
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/be870f6f-ec32-3ae1-b8f5-f9441a919974.roa
File: be870f6f-ec32-3ae1-b8f5-f9441a919974.roa (raw, json)
Hash identifier: Udq8Rhm7bQEJsgArUm9q7JksMkNs6VcbRj2J2YpwnoE=
Subject key identifier: D7:78:CD:30:D1:7E:43:22:D7:51:1A:37:00:39:42:E9:E1:9F:B6:13
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584E428F205826CFF56F17414A80
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/be870f6f-ec32-3ae1-b8f5-f9441a919974.roa
Signing time: Mon 22 Jun 2026 21:00:12 +0000
ROA not before: Mon 22 Jun 2026 21:00:12 +0000
ROA not after: Sun 20 Sep 2026 21:00:12 +0000
asID: 20940
IP address blocks: 184.25.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 23 Jul 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:42:8f:20:58:26:cf:f5:6f:17:41:4a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Jun 22 21:00:12 2026 GMT
Not After : Sep 20 21:00:12 2026 GMT
Subject: CN=694ada4e-bb0e-4082-9f6a-5e103ad28394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:18:80:7b:5e:35:f2:31:44:65:f5:cf:11:82:
a0:d6:3e:37:f8:7b:2c:74:17:ea:3a:cb:b0:48:00:
b1:81:f0:84:7e:e8:9a:98:3d:b6:4b:2a:b5:13:41:
d5:62:32:09:de:b8:74:55:bf:8b:06:d2:14:8e:91:
0a:c9:92:79:d7:fc:21:f9:ec:8b:36:33:3d:6a:9c:
b3:92:47:41:a6:68:d1:b0:5d:83:7a:d3:87:20:25:
28:d0:38:50:c1:da:c1:20:9e:ad:bc:f3:b7:7e:c9:
46:9a:35:92:80:03:f1:53:45:07:7b:34:b9:ea:40:
08:23:80:a2:19:a2:13:6f:9e:92:a0:81:1a:32:50:
2f:b8:ce:43:30:ae:56:9e:2b:a9:3b:59:de:1d:af:
51:28:5f:1d:eb:81:85:18:46:dc:28:67:f3:f7:7d:
8e:2c:89:34:5f:34:17:40:ee:e5:a5:3e:fb:3e:72:
b3:20:2a:27:56:fd:6c:02:9b:47:db:6d:c2:ec:41:
11:85:41:d6:2a:2d:d7:3f:9a:94:ea:d5:ce:d6:5a:
b4:76:d8:8c:54:c6:1b:d5:d9:54:a9:cb:39:3a:b9:
a9:fb:3b:f7:3e:af:c1:ae:15:18:ab:d7:e1:5f:9d:
2a:b7:51:7e:70:f5:3b:0b:0f:f6:c1:ea:e1:c9:5e:
6c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:78:CD:30:D1:7E:43:22:D7:51:1A:37:00:39:42:E9:E1:9F:B6:13
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/be870f6f-ec32-3ae1-b8f5-f9441a919974.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
184.25.156.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:97:0c:96:d8:ce:96:41:e7:c8:d3:46:b9:1b:b1:9a:c8:c8:
27:17:41:7c:93:ba:89:1a:53:9b:f7:ea:3c:22:11:f4:98:47:
b1:82:90:a3:22:9d:f7:ed:bb:56:86:ea:f4:43:5e:57:8f:14:
c2:54:dd:62:52:bd:8b:36:03:25:89:d6:1a:7a:ca:51:84:f3:
51:87:5f:1d:4f:3e:bc:18:36:07:6f:47:87:6e:ce:e0:b7:cf:
a4:e2:ea:0a:a0:99:1b:f9:e5:1f:8c:c5:1a:fe:ec:29:4a:cb:
b3:76:74:ba:1a:3b:b2:f7:d0:0a:96:ef:69:b4:c1:2c:ba:61:
a3:cf:23:c8:f9:c4:e1:a8:8c:06:a0:91:1f:8f:f7:a5:2d:4e:
dd:6b:34:a5:1b:dc:3d:2c:14:79:b7:5a:cc:67:fa:e7:31:84:
30:2f:bc:f0:81:d1:ca:d2:8d:0e:9e:58:6a:f5:5a:13:7d:09:
bd:25:47:da:d4:bb:a0:2f:45:b2:e2:a0:99:59:9e:41:14:69:
6c:9b:15:82:2d:b4:2c:03:78:71:62:99:21:41:94:ab:3f:c9:
47:22:aa:78:cc:b9:59:8c:2d:96:97:a6:9e:9a:a3:69:c4:4d:
80:ed:e6:c6:93:93:1a:42:95:0f:c9:b1:14:02:61:95:b3:75:
51:71:aa:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:55:07 2026 by rpki-client