
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/026b8b08-d03f-336f-8c9f-25cac406fa0b.roa
File: 026b8b08-d03f-336f-8c9f-25cac406fa0b.roa (raw, json)
Hash identifier: ieQGr2BB2+07WqkZH7nlqs+RcVrXenVZ/euq/e3aInY=
Subject key identifier: 36:9E:FF:35:F5:02:40:B9:6C:00:39:20:EF:55:AA:BC:30:D5:36:30
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328584D27AABA54D130096B245FDD00
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/026b8b08-d03f-336f-8c9f-25cac406fa0b.roa
Signing time: Fri 13 Mar 2026 13:00:40 +0000
ROA not before: Fri 13 Mar 2026 13:00:40 +0000
ROA not after: Thu 11 Jun 2026 13:00:40 +0000
asID: 396982
IP address blocks: 70.32.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 19 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:27:aa:ba:54:d1:30:09:6b:24:5f:dd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Mar 13 13:00:40 2026 GMT
Not After : Jun 11 13:00:40 2026 GMT
Subject: CN=fc47aa81-0302-401d-bacc-621f2a0a0c8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:50:e6:e5:41:e8:57:08:ae:d4:91:62:95:56:
46:d5:aa:e2:98:cd:99:d9:5b:62:06:ba:8e:34:50:
f5:97:39:db:0a:99:42:81:85:25:58:ab:3a:08:af:
bd:55:50:02:9c:01:8c:9b:81:b5:4d:bc:c3:ce:7a:
fe:1c:29:c7:6a:2d:77:6f:d0:c2:08:30:f9:bc:b6:
a4:65:8e:76:21:f4:54:86:a6:a7:c5:25:19:2d:c7:
bc:f1:e9:30:2e:70:db:37:9c:8c:51:e9:09:ec:bf:
7d:06:20:50:3a:0a:3e:86:ef:3f:e5:01:22:5d:eb:
2f:0a:54:53:39:ac:9f:0d:be:62:31:b0:df:a5:8e:
2d:e6:03:f4:6b:d3:21:d4:25:a5:4b:e3:3f:ed:3a:
2a:c8:ee:4f:29:d8:28:5b:e8:22:5e:38:db:e4:44:
d4:02:b7:65:db:ef:4c:95:3e:07:83:f5:c0:21:61:
fc:a8:3f:b5:e1:d6:98:0a:2f:82:79:ab:77:12:49:
5f:b1:2e:6e:84:64:e8:67:ea:a4:f8:e3:8f:3c:bb:
36:c0:a2:61:59:70:0f:90:ba:d3:f8:7e:a0:95:9d:
f0:d8:8d:2c:72:ab:a7:3b:76:5d:27:c8:f0:79:df:
8a:86:39:a4:b5:09:2d:48:4c:45:bf:52:f7:5a:b7:
d9:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:9E:FF:35:F5:02:40:B9:6C:00:39:20:EF:55:AA:BC:30:D5:36:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/026b8b08-d03f-336f-8c9f-25cac406fa0b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
70.32.156.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:2f:15:79:7a:9b:5f:c3:57:5f:84:a8:dd:e0:6a:8c:b9:d9:
50:1d:7c:57:b8:60:fb:53:0a:4a:7f:d2:a7:e9:2b:fc:d9:33:
2c:42:07:25:b6:f1:21:1f:15:e6:d1:8e:97:09:dc:a6:f6:2f:
50:6b:b3:38:65:2e:44:b1:2f:17:16:4d:85:9b:fe:b2:c6:1a:
59:f5:6b:05:a4:c6:a6:9d:3d:dd:71:ad:a7:b2:b4:0a:28:e0:
66:50:f9:4f:20:d3:04:34:f8:74:02:fe:fc:fd:7c:a8:42:35:
f3:f2:5e:7a:05:d1:5e:b1:5b:4d:02:bd:0a:df:2b:94:c2:10:
f6:6a:50:fd:45:48:8d:35:51:e1:7c:c1:23:3b:eb:2c:7f:6c:
df:8f:6d:b5:02:38:3b:7c:7d:28:6c:87:56:f6:f4:eb:6b:49:
a9:15:ef:ab:25:18:45:dd:ed:c9:27:7c:bb:09:cb:26:c0:c8:
fd:ef:b1:4b:88:fd:12:76:68:02:8a:c7:d2:06:b3:30:8d:74:
16:9d:b3:b6:8b:bb:91:85:31:b4:99:fc:f8:62:d8:cd:41:7e:
b8:b8:88:9c:6e:b4:2c:10:45:f3:eb:e7:53:7b:8e:65:76:d7:
1a:56:55:59:7c:03:b9:b3:9d:e8:0f:1c:1a:4b:aa:6f:e4:31:
2f:e9:7f:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 18 20:31:32 2026 by rpki-client