
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/09cf3890-b900-31e1-92b8-99764c525989.roa
File: 09cf3890-b900-31e1-92b8-99764c525989.roa (raw, json)
Hash identifier: n1brzRpd3mlx/6gu+JpU/LJrYZPhZ5y98AZkn673enY=
Subject key identifier: 76:F3:54:C4:00:CA:12:86:CF:52:C7:15:99:EB:DD:B6:E7:50:F6:95
Certificate issuer: /CN=c705fdf0-e483-49d9-8713-1cc6aa85db55
Certificate serial: 010D0C9F4328584D1B19EBD2E359E32D1FF04E80
Authority key identifier: 6B:BD:0D:B9:57:C0:29:F4:7A:DA:24:0D:A3:07:FC:F9:C2:AC:07:B0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/09cf3890-b900-31e1-92b8-99764c525989.roa
Signing time: Mon 09 Mar 2026 01:00:32 +0000
ROA not before: Mon 09 Mar 2026 01:00:32 +0000
ROA not after: Sun 07 Jun 2026 01:00:32 +0000
asID: 16509
IP address blocks: 148.59.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/c705fdf0-e483-49d9-8713-1cc6aa85db55.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/c705fdf0-e483-49d9-8713-1cc6aa85db55.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 20 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:1b:19:eb:d2:e3:59:e3:2d:1f:f0:4e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c705fdf0-e483-49d9-8713-1cc6aa85db55
Validity
Not Before: Mar 9 01:00:32 2026 GMT
Not After : Jun 7 01:00:32 2026 GMT
Subject: CN=324f00c9-636d-4369-be07-0c4714a21286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:63:56:ab:1a:2e:6a:fa:83:59:50:df:05:7f:
30:16:fa:f6:ab:4e:10:14:d9:54:7c:71:f8:91:f8:
10:03:0c:f2:05:63:11:45:17:f1:53:5e:12:52:3d:
32:30:27:7c:07:88:af:a1:91:89:cb:d3:88:c3:4f:
3c:e5:96:80:7c:d3:84:fb:8e:d7:c9:4e:7c:90:fa:
94:57:45:00:7a:d8:71:3a:5e:ad:6e:d6:cc:f9:c1:
cd:8d:31:ac:9f:75:e5:5f:93:36:eb:63:44:d6:8b:
9e:4b:80:4e:8a:91:d9:7a:03:98:62:70:63:d1:79:
b7:ce:aa:6c:89:12:cb:43:d8:c8:4d:54:d6:3a:a1:
3a:80:24:29:df:67:35:fd:9c:33:e3:6d:ed:ae:ed:
56:1f:e5:f5:90:0b:c2:b1:90:f4:7e:ac:65:a4:f0:
63:23:ed:2c:20:d1:ea:3b:66:57:f3:2c:a6:1e:87:
d2:40:f1:90:a7:c1:06:27:ea:67:d0:a8:cd:ef:6d:
96:3a:34:63:ac:8b:9c:9b:54:19:8e:01:d5:7b:80:
6b:33:b4:db:bb:ff:85:a1:b2:dc:b1:27:b9:e8:6c:
ac:87:c2:ba:8e:aa:0b:0e:e3:38:dc:37:0a:69:0e:
ba:f1:67:d4:56:dc:d9:34:b6:e5:6e:77:3b:bc:48:
c3:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:F3:54:C4:00:CA:12:86:CF:52:C7:15:99:EB:DD:B6:E7:50:F6:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/09cf3890-b900-31e1-92b8-99764c525989.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55/c705fdf0-e483-49d9-8713-1cc6aa85db55.crl
X509v3 Authority Key Identifier:
keyid:6B:BD:0D:B9:57:C0:29:F4:7A:DA:24:0D:A3:07:FC:F9:C2:AC:07:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c705fdf0-e483-49d9-8713-1cc6aa85db55.cer
sbgp-ipAddrBlock: critical
IPv4:
148.59.102.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:11:f7:2f:ca:b9:15:72:7d:b5:ab:c1:ed:17:96:e8:93:c4:
c8:0e:23:4c:2d:f5:b1:31:46:ee:ee:cb:aa:61:ee:b7:9c:41:
3d:aa:02:a5:21:b2:dc:14:ed:1f:75:69:09:08:9f:e4:34:5f:
d4:53:05:1a:f6:d3:7a:14:3f:3f:fc:78:ce:8a:2f:09:8c:5b:
32:f0:07:7f:bf:26:1c:16:a7:2d:33:da:8e:1d:09:67:47:5f:
77:f0:59:31:95:de:13:c8:4a:d2:8c:be:8c:89:6b:11:f8:35:
06:4e:19:b8:05:90:be:19:24:14:24:b4:f3:ff:c7:ab:aa:4c:
f6:77:36:48:0d:29:10:5b:c0:ab:db:6b:66:06:4b:5a:a6:d3:
e3:b3:47:92:44:47:08:a9:f7:64:bc:6e:09:db:a2:fb:d7:2e:
5a:ea:c5:6a:ef:45:0b:82:a1:89:14:03:38:31:80:2a:d1:3d:
6f:ed:a4:89:31:f6:91:24:37:4f:55:ae:d0:43:8d:65:44:bb:
04:74:92:cb:64:0d:ca:1c:73:1d:ee:85:cf:b5:2b:75:a2:68:
64:74:59:d6:2c:2f:50:ce:7b:97:b8:31:f1:51:fe:1d:7c:c8:
f3:cd:e1:26:fa:01:8e:68:a6:f7:4d:88:ef:ec:fb:4a:46:f8:
91:87:2d:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 12:33:15 2026 by rpki-client