
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1e0bd8d8-49a3-3e1a-af69-372caea599f4.roa
File: 1e0bd8d8-49a3-3e1a-af69-372caea599f4.roa (raw, json)
Hash identifier: ZNpvQuwzWySHbsp0WJ7b3W3cEyRgY4TzrPT2QOJ9O98=
Subject key identifier: 8D:C9:BE:0C:5D:CE:8D:8C:DA:87:18:9F:6D:18:0C:9A:17:B1:E5:7D
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584E46BF262D2FEC00B86290E100
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1e0bd8d8-49a3-3e1a-af69-372caea599f4.roa
Signing time: Wed 24 Jun 2026 09:00:12 +0000
ROA not before: Wed 24 Jun 2026 09:00:12 +0000
ROA not after: Tue 22 Sep 2026 09:00:12 +0000
asID: 32787
IP address blocks: 72.52.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 23 Jul 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:46:bf:26:2d:2f:ec:00:b8:62:90:e1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jun 24 09:00:12 2026 GMT
Not After : Sep 22 09:00:12 2026 GMT
Subject: CN=0c6150f5-a65b-4997-b064-5bf86904e56c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:4a:17:b1:a0:cc:9c:c7:8c:5e:30:00:9c:59:
5c:06:38:2b:85:61:7e:45:0c:05:c2:df:eb:0d:88:
e5:7e:a5:2d:b3:39:c1:a5:a2:2c:ae:e8:1e:04:22:
ef:d7:d6:de:28:96:dd:34:a3:f1:ed:97:07:6a:f0:
d8:1f:9b:a7:80:8b:07:b2:bd:0f:aa:49:59:2e:f9:
b5:bd:27:25:5e:47:34:00:17:87:96:f1:a8:77:5d:
7c:59:ba:1a:f6:19:6e:cf:33:4f:ad:31:9f:22:37:
18:ba:70:11:98:90:f9:10:5b:af:d5:6a:71:96:92:
53:0c:06:12:a4:b6:a4:5d:cc:a3:6f:36:b9:28:d0:
e6:3d:5d:2e:4c:1e:f2:24:50:36:0d:49:6d:8d:28:
88:fa:32:87:d9:90:e6:8f:40:6e:3b:c8:c9:a3:16:
17:03:6e:7e:5c:07:f0:7b:3c:da:a0:e8:b6:17:f0:
ea:ef:0e:82:5b:78:7c:36:1f:7b:7e:78:42:f9:9f:
f6:6f:af:89:a9:82:9b:7a:96:ca:67:ae:e9:5c:58:
fd:c2:f3:36:43:bd:97:f0:2b:6d:13:78:2e:1e:86:
4a:b6:35:09:32:fa:2e:44:35:23:b1:93:e1:d1:77:
ce:f6:d4:f3:e1:e7:4f:08:b0:85:e3:10:67:27:d7:
76:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:C9:BE:0C:5D:CE:8D:8C:DA:87:18:9F:6D:18:0C:9A:17:B1:E5:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1e0bd8d8-49a3-3e1a-af69-372caea599f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
72.52.32.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:48:a4:e3:69:16:49:40:2f:34:65:b1:6d:81:e8:4a:0f:ce:
d3:d1:04:09:84:bf:aa:0a:01:a8:ee:fa:31:6a:57:33:a7:9d:
8a:f4:48:ec:2c:68:49:e5:eb:36:f8:0e:14:a3:6d:dd:b4:35:
78:45:80:04:b5:72:44:ac:dc:5c:29:64:b3:eb:45:2d:5a:b2:
f2:12:8f:7b:08:f8:d0:ab:aa:e1:68:67:d2:17:c5:33:ea:5f:
66:29:58:88:1f:85:2a:12:4e:ce:1b:72:95:0f:1a:d8:38:c7:
57:30:40:0a:2e:45:0d:d3:a3:4a:b1:c0:30:f0:67:35:a3:a0:
a9:20:98:b7:91:b7:81:81:6b:1c:01:0f:88:f2:82:a3:df:46:
9e:99:94:4a:f2:18:3e:8a:2e:2f:43:5b:b8:59:df:ab:76:b4:
f0:47:f0:05:48:47:59:fe:e5:40:c4:29:8b:2e:df:49:24:0d:
47:29:15:06:a5:c1:c9:b9:b2:80:80:0f:02:a0:c0:2f:9c:2c:
76:6c:5c:5e:c1:22:e2:35:c4:0f:56:8e:ef:74:a3:29:04:d6:
02:d3:eb:0b:99:1c:ee:c0:52:a1:b9:70:eb:92:45:86:f5:b0:
ba:7d:1f:71:e4:9e:63:46:c7:f9:72:47:bc:11:31:6a:60:55:
6b:73:94:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 21:12:34 2026 by rpki-client