
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac4576d4-b383-4f58-8da4-316d12d38f36/1d22327a-573b-3949-b5c8-d7ea3bb1607c.roa
File: 1d22327a-573b-3949-b5c8-d7ea3bb1607c.roa (raw, json)
Hash identifier: EftSyQEztV8Qr8a40i5gdu9AS6AM1tMEqNpPpWBU+NI=
Subject key identifier: 29:21:03:B5:B6:AF:75:9E:26:F3:10:83:B6:5E:1B:9D:5F:27:F7:EA
Certificate issuer: /CN=ac4576d4-b383-4f58-8da4-316d12d38f36
Certificate serial: 010D0C9F4328584EF5B2038DB0C8668BE02E9100
Authority key identifier: 88:85:79:92:5C:D9:E3:38:2D:2A:D0:3D:DF:00:D2:66:92:C9:A7:EF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac4576d4-b383-4f58-8da4-316d12d38f36.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac4576d4-b383-4f58-8da4-316d12d38f36/1d22327a-573b-3949-b5c8-d7ea3bb1607c.roa
Signing time: Wed 26 Aug 2026 01:00:12 +0000
ROA not before: Wed 26 Aug 2026 01:00:12 +0000
ROA not after: Tue 24 Nov 2026 02:00:12 +0000
asID: 6079
IP address blocks: 170.124.0.0/19 maxlen: 24
170.124.32.0/19 maxlen: 24
170.124.64.0/19 maxlen: 24
170.124.96.0/19 maxlen: 24
170.124.128.0/19 maxlen: 24
170.124.160.0/19 maxlen: 24
170.124.192.0/19 maxlen: 24
170.124.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac4576d4-b383-4f58-8da4-316d12d38f36/ac4576d4-b383-4f58-8da4-316d12d38f36.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac4576d4-b383-4f58-8da4-316d12d38f36/ac4576d4-b383-4f58-8da4-316d12d38f36.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac4576d4-b383-4f58-8da4-316d12d38f36.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:f5:b2:03:8d:b0:c8:66:8b:e0:2e:91:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac4576d4-b383-4f58-8da4-316d12d38f36
Validity
Not Before: Aug 26 01:00:12 2026 GMT
Not After : Nov 24 02:00:12 2026 GMT
Subject: CN=10fd8f6a-39ad-485d-ab38-6bbd3a129547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e2:21:76:94:62:20:25:b3:b6:f8:ba:c0:74:
46:12:69:ee:b3:5c:ce:01:f4:35:8e:c4:6b:92:2b:
c1:9b:af:ab:39:67:4d:2c:18:37:90:cc:16:70:b3:
52:38:d1:ab:61:39:89:53:28:5f:7c:0d:7e:a5:d1:
48:4b:c3:10:64:25:40:07:d6:f8:bb:75:ee:19:e5:
67:1b:aa:49:0d:35:ad:6e:58:51:72:2a:b1:76:19:
7d:91:4c:b3:bf:62:5b:39:df:d8:15:7b:cd:b2:6c:
1a:dc:e9:52:b6:ed:55:d5:45:35:c8:93:da:93:2d:
75:d2:84:7e:ca:9f:b0:46:6e:ab:17:39:48:a4:8d:
9f:ff:0b:e6:52:d7:c9:5c:cd:e6:dd:22:39:c1:85:
22:8a:cc:95:b2:71:92:5a:f9:63:96:20:45:11:de:
1c:a8:a3:47:b7:c7:8f:a9:41:e6:80:87:2e:e1:19:
9b:83:9c:1e:f2:70:44:3f:f5:2c:8c:ec:e6:64:db:
fb:82:99:5d:21:46:f6:b5:21:f4:8d:0e:4a:a4:8d:
18:d5:da:aa:5c:bd:e2:d4:62:28:7a:4e:18:de:3d:
ac:57:8d:b6:5b:ca:b1:c4:d1:8a:82:2c:59:06:85:
8c:1a:b6:f3:96:66:40:a7:a3:dd:37:32:6e:5b:32:
4e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:21:03:B5:B6:AF:75:9E:26:F3:10:83:B6:5E:1B:9D:5F:27:F7:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac4576d4-b383-4f58-8da4-316d12d38f36/1d22327a-573b-3949-b5c8-d7ea3bb1607c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac4576d4-b383-4f58-8da4-316d12d38f36/ac4576d4-b383-4f58-8da4-316d12d38f36.crl
X509v3 Authority Key Identifier:
keyid:88:85:79:92:5C:D9:E3:38:2D:2A:D0:3D:DF:00:D2:66:92:C9:A7:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac4576d4-b383-4f58-8da4-316d12d38f36.cer
sbgp-ipAddrBlock: critical
IPv4:
170.124.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:c6:c4:0a:33:c0:3c:de:11:50:cf:c0:cd:ec:25:42:2b:95:
d5:88:8e:1a:72:a9:05:14:55:e6:f4:4f:90:f3:e3:14:f0:dd:
25:53:ac:f2:6d:71:28:93:3e:a2:df:e8:86:73:b3:33:06:17:
b6:28:5b:39:11:13:ac:a8:6c:4b:23:37:8b:df:61:b9:89:19:
08:8a:44:38:13:03:33:fe:12:86:45:9a:c5:c9:c4:76:1f:f1:
33:bd:3d:98:80:f7:45:99:89:72:46:9a:b3:ca:cb:0b:b1:7d:
7c:fe:d6:6d:20:36:46:41:c6:0a:87:d5:69:5b:c0:20:4c:9f:
b2:dc:e8:14:00:45:23:80:7d:d2:42:27:9b:2c:80:93:81:8e:
3b:5b:1d:d7:81:66:21:cb:5e:17:9f:ce:a3:78:e4:f4:68:28:
e3:24:dd:6d:47:67:94:f9:2d:37:4d:b4:55:be:bf:68:80:ad:
c6:e1:ae:1a:ec:09:f2:54:33:cb:0a:8e:15:6d:a5:09:a4:6d:
59:25:7b:23:3d:47:5f:f6:09:09:08:e4:63:fd:6c:1f:02:98:
9d:7f:07:63:d9:03:bc:ba:f5:c4:4e:f3:4e:84:63:31:2b:d0:
ad:8e:87:65:80:ce:f3:ce:2c:15:b5:6d:cb:7e:55:2d:22:22:
a2:57:d0:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 20:47:40 2026 by rpki-client