
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/04b9aae5-9a08-3015-90f0-2164c4501787.roa
File: 04b9aae5-9a08-3015-90f0-2164c4501787.roa (raw, json)
Hash identifier: aMBezT0nEUfdzhKlGzEMgZtMoIElqBwq3h+nxsOH9a0=
Subject key identifier: 29:31:14:19:9D:BC:28:B1:21:69:1F:3B:14:FA:26:7C:84:6F:12:33
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328584F4C3DA7CA47453ACB7FA71FC0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/04b9aae5-9a08-3015-90f0-2164c4501787.roa
Signing time: Sat 26 Sep 2026 01:00:13 +0000
ROA not before: Sat 26 Sep 2026 01:00:13 +0000
ROA not after: Fri 25 Dec 2026 02:00:13 +0000
asID: 15169
IP address blocks: 74.125.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 16 Nov 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:4c:3d:a7:ca:47:45:3a:cb:7f:a7:1f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Sep 26 01:00:13 2026 GMT
Not After : Dec 25 02:00:13 2026 GMT
Subject: CN=a2a95bec-8aad-4d41-a440-cd107b2ed30d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:09:0d:32:16:ca:35:8a:6f:62:14:40:f4:98:
ab:5c:9f:d7:af:af:01:7c:c4:10:e1:b7:ce:e0:23:
aa:08:51:c4:64:1d:d4:c6:a2:43:99:24:d5:bf:c8:
c1:59:a1:11:23:ef:7b:f4:03:ce:e1:f9:02:71:cf:
51:b9:c5:d4:05:b7:41:5d:6c:70:d6:7f:79:0c:b9:
7f:a3:df:50:e7:80:d0:f9:ad:07:5f:a3:f8:56:55:
d9:35:52:ce:51:86:95:2a:ee:f8:c4:3b:93:c7:48:
44:e1:8b:5f:1f:e9:02:f9:b2:4c:ca:dd:0b:24:78:
71:3a:f0:e2:0b:50:6c:0f:3e:fe:48:9d:6f:21:f1:
5b:fc:e7:cb:96:3e:ca:98:9e:0e:65:49:c5:0e:9e:
34:d3:b8:cd:e6:1c:1a:af:22:50:d0:04:78:1d:d0:
be:f8:98:5a:24:8e:c1:ad:9c:3e:25:9a:ce:98:2f:
a2:3b:20:92:f6:84:59:73:86:62:d0:82:08:df:29:
c5:a1:e4:42:2e:f8:3c:57:89:b4:cb:f0:5b:4c:65:
d9:6a:98:32:19:8a:8f:08:b0:58:d1:ca:9a:f8:57:
82:b4:b8:13:07:4b:85:d2:36:6c:a4:ea:b3:83:93:
8f:be:f8:0e:95:8d:6b:2a:6d:84:c2:be:35:ef:78:
1a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:31:14:19:9D:BC:28:B1:21:69:1F:3B:14:FA:26:7C:84:6F:12:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/04b9aae5-9a08-3015-90f0-2164c4501787.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
74.125.70.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:30:5c:9d:60:a5:0f:df:07:01:9d:62:88:f2:12:df:6d:42:
1c:0f:72:35:4b:d3:d1:27:ec:70:c8:98:64:3c:ec:d5:c5:65:
8d:2e:e4:b2:0a:ae:1e:8c:e1:16:e7:e8:b2:9d:87:69:fd:7e:
19:36:54:e2:1f:f8:be:3b:69:4b:a5:4e:96:87:a1:f2:c1:c2:
74:9e:6f:eb:2c:fc:2d:28:13:01:28:ad:8d:24:d9:16:ce:2f:
37:94:0a:96:9d:c0:bc:f2:62:c1:1a:59:7d:ea:03:c3:17:f4:
bb:45:73:11:b6:1f:da:01:09:72:48:92:eb:68:fd:9a:dd:63:
a6:5c:78:c8:9f:ba:10:78:48:67:d2:24:f8:88:93:a2:b1:fc:
0e:22:a6:d6:90:b8:de:8b:3f:50:47:bb:2e:83:67:0f:64:94:
4f:15:55:c6:6a:11:48:27:54:ed:5c:c0:9a:e8:10:96:7d:f2:
79:24:b3:d5:ee:91:9a:da:6e:9f:5d:c3:0b:fd:41:33:f1:27:
0b:06:72:d8:9a:72:32:89:57:d0:32:8d:b9:c7:6a:02:25:8c:
be:c6:cf:15:03:20:13:34:08:27:b3:89:4d:62:07:e0:be:59:
57:d3:75:0e:cb:40:03:da:44:bc:36:54:4c:2a:76:0c:e5:31:
ca:27:42:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:28:06 2026 by rpki-client