
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c/2aa2052c-0244-32d0-aae9-fdec2c39019a.roa
File: 2aa2052c-0244-32d0-aae9-fdec2c39019a.roa (raw, json)
Hash identifier: /hpNB/Fzrwqe5kkXLwiicx6jVFQzF1dT8D3tolbflX8=
Subject key identifier: EB:0E:BD:31:9E:A8:29:4B:44:E5:44:DC:09:76:C4:60:1E:07:41:A5
Certificate issuer: /CN=0699cec8-3851-41f8-aee8-2e225865699c
Certificate serial: 010D0C9F4328584EABB6EE88147E26C29EAC1C80
Authority key identifier: 04:3A:13:A4:9A:F1:19:6C:60:B7:74:79:3E:AA:82:F6:12:4B:E6:9D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c/2aa2052c-0244-32d0-aae9-fdec2c39019a.roa
Signing time: Thu 30 Jul 2026 13:00:12 +0000
ROA not before: Thu 30 Jul 2026 13:00:12 +0000
ROA not after: Wed 28 Oct 2026 13:00:12 +0000
asID: 11911
IP address blocks: 170.61.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c/0699cec8-3851-41f8-aee8-2e225865699c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c/0699cec8-3851-41f8-aee8-2e225865699c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 06 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:ab:b6:ee:88:14:7e:26:c2:9e:ac:1c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0699cec8-3851-41f8-aee8-2e225865699c
Validity
Not Before: Jul 30 13:00:12 2026 GMT
Not After : Oct 28 13:00:12 2026 GMT
Subject: CN=a8b1f20b-7450-4df5-9e1d-9edc4a9c42d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f5:59:7b:fe:c3:c5:15:65:ca:81:32:96:f7:
06:cf:89:bf:e2:70:c2:21:7a:fd:2b:6c:f5:34:32:
ab:98:91:e3:55:58:ad:b9:e1:cf:71:f0:be:ab:00:
4f:6d:7d:1f:10:03:35:d3:cd:fa:9f:2f:c2:97:7b:
1a:a5:bf:84:05:35:ad:79:7d:8a:bb:11:55:f9:c7:
78:d8:c7:6f:8c:b5:94:90:e5:9c:d2:5c:fe:6c:34:
f1:01:e9:ec:60:8f:53:9a:e2:23:03:6d:23:ca:bd:
df:f1:b2:b7:1a:fc:d6:ae:f3:ff:ca:2b:70:3f:e2:
f9:ed:ba:b9:c6:8e:f1:17:1b:5a:c8:cb:48:ef:2e:
31:28:5b:c2:4a:84:0e:11:8f:d3:81:64:2f:80:f7:
ad:6b:64:46:d4:80:dd:8b:4a:e8:87:2a:cb:07:9d:
b8:7c:33:85:71:66:a8:81:92:ab:85:51:65:5c:1e:
9a:6f:47:92:88:c3:48:12:df:93:41:e5:4e:30:6a:
4f:33:a8:31:b4:93:ec:8f:e9:89:b8:24:e7:af:34:
2b:b8:05:7b:42:71:5a:e7:0c:9c:db:15:3e:4c:74:
d3:f5:17:f1:40:2c:87:2e:2a:36:85:86:6b:b1:e9:
09:f4:b8:7c:19:f6:a2:d8:c5:33:be:43:21:5d:b1:
72:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:0E:BD:31:9E:A8:29:4B:44:E5:44:DC:09:76:C4:60:1E:07:41:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c/2aa2052c-0244-32d0-aae9-fdec2c39019a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c/0699cec8-3851-41f8-aee8-2e225865699c.crl
X509v3 Authority Key Identifier:
keyid:04:3A:13:A4:9A:F1:19:6C:60:B7:74:79:3E:AA:82:F6:12:4B:E6:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0699cec8-3851-41f8-aee8-2e225865699c.cer
sbgp-ipAddrBlock: critical
IPv4:
170.61.211.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:64:08:69:81:70:0b:58:dd:0c:ac:e5:a8:04:9f:06:80:c5:
34:3c:a0:b0:a8:09:a0:11:f0:4e:d2:fd:d5:a3:e3:5c:72:db:
59:d9:85:32:99:5f:34:bd:2d:5e:ed:c8:97:a9:23:a7:41:2c:
bb:9b:d4:43:4f:26:d0:1a:16:00:8a:00:74:d9:36:82:94:14:
57:97:27:83:39:5d:3f:b8:c8:f8:ca:44:08:66:a5:49:e3:49:
e0:1a:99:27:c7:7d:1c:76:b2:5d:94:8b:bf:0f:16:99:87:08:
9f:ca:58:9f:94:7d:26:a5:2c:3a:1c:9c:16:47:35:eb:97:0a:
b7:56:99:62:65:e8:c8:98:42:12:c4:c3:c7:99:7d:c3:70:62:
d0:27:a2:4d:94:d5:11:5b:7e:37:b9:d6:95:bb:e2:a2:90:23:
ce:1f:9d:97:f0:89:c9:33:c5:97:41:07:12:87:2b:3c:b0:78:
e7:bf:44:23:98:46:44:85:1e:5c:ce:40:11:b5:45:b7:5b:9c:
b8:9d:a5:0a:22:39:91:76:fe:ee:6f:fe:3e:3d:aa:00:c8:69:
06:f6:e4:25:ce:5d:6b:b8:81:e7:f4:fa:9a:91:d4:4f:8a:b7:
90:5a:c0:fa:a7:a4:c5:b5:74:d1:e2:b3:f5:a7:9d:1a:f8:9d:
56:10:e3:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:53:12 2026 by rpki-client