7:18:b6:e9:81:c8:d0:15:c0:8b:11:30:7e:62:
e3:24:f1:4b:f7:7d:15:65:2f:70:24:ff:da:a4:d7:
a4:3c:dd:ba:b7:32:94:5d:f4:a6:11:93:e8:84:10:
42:b3:3c:df:9a:89:f5:ff:61:b8:37:32:40:22:0e:
ba:ed:f7:61:57:65:c8:10:03:17:2d:44:20:4f:4c:
e3:85:b3:83:fd:18:3b:e0:54:8b:4e:83:bc:f8:14:
1f:a3:5b:2a:46:d3:c9:cc:79:29:05:13:6f:fe:d9:
d4:9a:93:ca:2c:c9:4c:de:65:bf:4f:ee:03:61:84:
17:0c:70:c2:16:0f:04:59:e6:65:ee:57:ad:43:13:
9c:9b:c2:56:8b:ef:cc:64:6b:cf:fd:fa:ab:88:70:
1e:7c:5a:ec:ff:35:01:fa:2b:9a:3a:b9:43:c6:c1:
a7:d2:82:c2:4a:9e:c4:a2:b2:28:12:76:05:c5:e9:
6f:30:93:43:b1:b7:f0:e4:dc:44:d2:2e:35:13:65:
b3:77:2a:bb:63:24:af:ac:33:df:56:99:a7:27:8a:
45:ad:b5:57:0b:05:06:8a:c8:c6:67:a3:43:13:bf:
d6:ef:81:ef:29:08:a4:36:43:64:1b:b8:0c:6d:bd:
27:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:0B:C9:A8:B3:5C:98:BD:F2:DA:D0:5C:99:83:1F:44:A9:F3:09:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/2eef4e43-a7e4-38c3-9a41-7d896c9f68b4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1/614c4e09-0317-4410-a7a2-52c308a201b1.crl
X509v3 Authority Key Identifier:
keyid:7A:B9:75:05:9B:0D:A2:C5:EE:F6:E3:DC:CF:FA:72:F2:57:97:ED:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/614c4e09-0317-4410-a7a2-52c308a201b1.cer
sbgp-ipAddrBlock: critical
IPv4:
168.91.72.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:bb:c1:fb:a8:2d:eb:3c:d2:d5:9e:22:5b:69:5e:cb:85:67:
08:18:bb:a2:79:27:44:c0:a0:05:e6:a6:74:69:7f:1e:df:54:
48:c7:da:c4:42:47:ab:a7:6a:4d:54:48:e5:b1:56:57:b8:86:
d9:5e:da:32:cb:e0:74:bb:4e:b2:c4:58:16:dc:8d:dc:97:56:
a3:11:6c:61:c1:e1:37:09:a8:a0:50:e8:a4:94:9e:77:e2:be:
93:8b:fc:91:3d:15:4b:d3:99:92:c6:fb:cd:7d:e3:28:8e:bb:
db:b5:12:e1:b5:5a:73:22:c4:23:c8:5a:41:b6:9b:a7:72:3d:
cd:a7:1e:ec:72:af:11:07:f9:b9:30:86:e5:8c:60:4f:6f:6e:
b2:f0:bf:7a:bf:3e:42:fc:af:4e:62:29:4e:74:2a:a2:95:5a:
99:1d:e8:2d:82:e0:fc:83:92:92:13:e1:d9:70:91:3b:19:27:
9e:02:2d:02:46:12:0a:a7:cf:d5:98:9b:16:65:21:8b:0f:7b:
32:d9:d5:ec:16:12:00:2a:e0:d0:88:8a:74:d0:92:2f:4d:9c:
ff:08:a5:87:56:e7:50:3a:e2:92:ad:73:4a:39:a7:fc:d5:9d:
23:21:d9:af:93:38:a6:ef:77:f1:56:d8:a2:18:98:58:08:99:
1b:63:b3:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 08:32:23 2026 by rpki-client