
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/e758c838-396f-35ba-a101-80b22009c45b.roa
File: e758c838-396f-35ba-a101-80b22009c45b.roa (raw, json)
Hash identifier: 6UDO4XRFig+pFfCStYdPcckKKzq/DklTRfnRq/A8RkM=
Subject key identifier: F0:E6:94:0B:8E:34:48:DA:66:0B:FD:60:DB:40:71:22:8A:C6:B6:44
Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial: 010D0C9F4328584E0005E96EB0A7A7A06168C580
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/e758c838-396f-35ba-a101-80b22009c45b.roa
Signing time: Sat 30 May 2026 01:00:10 +0000
ROA not before: Sat 30 May 2026 01:00:10 +0000
ROA not after: Fri 28 Aug 2026 01:00:10 +0000
asID: 174
IP address blocks: 67.159.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Jun 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:00:05:e9:6e:b0:a7:a7:a0:61:68:c5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
Validity
Not Before: May 30 01:00:10 2026 GMT
Not After : Aug 28 01:00:10 2026 GMT
Subject: CN=1e0805dc-17ee-4306-b519-174279c05aec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:16:a1:a8:2d:72:c6:25:db:f2:9c:05:1e:bf:
a9:02:02:50:d5:75:d4:0f:f0:9a:1c:10:fe:cc:75:
f2:3b:2d:a1:d6:4e:25:23:dd:54:d7:4c:76:7e:16:
c8:0f:ea:f6:cc:4c:d3:c6:13:59:83:11:c1:c7:de:
9e:f7:df:c6:b3:3b:62:38:b0:8b:80:3b:a6:b8:d3:
6d:70:bd:5d:12:ff:e8:76:19:22:91:d1:b3:e5:cf:
1f:ab:df:83:be:74:76:82:cf:34:b5:c3:be:d6:e0:
c5:cb:b9:c4:74:a2:f2:30:4a:ed:43:b4:dd:f1:94:
c6:a7:a0:a7:57:a7:0b:4d:5b:53:8c:a6:88:e0:01:
76:6b:d6:4c:84:d3:14:3d:9f:14:80:ef:66:7c:e2:
d5:04:1a:3a:7f:d6:56:3e:ab:3f:36:9d:2e:21:c5:
a8:e0:4f:55:cf:2f:50:c4:1b:19:d5:c1:43:ea:3b:
f6:ee:1f:a8:d9:48:6e:e4:24:ee:04:09:e0:01:6b:
85:07:fa:ad:5d:33:c5:30:1f:d7:db:09:08:76:1c:
a8:a3:6a:49:6b:14:43:22:14:2f:5f:cd:10:87:26:
4e:f3:a6:49:13:78:4c:50:a2:8d:e8:b5:cb:5b:67:
82:52:c9:fe:7b:af:bd:5e:42:08:88:b6:31:4c:cf:
f5:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:E6:94:0B:8E:34:48:DA:66:0B:FD:60:DB:40:71:22:8A:C6:B6:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/e758c838-396f-35ba-a101-80b22009c45b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
X509v3 Authority Key Identifier:
keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
sbgp-ipAddrBlock: critical
IPv4:
67.159.16.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:e2:a9:ee:8f:e6:f9:1d:6a:48:85:97:37:5f:d5:47:28:90:
86:71:13:ee:94:d3:c0:40:cb:13:23:d4:ad:02:67:e1:6d:e0:
3e:52:ce:53:02:6c:9e:62:3b:58:f3:ad:6b:12:a5:4d:1a:10:
7d:c6:1b:3a:d8:be:4d:d2:ac:0f:07:de:72:92:a1:40:db:06:
36:f1:26:a9:87:c3:91:81:29:a3:f9:2e:b2:86:22:b3:62:a9:
d8:ac:d8:fb:39:b4:3d:5d:80:ad:dd:a8:97:aa:48:e5:39:71:
51:98:27:bc:18:84:eb:12:8f:14:49:fa:ea:19:87:66:ff:f5:
ff:00:cc:53:9a:78:ad:f8:c6:27:9b:5b:8d:10:89:0d:57:cd:
d8:ec:12:6f:6c:50:a4:0d:40:a8:35:3a:6b:cd:43:08:16:5c:
3f:71:55:b2:b5:bd:95:f5:13:95:e6:78:c4:dc:b6:cc:df:1f:
85:d4:3f:49:5b:ab:bf:47:d5:8b:0e:38:4e:b9:28:fe:14:33:
e2:19:79:64:80:76:02:ea:99:29:65:d6:d0:79:e4:05:bf:d8:
67:f9:12:7d:3b:0e:db:33:86:b8:57:2e:a8:17:07:28:e7:d2:
04:d0:77:41:ac:b3:cd:73:aa:6a:b5:ff:2e:6d:60:f8:9c:88:
23:c8:2d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 02:37:48 2026 by rpki-client