
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b5cc6610-beaf-3d52-a794-3dc457ee6cec.roa
File: b5cc6610-beaf-3d52-a794-3dc457ee6cec.roa (raw, json)
Hash identifier: nwBRLbrGTdLUZiHeGX7m/V/9KJb940/jrfqCsRSK1SM=
Subject key identifier: D0:3D:94:4B:7C:5C:DF:E2:45:1C:46:8C:F2:18:D1:45:24:81:1B:D2
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328584D27AAAB8A3E572D3F7ADBF100
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b5cc6610-beaf-3d52-a794-3dc457ee6cec.roa
Signing time: Fri 13 Mar 2026 13:00:40 +0000
ROA not before: Fri 13 Mar 2026 13:00:40 +0000
ROA not after: Thu 11 Jun 2026 13:00:40 +0000
asID: 15169
IP address blocks: 70.32.140.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 19 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:27:aa:ab:8a:3e:57:2d:3f:7a:db:f1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Mar 13 13:00:40 2026 GMT
Not After : Jun 11 13:00:40 2026 GMT
Subject: CN=1d9f952e-2a54-4cbe-93ec-ae8bc5a9c9ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:02:e9:97:92:7e:61:52:28:ca:fa:f0:41:10:
0c:69:6d:9c:5b:60:35:19:53:aa:69:74:46:75:ca:
09:3e:f4:39:43:36:5c:de:53:7f:64:77:7c:fa:37:
e4:3c:33:e4:d8:e2:1c:41:66:6d:6f:4b:c4:4b:10:
89:1f:ae:cd:85:30:fb:07:6d:2e:fd:52:95:65:b3:
f4:fc:23:aa:61:24:97:5d:5b:3f:7c:00:15:30:df:
0c:9f:61:3d:c9:1c:b0:c8:a5:a3:d4:89:ad:76:8e:
7b:4c:22:e8:91:39:65:0a:89:80:e3:c0:5c:b1:08:
9c:a8:a3:38:ea:92:45:00:b6:2c:bf:c9:49:21:f4:
85:c0:9c:9c:71:d3:43:4f:36:64:56:b7:63:6f:26:
81:0d:ff:cc:74:f8:30:49:7a:8c:22:81:71:a7:80:
16:37:fe:49:3e:93:55:14:ce:ea:71:3e:7f:c1:5d:
ce:80:89:bf:c6:49:0b:43:08:be:95:bb:39:f0:b5:
2c:a0:a1:8a:03:3e:0e:ae:cb:44:ab:60:54:e2:40:
91:2a:3a:44:e7:56:a0:0c:a4:04:71:a4:66:40:4a:
62:17:1d:d4:5e:b9:84:e5:1c:b9:61:37:b9:70:f7:
1d:cd:23:88:fa:18:d6:fa:8a:c1:4f:3b:31:0d:b1:
ff:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:3D:94:4B:7C:5C:DF:E2:45:1C:46:8C:F2:18:D1:45:24:81:1B:D2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b5cc6610-beaf-3d52-a794-3dc457ee6cec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
70.32.140.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:e2:3f:78:f4:f2:2f:20:f9:69:f6:a1:f9:bd:11:71:9d:d0:
a7:7a:ba:dc:08:e0:94:cb:b1:40:20:75:b3:a7:1e:e6:25:23:
c6:e7:72:0f:c9:ff:19:db:e0:90:70:da:21:53:ee:61:76:ae:
62:32:cb:a4:85:c3:24:a3:e7:3b:79:4c:ed:c7:d4:c5:04:b5:
ad:5b:f8:4b:a1:9b:c1:31:58:10:29:8d:5d:55:f1:a0:52:2b:
4b:0a:48:2d:4b:a0:3d:90:fd:40:cc:76:1a:1e:04:89:c0:fd:
65:79:6b:07:67:f7:75:ea:a0:2d:3a:db:e2:81:8e:4e:03:d0:
e2:96:99:56:82:6d:c6:9b:6f:e4:ab:cd:a6:47:a2:9d:26:e0:
bd:a9:ab:17:70:82:e4:5a:2a:df:6f:df:bd:19:2e:76:e1:9e:
dc:a1:b3:84:75:22:93:65:0c:9a:a6:55:8c:85:4f:db:07:b2:
e7:f4:19:36:77:7a:d1:1d:cd:6c:ab:e4:b3:b9:ec:53:91:93:
ca:66:b9:77:bd:a7:cf:f8:0b:59:0b:4c:db:12:20:e9:61:19:
8d:83:8e:bf:07:13:17:16:22:a0:f4:11:aa:c7:9e:65:f4:0c:
cf:48:22:47:94:db:4d:b6:e3:62:94:7f:b1:e4:2e:04:15:71:
0b:15:87:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 18 20:31:11 2026 by rpki-client