
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/c54223f6-3607-352e-8d03-6529dcae3ba8.roa
File: c54223f6-3607-352e-8d03-6529dcae3ba8.roa (raw, json)
Hash identifier: rZqhkcSZP64EkR6fUitHyEYElT5mjcqFLHscE6OfJDM=
Subject key identifier: E3:1E:1B:B7:A0:95:0E:C0:C6:AA:2F:2A:60:26:78:B6:36:26:BD:FA
Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial: 010D0C9F4328584D703FE6C6B98AE20DADC74280
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/c54223f6-3607-352e-8d03-6529dcae3ba8.roa
Signing time: Wed 08 Apr 2026 13:00:33 +0000
ROA not before: Wed 08 Apr 2026 13:00:33 +0000
ROA not after: Tue 07 Jul 2026 13:00:33 +0000
asID: 174
IP address blocks: 67.159.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 14 Apr 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:70:3f:e6:c6:b9:8a:e2:0d:ad:c7:42:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
Validity
Not Before: Apr 8 13:00:33 2026 GMT
Not After : Jul 7 13:00:33 2026 GMT
Subject: CN=20d5f50c-cd2f-41ef-89c7-4e5cb7467663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a4:f9:46:5c:0f:69:da:c4:90:1b:17:87:14:
b9:95:46:96:2b:af:6e:eb:6d:86:e8:2b:65:1d:64:
35:35:a1:da:70:b4:9f:d8:e1:73:14:dc:ac:02:14:
7a:8f:e7:eb:bd:34:51:39:28:f9:a2:4e:2f:87:86:
bb:d5:df:37:c2:8e:3e:1f:0e:37:81:35:19:82:c5:
a5:91:e8:e6:37:41:65:b0:22:a2:ac:84:bc:6a:f5:
22:47:ae:02:08:a3:4f:43:b7:a1:bd:93:59:63:58:
57:be:f2:2c:18:db:7e:c8:16:41:88:92:f7:52:3a:
12:60:3d:ec:15:d8:24:55:b9:19:b9:41:b4:2d:26:
e8:87:ec:4f:31:70:02:52:a3:fa:4d:0b:ab:21:c2:
b7:4a:26:0e:1c:3f:ba:88:d2:85:03:ae:3f:a4:3f:
fa:ba:9a:9c:54:d0:4d:d2:84:34:56:43:1c:74:d7:
d2:f6:49:ac:e1:06:d9:0a:20:1e:e0:b6:90:88:3d:
54:8c:9a:7d:ef:c1:3e:a7:ce:b9:cc:00:3e:f5:04:
a4:15:e4:e1:53:5b:b6:28:74:0c:5f:cc:e1:81:28:
ee:e1:a1:20:60:1a:be:fa:34:3a:7f:df:45:52:0d:
11:d7:1a:ee:9d:38:03:4e:0c:18:6a:db:7d:d3:b7:
c4:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:1E:1B:B7:A0:95:0E:C0:C6:AA:2F:2A:60:26:78:B6:36:26:BD:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/c54223f6-3607-352e-8d03-6529dcae3ba8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
X509v3 Authority Key Identifier:
keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
sbgp-ipAddrBlock: critical
IPv4:
67.159.18.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:9a:3c:65:cf:d1:10:8d:1e:ea:13:37:90:3e:83:06:32:3c:
c7:89:3a:1c:78:9c:78:77:44:ee:92:59:8d:6b:4c:54:07:36:
92:56:d5:b9:50:19:ff:59:a1:13:62:d3:62:01:71:92:c5:d4:
81:ab:5f:09:c0:33:28:73:aa:b8:ad:3f:f2:6b:dd:1f:b6:17:
19:ed:3b:72:f8:73:11:10:4f:d8:df:86:19:95:88:74:3c:69:
57:2d:1c:96:3b:ae:80:2b:4e:7a:ac:12:e6:29:07:9d:1f:67:
39:6c:59:f3:52:f9:9e:6b:1b:ec:5a:e2:b7:a8:f1:43:2e:3a:
33:7e:a3:cc:21:76:ee:0a:99:af:f8:89:42:7c:36:a9:55:1a:
c2:43:06:ae:e6:97:5e:ec:61:2a:03:31:ac:37:67:3e:0c:83:
f8:9a:d8:90:61:c4:6e:8c:6c:3b:6d:34:b6:1a:71:40:a1:03:
eb:02:23:1b:ac:f6:50:ad:df:64:ca:6a:07:87:1b:52:32:2b:
a9:8c:6a:7c:3f:6b:7d:31:b2:80:90:b4:aa:9a:83:3c:83:4c:
4d:9a:08:bc:53:c0:50:71:23:94:dd:c0:05:bf:3c:7a:31:38:
4f:19:3a:93:50:6c:25:e9:24:71:b1:49:47:42:d4:53:cb:b3:
eb:27:b1:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 06:50:28 2026 by rpki-client