
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3da83a5f-2475-344d-bc7c-33066927f827.roa
File: 3da83a5f-2475-344d-bc7c-33066927f827.roa (raw, json)
Hash identifier: MDLBBrGKv33fox8fjWLywptaCc26oz9D9O6mus5TLS8=
Subject key identifier: 8A:63:CA:5B:17:8D:D8:06:46:B0:D8:14:68:EA:C1:10:76:18:65:6A
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328584D27AA7627DD48382D78186480
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3da83a5f-2475-344d-bc7c-33066927f827.roa
Signing time: Fri 13 Mar 2026 13:00:40 +0000
ROA not before: Fri 13 Mar 2026 13:00:40 +0000
ROA not after: Thu 11 Jun 2026 13:00:40 +0000
asID: 15169
IP address blocks: 70.32.146.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 19 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:27:aa:76:27:dd:48:38:2d:78:18:64:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Mar 13 13:00:40 2026 GMT
Not After : Jun 11 13:00:40 2026 GMT
Subject: CN=57b9784d-4809-475a-9fe0-c1b2d2ea08be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:54:cb:fd:5d:82:20:9c:4d:32:af:fa:a9:d8:
c7:94:27:91:cf:67:78:d9:ac:d9:5d:8f:ce:46:56:
86:8b:f8:18:22:a5:9d:00:fd:96:1e:01:47:24:a6:
49:91:5b:2c:c3:98:40:e7:f9:53:b1:6d:02:e3:61:
5c:f6:43:6f:54:76:56:24:36:97:a4:12:12:53:41:
e0:af:75:5f:7f:5d:d4:55:30:5e:7d:27:c5:37:71:
04:10:78:23:92:41:e1:5d:74:8d:93:3b:75:92:29:
07:fe:e5:26:95:b6:72:02:a5:cf:60:d2:9c:e0:92:
19:76:5b:62:81:34:a8:ac:a4:b7:53:b2:8b:11:51:
2b:1a:8f:0e:90:49:b2:80:a2:8e:0a:db:2c:3d:f9:
09:9a:ab:59:45:c3:0e:af:d7:ea:51:f3:b3:7a:78:
3e:59:19:aa:98:f2:50:8d:3c:c7:54:30:c1:ac:f7:
6a:a0:d2:1c:ac:73:4f:3d:68:b5:60:d5:c2:1e:6b:
69:60:26:9a:28:ee:76:50:98:1b:de:a9:a1:18:36:
d2:24:59:62:33:8f:29:d5:dd:33:5a:91:60:8a:8a:
d9:c3:cd:fc:5e:35:12:46:a8:ca:58:6d:3d:0c:6d:
cb:7e:c5:5f:13:84:2f:06:63:0c:71:f2:b5:2d:fe:
5f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:63:CA:5B:17:8D:D8:06:46:B0:D8:14:68:EA:C1:10:76:18:65:6A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3da83a5f-2475-344d-bc7c-33066927f827.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
70.32.146.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:82:32:e3:92:6a:a0:7a:eb:02:f4:4b:25:ee:06:94:21:47:
bd:b7:fd:ab:08:10:48:b2:3c:e1:83:8b:a5:79:01:a4:14:50:
53:fd:e4:6e:74:2c:1b:d5:0c:00:67:8e:53:09:72:95:34:b6:
d3:06:da:f0:91:58:36:75:58:6e:d7:ca:fe:4f:c6:f9:9e:b9:
b2:70:bd:29:54:45:89:07:26:99:d0:33:5b:c2:32:73:71:62:
1a:b3:70:2a:44:e2:28:96:36:cc:af:76:dd:f6:48:21:9b:c9:
fd:04:46:73:f3:0b:ba:ea:ed:a5:83:40:8b:e7:3a:0c:85:62:
21:5a:c9:d6:3f:7a:96:0e:3c:ed:87:9d:14:74:db:80:13:6e:
b7:81:72:d8:68:a3:6e:bc:d6:7a:1d:18:af:a2:e2:a3:d0:99:
3b:2d:af:f1:f2:b2:bd:dc:ad:c4:41:8d:99:ae:72:11:e0:41:
f9:ed:e6:11:bc:9e:6c:d4:ab:ce:aa:03:41:ad:fe:6e:c6:5d:
0a:8e:d0:45:47:08:25:40:da:57:e3:82:d7:a7:bf:26:d3:f6:
9b:6f:f6:0f:32:7a:08:53:ea:27:78:a5:11:d0:c4:97:07:b2:
d3:65:00:72:c0:cb:34:01:e9:2c:b4:d1:74:0e:71:f4:83:3c:
a1:f8:2e:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 18 20:31:47 2026 by rpki-client