
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1846a1ae-e4b1-342c-a08f-173f928c2d62.roa
File: 1846a1ae-e4b1-342c-a08f-173f928c2d62.roa (raw, json)
Hash identifier: BtMUROo61RUKuApqeKiPUDasJrPgn8A/kscWlDDVyZQ=
Subject key identifier: D9:C4:C8:54:23:98:B4:02:75:BC:53:C1:78:1E:40:62:EB:31:11:6E
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328584EAA51E47F811391ABFB954300
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1846a1ae-e4b1-342c-a08f-173f928c2d62.roa
Signing time: Thu 30 Jul 2026 01:00:12 +0000
ROA not before: Thu 30 Jul 2026 01:00:12 +0000
ROA not after: Wed 28 Oct 2026 01:00:12 +0000
asID: 15169
IP address blocks: 70.32.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 08 Aug 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:aa:51:e4:7f:81:13:91:ab:fb:95:43:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jul 30 01:00:12 2026 GMT
Not After : Oct 28 01:00:12 2026 GMT
Subject: CN=fc42ff88-117e-42d6-b4af-9dccffd3aac5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8c:2c:0a:08:19:2e:8b:61:82:e0:48:51:2a:
2b:61:11:9d:49:a3:42:81:e6:93:4a:20:81:10:2a:
18:47:28:91:2b:3c:24:88:4d:73:90:a8:de:d3:bd:
c5:5b:68:df:c9:72:1d:69:23:38:5c:f8:4b:94:b0:
20:c4:c4:3a:50:20:68:f0:bc:b9:b1:4e:a1:ee:37:
42:73:c5:cf:b5:22:fa:e2:7a:72:99:8e:48:50:67:
04:e2:12:2f:d0:47:07:ce:c4:b8:97:50:b3:33:07:
e0:e9:01:0e:b5:02:1a:7a:9e:5a:f5:56:aa:4d:e4:
1e:5c:b6:73:d1:9c:47:49:c5:ff:09:f7:39:9d:1e:
12:6b:a7:72:50:30:63:3f:f1:39:83:f8:18:20:ca:
f4:19:55:61:3c:e7:91:43:86:84:00:49:ab:cb:86:
28:c6:92:79:6d:1f:a1:01:84:e4:6f:55:e1:34:4a:
c8:00:24:96:f3:d7:0a:17:16:3a:af:16:2f:b6:f0:
ac:79:d5:c0:fc:54:ef:e7:44:38:4b:de:16:f3:a6:
aa:7e:cc:a3:d0:ed:04:ef:8a:a2:e6:03:6f:c8:0d:
c5:9c:04:05:10:25:7d:08:1f:b1:08:7d:80:13:98:
5e:eb:35:2b:77:75:22:23:c0:da:bf:3a:01:7e:66:
ef:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:C4:C8:54:23:98:B4:02:75:BC:53:C1:78:1E:40:62:EB:31:11:6E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1846a1ae-e4b1-342c-a08f-173f928c2d62.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
70.32.131.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:a7:a5:3a:3c:5d:3b:09:22:4b:b4:42:e5:c0:de:16:1f:0c:
83:34:ae:fe:4f:ea:11:c9:f7:5c:1e:4b:0f:b9:8c:d9:36:00:
47:57:75:25:6a:1c:4c:83:40:60:19:21:4b:82:3c:ad:0a:d4:
83:2b:82:29:a9:0b:e3:5c:5c:68:8a:27:f5:52:09:e9:b4:92:
0d:99:eb:74:8a:7e:95:4c:00:e3:a1:91:3c:e5:11:51:f4:0e:
f6:25:e1:7c:e5:19:ee:e7:3a:02:8e:a9:8b:ac:df:19:6f:2d:
4e:75:4b:a4:b8:72:47:00:79:14:eb:cb:7e:5e:ca:45:8e:53:
83:43:e8:21:81:ee:75:8e:eb:f4:ed:6f:af:2f:61:19:df:80:
ee:8a:3a:7e:0e:ac:29:0a:1d:ec:53:d8:0a:5f:22:f4:9d:e4:
ba:14:af:9e:55:c9:4d:3e:ee:e4:19:46:99:c8:4a:22:44:e8:
85:19:22:97:13:80:a8:4c:84:2f:26:ef:68:9b:37:8a:fb:32:
42:9f:3a:a0:40:f5:5b:6e:12:cd:5e:cc:48:ca:1c:40:45:cf:
e6:0e:06:50:e6:d6:fe:96:d9:2e:e0:08:1f:bb:ec:d0:e9:74:
d9:0a:b1:65:88:9c:3a:a4:72:ad:a5:69:7a:a4:a4:a5:35:1c:
21:1b:ac:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 21:43:16 2026 by rpki-client