
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/560f9b0f-2d95-4838-9074-cd56b1c21753/aefbd322-198b-3bb8-83c2-da9754713f29.roa
File: aefbd322-198b-3bb8-83c2-da9754713f29.roa (raw, json)
Hash identifier: 7gK+i+/aiySRDtCQb2ap51ml5wtowVKL3ElxYgFQsIk=
Subject key identifier: CC:32:C9:32:42:ED:59:BE:83:BE:AB:7D:C8:13:64:E9:E8:9E:05:BA
Certificate issuer: /CN=560f9b0f-2d95-4838-9074-cd56b1c21753
Certificate serial: 010D0C9F4328584EA7911AB7A1D941EEF551F280
Authority key identifier: AC:59:DA:A0:9C:05:E4:4D:00:21:33:E0:FD:3A:B7:CB:28:63:1D:57
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/560f9b0f-2d95-4838-9074-cd56b1c21753.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/560f9b0f-2d95-4838-9074-cd56b1c21753/aefbd322-198b-3bb8-83c2-da9754713f29.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 14618
IP address blocks: 142.249.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/560f9b0f-2d95-4838-9074-cd56b1c21753/560f9b0f-2d95-4838-9074-cd56b1c21753.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/560f9b0f-2d95-4838-9074-cd56b1c21753/560f9b0f-2d95-4838-9074-cd56b1c21753.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/560f9b0f-2d95-4838-9074-cd56b1c21753.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 23 Aug 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:91:1a:b7:a1:d9:41:ee:f5:51:f2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=560f9b0f-2d95-4838-9074-cd56b1c21753
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=0cc26d8c-4d86-4e2e-aecc-3e926985986b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:4b:f2:9b:bd:63:87:a8:b2:8c:b6:27:fe:7c:
b8:35:02:86:bc:3f:23:b8:fe:30:bd:8d:14:82:27:
a8:c9:2e:0f:f3:34:b3:56:63:6a:9c:7b:ae:58:f2:
18:83:01:ad:cc:80:c5:af:dd:83:8d:47:7c:8a:43:
4b:e5:83:fe:24:b6:d4:65:5e:30:d9:0e:8f:3c:32:
5f:25:a7:63:10:ef:28:04:00:9c:ad:b3:3a:b4:46:
e8:26:03:c5:a5:a5:ee:9d:e5:c0:f2:37:77:27:db:
9e:d4:35:8b:c6:7b:71:b2:16:58:e1:6a:5e:4a:f6:
7c:8d:12:bb:cc:dd:36:39:d0:ac:cf:a0:fa:e6:c8:
b0:7c:5d:e1:37:1f:a9:ea:bc:d1:b8:77:ab:3a:95:
f9:79:40:1a:e9:3c:f6:51:37:cd:a1:d0:57:db:74:
62:21:4b:66:ce:04:d0:00:f0:bd:0e:ec:b9:11:c4:
67:22:ba:79:1e:b4:1f:66:a6:b9:9c:c6:97:10:6e:
d3:f8:f5:6c:7d:4a:5a:ea:46:fd:c2:e1:27:77:f1:
dd:f7:03:a1:37:3d:8d:78:32:ba:d2:38:9e:0c:b1:
90:4e:8c:19:d3:2d:1f:e9:89:b7:66:d0:a7:f0:99:
26:8e:9b:c7:ff:c9:05:2a:c1:f9:d4:41:42:78:88:
fd:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:32:C9:32:42:ED:59:BE:83:BE:AB:7D:C8:13:64:E9:E8:9E:05:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/560f9b0f-2d95-4838-9074-cd56b1c21753/aefbd322-198b-3bb8-83c2-da9754713f29.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/560f9b0f-2d95-4838-9074-cd56b1c21753/560f9b0f-2d95-4838-9074-cd56b1c21753.crl
X509v3 Authority Key Identifier:
keyid:AC:59:DA:A0:9C:05:E4:4D:00:21:33:E0:FD:3A:B7:CB:28:63:1D:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/560f9b0f-2d95-4838-9074-cd56b1c21753.cer
sbgp-ipAddrBlock: critical
IPv4:
142.249.159.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:9c:ed:1b:a8:34:4f:10:23:b1:22:15:44:61:39:cc:48:7c:
02:20:f1:5c:bb:67:df:5d:bf:47:4b:a2:1e:77:6f:77:27:e8:
90:1d:44:c6:b1:e0:d9:cb:b0:a4:fe:3b:af:88:a9:a4:50:1c:
79:82:f7:8d:11:26:a3:d0:df:b9:7d:05:b2:21:b9:bb:c5:87:
29:2b:e5:68:41:e4:2a:a0:9a:a3:98:55:3a:b6:ec:64:bd:4a:
ca:fc:2f:a3:61:34:55:09:b8:da:84:9a:93:39:86:0f:3a:1c:
51:a1:f1:08:16:49:fe:11:38:c0:a7:e8:43:7b:87:6f:53:ea:
33:f7:79:a1:32:d6:27:37:d7:6f:1a:06:5f:5e:09:cc:0e:7d:
ee:23:46:a0:38:ba:c9:84:19:3e:76:c1:14:50:0c:24:c0:bc:
27:22:da:78:42:7f:fb:4b:56:65:8a:17:b6:d1:ab:3c:3e:18:
0d:44:16:de:c6:1a:79:cd:bf:8c:ad:5f:e7:9c:62:79:a6:db:
28:81:02:25:31:33:17:e4:60:62:de:4e:cc:fe:2f:f0:e1:46:
80:54:16:fb:57:7d:c6:59:cc:95:3b:4d:14:e0:7d:5d:22:be:
64:1a:ce:ad:ce:85:61:03:fd:cc:0b:6e:1c:a9:a0:74:a5:d6:
2f:62:14:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 23:38:32 2026 by rpki-client