
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0eaff69e-51ef-3ab2-a0de-bf6635cb0b36.roa
File: 0eaff69e-51ef-3ab2-a0de-bf6635cb0b36.roa (raw, json)
Hash identifier: SRtKRe3VJB/rGofBeU8EZkW0YGbld2vq8t+Rg+9ymPU=
Subject key identifier: DB:2E:5A:74:23:08:C0:87:C6:B3:4D:A8:E5:F7:62:E4:27:32:A5:60
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584EAD1C54423C457496C0C16400
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0eaff69e-51ef-3ab2-a0de-bf6635cb0b36.roa
Signing time: Fri 31 Jul 2026 01:00:11 +0000
ROA not before: Fri 31 Jul 2026 01:00:11 +0000
ROA not after: Thu 29 Oct 2026 01:00:11 +0000
asID: 14618
IP address blocks: 172.111.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 22 Aug 2026 23:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:ad:1c:54:42:3c:45:74:96:c0:c1:64:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Jul 31 01:00:11 2026 GMT
Not After : Oct 29 01:00:11 2026 GMT
Subject: CN=0acde605-f875-48de-9720-cc07cdcc9261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:91:b4:27:47:76:2f:29:75:19:c1:01:ad:4e:
f0:9f:78:5f:67:65:c6:78:5f:17:b5:14:05:77:c9:
10:9a:31:e5:a5:4d:11:cb:76:77:0c:de:58:30:99:
18:03:79:00:e9:42:64:7e:7e:70:32:e2:a2:d5:96:
08:e4:b3:f6:db:34:4e:58:52:b4:11:ef:85:70:b2:
20:04:7a:26:e7:34:de:c8:25:db:55:c5:47:a8:a6:
65:2c:81:9f:50:8a:0e:db:ef:02:7d:fe:bf:06:5e:
ae:97:2f:8d:db:86:07:c4:06:2b:77:4a:6d:e9:4c:
c4:ef:34:ef:4d:1f:ec:42:c1:96:90:34:3b:29:43:
a0:bc:3d:fc:ef:41:3d:2d:59:97:92:61:9c:aa:6a:
b5:75:e4:a1:de:7b:f5:34:67:bf:04:51:f3:b7:9b:
2b:f4:f9:34:b5:db:a0:92:c7:96:5b:6c:3e:91:d0:
6a:a9:8c:16:4c:ae:fb:3b:ef:bf:c6:b7:78:60:71:
c1:4b:5a:9c:18:a5:e9:75:b0:45:7e:a4:8b:3c:8d:
75:54:b9:61:89:e8:7b:67:68:b4:cd:6d:da:b2:70:
4e:40:41:3a:c3:97:e7:e3:65:3a:92:ae:65:8c:8e:
9a:5e:e3:c3:e5:19:3c:84:9d:8f:82:36:c1:5d:b0:
fe:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:2E:5A:74:23:08:C0:87:C6:B3:4D:A8:E5:F7:62:E4:27:32:A5:60
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/0eaff69e-51ef-3ab2-a0de-bf6635cb0b36.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.111.172.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:5d:9b:6e:fb:ff:1e:95:26:20:d5:1c:4a:7b:2a:e3:33:c4:
58:1b:81:7f:d6:c7:3c:51:48:2a:14:4f:fc:a2:7c:6f:49:45:
c2:dc:3e:4a:64:66:ca:68:87:55:ed:ed:81:5f:57:e9:17:aa:
ef:de:cc:5d:b3:d3:df:28:cb:47:db:10:84:4c:99:1b:3f:9e:
13:82:de:3e:42:69:bd:e2:7c:4d:1f:c8:c1:d8:ab:15:83:5b:
ad:e9:e2:08:8e:a9:42:07:87:d5:d3:04:c4:15:19:e2:69:8e:
09:d3:80:65:97:c7:f4:75:85:b9:be:59:42:50:cb:25:12:2b:
72:0e:2b:33:31:91:d4:0b:d3:5d:ce:66:22:37:4f:72:c7:1a:
0a:7b:c5:66:50:11:d0:50:ff:de:8a:39:65:3a:41:2b:df:7a:
0d:4c:9d:11:fb:5a:11:0d:c7:7e:39:0a:98:5b:f3:90:e0:e1:
eb:5d:c4:b6:c2:af:b8:3d:2f:ae:35:54:55:78:93:25:20:be:
ec:bc:75:82:ce:7f:13:53:7b:48:95:19:6e:2d:7d:c8:a3:28:
7a:c0:a5:a3:fa:df:76:8e:c3:6d:55:31:96:2d:0a:43:43:fc:
ef:81:0f:65:e7:3a:1d:6d:45:2b:db:9c:73:24:99:be:88:3a:
11:6e:34:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 21:56:40 2026 by rpki-client