
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/420b0bcc-147a-3e2b-b25f-c403abedd91a.roa
File: 420b0bcc-147a-3e2b-b25f-c403abedd91a.roa (raw, json)
Hash identifier: 6FxWvWHYI62JuvoNzvJfa9s9UNJ6Sb6zJdolg8aizO8=
Subject key identifier: 63:63:72:06:DA:F3:06:A0:C6:DB:DD:4F:34:3D:1F:22:69:D5:C0:76
Certificate issuer: /CN=32ba7ff4-2407-4ee2-af24-bd0641e558d0
Certificate serial: 010D0C9F4328584ECA6C88420EE0816D1F464980
Authority key identifier: 46:BC:5C:51:EA:D7:0A:C3:F1:DA:D7:79:FD:D7:D6:D2:BA:B3:2F:0B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/420b0bcc-147a-3e2b-b25f-c403abedd91a.roa
Signing time: Mon 10 Aug 2026 13:00:12 +0000
ROA not before: Mon 10 Aug 2026 13:00:12 +0000
ROA not after: Sun 08 Nov 2026 14:00:12 +0000
asID: 32806
IP address blocks: 216.7.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 15 Aug 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:ca:6c:88:42:0e:e0:81:6d:1f:46:49:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32ba7ff4-2407-4ee2-af24-bd0641e558d0
Validity
Not Before: Aug 10 13:00:12 2026 GMT
Not After : Nov 8 14:00:12 2026 GMT
Subject: CN=30b1c268-9a02-4723-abcb-e79c3773d037
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:4c:a5:58:52:86:46:42:85:70:9c:8c:e4:66:
01:e9:b7:8e:ae:b4:fd:da:58:91:1e:7f:fb:e0:31:
50:bf:24:49:e8:74:4f:53:26:3d:72:c7:10:4a:09:
ca:55:4b:2e:83:af:e0:13:bf:b5:aa:01:7b:5c:a4:
f4:ef:52:c3:06:c5:5d:77:fb:e7:31:9a:bf:dd:36:
b9:7c:96:53:6e:a1:c8:5c:ae:88:22:b4:91:b2:e4:
5d:57:09:47:d9:58:ab:41:5d:38:e6:77:64:59:9f:
f4:5c:98:3d:28:79:72:01:ab:c1:ee:73:97:eb:59:
f1:a0:ea:25:2e:f1:9e:fd:e9:2a:ca:24:42:12:44:
dc:c8:e1:6c:fd:0a:8e:7f:17:ba:37:79:5c:5b:6d:
bc:cf:08:8d:c1:9b:64:4f:28:ad:5e:e0:b7:ac:55:
d8:e4:90:b6:b4:8f:5b:cd:ab:27:0b:c1:48:9e:a8:
43:51:2a:76:c3:56:f0:f3:b8:60:99:16:87:ca:0c:
74:c3:51:b2:b2:e5:41:57:68:d0:7e:ec:c1:c9:12:
e8:b6:30:57:f1:4f:1a:19:28:a0:0d:7e:27:e2:0e:
2a:1d:79:0a:74:c4:0f:bf:59:4c:06:00:66:a4:2a:
49:5f:cd:22:0c:e1:88:3a:32:31:a9:76:6b:95:d9:
77:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:63:72:06:DA:F3:06:A0:C6:DB:DD:4F:34:3D:1F:22:69:D5:C0:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/420b0bcc-147a-3e2b-b25f-c403abedd91a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0/32ba7ff4-2407-4ee2-af24-bd0641e558d0.crl
X509v3 Authority Key Identifier:
keyid:46:BC:5C:51:EA:D7:0A:C3:F1:DA:D7:79:FD:D7:D6:D2:BA:B3:2F:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/32ba7ff4-2407-4ee2-af24-bd0641e558d0.cer
sbgp-ipAddrBlock: critical
IPv4:
216.7.159.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:68:50:08:53:ce:a1:e6:fd:15:a0:78:95:0a:1c:d6:11:2f:
fe:8e:fb:3f:03:e0:d9:be:37:62:b4:97:68:2b:16:77:be:f5:
f0:b2:b1:67:b2:7f:56:af:6d:7a:51:17:b1:6e:02:27:01:f8:
2d:22:a1:20:97:2a:9c:75:8e:b7:e2:0f:d9:ea:48:df:21:be:
c3:4d:8f:29:7d:c4:c4:05:28:41:e6:d0:76:6d:22:ff:57:09:
47:c9:84:24:51:92:5c:06:9c:0d:e8:7a:63:ed:04:cd:91:30:
a5:01:a7:fa:cc:02:bb:dc:f7:17:69:02:b2:6f:e5:42:7f:80:
f5:b8:0b:21:47:1c:17:e6:bb:cc:76:f9:c7:b3:55:dc:af:f5:
cb:28:c6:3d:41:88:6a:5d:21:b3:ba:b2:67:08:11:55:f8:37:
eb:c8:5b:85:b6:a9:89:9d:e5:da:48:d4:39:78:e4:22:a4:b9:
18:6c:20:9c:14:37:be:6c:08:77:88:2e:75:8e:46:61:53:a1:
16:35:41:3f:33:63:06:e2:d4:ae:32:59:df:f4:14:b3:b8:a7:
1c:d9:45:03:91:da:5f:6c:15:c7:eb:75:dc:9c:ad:24:05:e9:
b9:53:9b:7b:80:a6:ac:82:b2:84:87:a7:60:69:0a:2c:1b:b6:
32:88:ec:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 05:42:11 2026 by rpki-client