
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dd8e5c92-820a-3d00-9890-40b0efb85734.roa
File: dd8e5c92-820a-3d00-9890-40b0efb85734.roa (raw, json)
Hash identifier: LvovrTvfZPRyB9/n/HpXx3PuontVWgTGAssyR3N8fKo=
Subject key identifier: 58:49:37:B5:02:38:50:8C:D3:D7:91:FA:65:F8:2E:BD:01:B0:BE:78
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328584D27AA4B230BB62D8583B569B0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dd8e5c92-820a-3d00-9890-40b0efb85734.roa
Signing time: Fri 13 Mar 2026 13:00:40 +0000
ROA not before: Fri 13 Mar 2026 13:00:40 +0000
ROA not after: Thu 11 Jun 2026 13:00:40 +0000
asID: 15169
IP address blocks: 70.32.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 19 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:27:aa:4b:23:0b:b6:2d:85:83:b5:69:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Mar 13 13:00:40 2026 GMT
Not After : Jun 11 13:00:40 2026 GMT
Subject: CN=1309a9ba-91be-4357-bd01-022b1fae73d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:23:bc:d5:7e:70:a6:7d:d0:d7:51:60:22:44:
7e:7d:d6:eb:2f:7e:1c:45:6d:5f:8b:36:39:62:fd:
a8:fe:99:8f:62:1b:34:fc:e1:46:b4:42:e0:f6:7d:
c4:3f:10:32:16:c1:a1:16:b4:4b:fb:cd:ba:52:b2:
d7:64:bd:63:b7:e6:f7:f0:91:28:1e:50:37:ee:91:
7b:15:f7:5e:c3:da:63:94:63:88:a5:8c:19:da:6c:
b3:13:f9:c8:4a:8d:18:1a:e6:d6:62:89:c9:6d:cd:
e1:32:c6:81:88:f1:66:e4:e2:62:5e:4e:ae:04:bd:
fa:99:a5:f4:1f:6e:85:ed:5c:b9:c4:23:0c:e8:ca:
07:e0:f9:e1:8a:d5:d3:6e:e9:77:40:2a:80:d3:0f:
98:fa:81:93:8a:8a:1b:00:6e:45:57:33:bd:13:b3:
a5:8b:10:0d:9c:8a:53:d8:d5:17:7a:5c:c2:db:c3:
c1:a8:fc:8d:5b:61:0a:a5:74:5b:44:c0:da:91:7e:
b6:1c:6b:96:d4:c2:a3:31:06:8d:58:07:22:66:af:
af:eb:2f:f8:11:f7:08:61:b4:6b:48:b3:ab:88:cf:
71:e2:62:87:09:96:bb:20:d1:a0:63:cc:62:20:76:
f0:24:4f:13:ac:b3:79:9f:29:10:30:96:bd:e0:5c:
87:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:49:37:B5:02:38:50:8C:D3:D7:91:FA:65:F8:2E:BD:01:B0:BE:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dd8e5c92-820a-3d00-9890-40b0efb85734.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
70.32.147.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:e2:72:ff:7a:db:57:da:25:2a:db:0d:1c:67:e4:1c:ce:da:
69:63:2b:3e:29:c5:19:3b:2b:3c:de:d5:7b:cf:bd:66:12:02:
14:28:a8:80:d2:53:8e:35:c2:83:21:4d:dd:57:34:14:06:14:
ae:ba:b2:48:38:42:f1:70:74:af:3e:ac:1e:54:a7:00:3e:4f:
a0:d6:22:b0:e8:93:8d:a3:55:24:7e:6f:e1:4c:92:96:11:de:
e8:14:3f:18:43:9a:12:1c:9e:ee:0a:f0:4d:07:06:91:5b:6a:
77:9c:1d:95:8e:fb:5d:11:b9:58:52:b8:01:41:c0:35:95:4a:
77:d1:d9:dd:40:66:07:5e:21:05:87:f3:71:20:f8:dd:5c:a5:
d3:be:31:5c:a2:4a:70:94:d2:09:e8:91:9c:0a:0f:7e:dc:4f:
48:92:fa:e5:d4:1d:2e:ac:0c:48:36:ab:52:11:0b:2b:37:df:
6e:83:4b:e2:d5:4d:02:3f:b9:67:74:6e:f2:54:94:89:50:e0:
e3:39:62:2f:fc:4e:cc:6d:0c:fc:fe:42:f2:73:ff:53:16:98:
52:a7:f7:f6:73:c2:ff:c5:6a:ec:ed:1c:3e:88:98:bb:fb:31:
4d:6c:45:05:18:3a:bc:f4:37:1c:77:52:fb:5c:e5:1e:8d:07:
c6:04:b1:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 18 20:33:12 2026 by rpki-client