
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/77d27394-8086-304a-bdc4-7aa129f0b398.roa
File: 77d27394-8086-304a-bdc4-7aa129f0b398.roa (raw, json)
Hash identifier: VuDMHdkycKXdUk1FRyCl1lmEDnZoIeL6A2/s4PqRjik=
Subject key identifier: 11:02:55:E1:A1:23:94:12:80:73:1A:50:26:7C:9F:29:F3:04:00:50
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328584D27AA8EC5C52E1C09F0F57EC0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/77d27394-8086-304a-bdc4-7aa129f0b398.roa
Signing time: Fri 13 Mar 2026 13:00:40 +0000
ROA not before: Fri 13 Mar 2026 13:00:40 +0000
ROA not after: Thu 11 Jun 2026 13:00:40 +0000
asID: 15169
IP address blocks: 70.32.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 19 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:27:aa:8e:c5:c5:2e:1c:09:f0:f5:7e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Mar 13 13:00:40 2026 GMT
Not After : Jun 11 13:00:40 2026 GMT
Subject: CN=c1ae9491-f97c-49ba-b7c2-5ce723abefde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:00:89:a5:9c:d3:c5:9c:aa:97:ea:a5:2c:30:
8f:1b:8a:31:2f:ea:0b:c2:d3:ea:39:7a:0b:25:2a:
ce:5c:4e:f2:89:39:1c:26:4a:49:02:3b:a0:17:e1:
5a:85:d1:2b:00:6a:90:8e:57:43:ac:9e:c8:12:4b:
c8:9c:d3:30:97:38:8e:bb:6e:a4:46:15:e8:d6:ac:
73:29:2e:54:7d:ee:4e:1d:d9:64:dd:89:17:f1:04:
e6:c5:34:cc:73:a8:e3:2e:45:5f:64:80:53:17:fe:
c3:64:27:8b:3a:84:48:9c:e3:d6:c5:15:c4:b5:3b:
57:81:07:41:ab:0f:fa:40:54:4d:8c:1a:19:fc:25:
53:e4:5c:c9:1d:a2:09:7b:b9:40:bc:b6:64:b9:8c:
2d:62:77:7d:a5:39:86:aa:fc:2a:23:3f:25:95:ce:
08:6c:65:45:e5:a2:19:7b:e8:61:f7:c4:99:78:5b:
6b:e4:da:09:29:fd:1d:33:2b:88:11:85:62:39:1e:
1c:32:56:65:92:89:73:d9:b8:a5:c1:b6:18:45:0a:
96:30:87:46:55:4a:bd:a5:07:97:50:07:b8:36:34:
6f:46:46:ce:66:c3:78:61:62:3a:dd:5f:a3:8e:3c:
2a:df:74:40:1a:4d:cb:c0:cb:bf:b8:c0:a2:b8:a3:
33:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:02:55:E1:A1:23:94:12:80:73:1A:50:26:7C:9F:29:F3:04:00:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/77d27394-8086-304a-bdc4-7aa129f0b398.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
70.32.149.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b1:db:a5:47:57:3a:34:18:10:38:b9:80:e4:45:e2:a5:a8:ec:
0a:41:06:6a:9b:6b:34:10:d8:d3:83:b2:a9:07:ae:1e:36:1f:
be:ac:55:54:de:98:cf:9a:89:27:bf:b3:e3:7f:49:56:a3:12:
1a:d5:02:90:82:7a:8c:9e:da:fc:8a:e3:32:3a:90:1e:67:f6:
ac:5c:43:3e:1d:34:44:87:56:91:eb:35:0d:a4:2b:ac:2d:13:
58:d0:bf:b7:6a:03:c6:e1:6d:9f:84:f0:bc:11:49:41:d0:80:
7a:be:fe:0a:97:09:49:69:32:37:36:af:21:37:95:b4:a5:db:
02:88:9a:c1:5b:9f:ef:41:8f:94:0d:66:3b:89:b0:83:df:98:
d5:43:aa:1b:2c:44:da:68:55:ec:5c:ab:ca:31:99:d2:40:b1:
7a:92:a0:43:a4:4f:9e:cd:ef:b3:7e:fa:31:3b:87:91:18:a4:
bc:3a:f3:c0:21:03:e4:aa:c9:09:99:5f:82:18:4d:9f:b2:67:
96:05:bb:c5:ba:b4:2e:14:ec:07:e0:92:4f:51:52:fd:8b:a4:
e3:ca:a7:15:7f:91:40:e6:63:97:9a:e4:2f:a7:f7:4c:92:60:
c7:4f:6f:4a:aa:fd:73:73:4a:34:44:56:bc:05:62:6f:72:d4:
09:32:c2:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 18 20:31:58 2026 by rpki-client