
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/b7f9d26e-2d0e-3ec7-b02b-324e16017495.roa
File: b7f9d26e-2d0e-3ec7-b02b-324e16017495.roa (raw, json)
Hash identifier: qxCGbGSCv7RGJGTkSHNR2DUfYLV74yaZgelKn334y6I=
Subject key identifier: 32:4E:F3:81:08:71:C3:68:D0:FA:3E:AD:E0:29:04:38:B9:DA:5A:64
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584E7634DEBC63847A00958004B0
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/b7f9d26e-2d0e-3ec7-b02b-324e16017495.roa
Signing time: Sat 11 Jul 2026 09:00:12 +0000
ROA not before: Sat 11 Jul 2026 09:00:12 +0000
ROA not after: Fri 09 Oct 2026 09:00:12 +0000
asID: 9009
IP address blocks: 172.94.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 23 Jul 2026 23:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:76:34:de:bc:63:84:7a:00:95:80:04:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Jul 11 09:00:12 2026 GMT
Not After : Oct 9 09:00:12 2026 GMT
Subject: CN=fbbc91cb-3294-4a16-9bde-7c983e075f1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:25:ec:80:73:2e:12:68:5a:3e:19:36:38:04:
10:9e:09:ae:6d:08:d8:19:8b:b5:a8:43:64:c1:f4:
33:32:30:d7:35:c6:70:c0:f2:0d:51:53:bc:0d:07:
23:b1:47:ce:e7:f1:f9:12:ea:2b:14:da:54:88:0d:
2e:d7:3a:0b:bb:4a:79:d5:b6:f8:6a:2c:ce:cb:d1:
2c:52:cc:0f:fa:15:96:a1:9c:44:4f:1a:b4:ff:8b:
6b:46:21:8a:c0:e0:59:15:23:56:aa:e1:17:b2:a7:
00:60:03:23:c8:68:14:87:1e:a5:3c:2a:c2:6e:1c:
e1:4c:f9:0b:30:f5:11:e0:5f:33:8d:58:a5:71:89:
53:c0:4c:b0:23:a1:59:47:90:d9:93:ee:bb:8d:8c:
d2:fe:94:17:c1:6a:95:13:56:68:68:72:12:7d:fa:
13:ce:76:fc:94:07:32:c7:be:3d:a5:4b:8c:25:37:
d6:e4:d1:1d:08:ca:c1:12:a3:fa:c4:a0:e8:0b:6c:
ac:60:ed:5d:a0:07:89:e7:08:e1:1e:7c:65:03:d1:
49:f8:07:b1:fa:68:a3:87:7f:09:1a:5a:8c:a2:7c:
e9:99:55:d1:33:13:df:48:02:e4:78:91:72:c1:d4:
df:85:3d:5a:2e:31:67:2e:38:81:34:3d:84:f4:3e:
b0:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:4E:F3:81:08:71:C3:68:D0:FA:3E:AD:E0:29:04:38:B9:DA:5A:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/b7f9d26e-2d0e-3ec7-b02b-324e16017495.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.111.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:49:5e:a0:3c:ac:cf:e5:b5:ab:d2:4c:a7:0e:1d:89:ec:d1:
11:6f:1d:f5:39:09:ee:e2:7c:54:7d:e3:e3:f0:04:eb:74:00:
81:34:c4:53:91:9a:67:48:0e:24:e2:dd:d2:07:6e:43:2d:42:
52:d7:8c:99:bb:56:c6:aa:ba:22:71:b6:74:9d:bc:c6:e8:6d:
1c:7a:9e:f2:42:6d:b3:22:18:8a:3d:5b:80:b8:35:67:8e:00:
31:18:eb:0f:b7:89:f2:32:d3:82:d6:f6:21:c7:a7:d4:ba:de:
61:89:fa:29:25:c5:89:8d:ff:dc:a8:d5:4f:4f:6a:6a:e2:66:
8b:28:db:24:20:e8:77:6e:3e:9e:81:20:8d:b1:f6:14:67:e0:
fd:20:29:87:85:57:89:56:07:86:d4:d7:2b:d4:7d:00:ec:51:
70:bd:b3:48:18:8d:3a:ff:bb:23:53:11:b5:db:1f:15:e4:f5:
34:22:fc:bf:f3:2f:25:e0:29:18:5e:70:c8:81:27:70:e5:9d:
9e:20:83:24:6e:70:e6:ec:60:31:60:83:cc:82:22:99:3c:35:
14:6f:01:34:cd:1b:48:4e:ad:87:0a:86:6c:49:8b:0a:f1:c6:
f5:be:12:9c:38:b4:6a:49:56:3d:38:5b:21:30:86:a1:34:b1:
a2:1e:f0:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:56:22 2026 by rpki-client