
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2a70ae61-4d1c-3dbb-a046-225f76500ee6.roa
File: 2a70ae61-4d1c-3dbb-a046-225f76500ee6.roa (raw, json)
Hash identifier: LmQilAlFB+OIwqr4ebzboZ6IxQbjln8NBz2SDoQPl2c=
Subject key identifier: 13:83:AC:74:AC:27:FC:C8:2B:8F:2A:7D:70:41:B7:8C:86:6F:C5:17
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328584EA79E87E34E8554F5B70CBA20
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2a70ae61-4d1c-3dbb-a046-225f76500ee6.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 15169
IP address blocks: 208.68.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 08 Aug 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:9e:87:e3:4e:85:54:f5:b7:0c:ba:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=dcc62dee-a2bf-47c4-a86f-1275f106786f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a4:00:13:33:3f:29:ec:a9:35:80:5e:b5:49:
1b:54:1a:28:7d:86:f1:5d:1e:18:1e:5b:d4:a1:e6:
1c:6b:62:4b:1a:d2:e6:cb:b4:00:52:5a:9c:cc:4e:
1f:bd:2a:1e:57:e3:1c:61:db:0c:f0:f0:3b:ca:22:
53:c0:f5:cb:b0:fe:d6:59:59:47:fa:66:59:5b:2e:
92:78:d0:8d:99:7f:e2:88:07:cc:d2:94:98:ef:fd:
97:1d:7f:dc:a9:ce:b9:c6:43:e5:3c:5a:34:2e:09:
ad:1b:f6:94:15:23:3b:ab:05:2b:37:2b:20:61:3f:
9b:eb:b6:37:95:be:8c:1c:c3:19:7b:c7:bd:e8:8c:
ee:ba:a2:dd:33:41:37:0a:10:f7:dd:bf:a3:52:ed:
63:ca:e8:6f:3b:93:d9:a3:b8:cd:68:75:8a:a2:31:
d3:b6:b7:1e:07:e4:f8:83:94:89:8c:1d:e1:1b:13:
ff:25:ed:82:b4:40:79:76:f9:4f:0e:dd:bb:81:0d:
a8:94:74:32:9d:e8:a1:98:4c:67:66:a6:75:c3:41:
50:38:6f:27:e8:82:34:26:3c:30:d4:88:e5:26:f0:
76:b8:54:32:17:3a:7e:8f:cd:2f:06:9d:30:f7:8c:
57:ff:98:e3:7c:16:45:03:d4:0f:0a:92:ca:d1:48:
76:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:83:AC:74:AC:27:FC:C8:2B:8F:2A:7D:70:41:B7:8C:86:6F:C5:17
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2a70ae61-4d1c-3dbb-a046-225f76500ee6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
208.68.109.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:8d:68:35:86:e4:b3:69:3b:15:3f:df:07:45:62:98:c2:a0:
1c:53:f2:23:43:ab:4a:d2:07:f5:ba:ef:71:4a:12:68:ef:23:
81:a6:46:55:3a:68:ac:49:b5:3a:cf:f1:67:bf:be:43:3a:27:
5d:1d:09:e6:c4:cf:55:50:47:14:55:e6:4c:da:b0:f0:a3:b4:
aa:5a:c2:a8:bb:06:0b:97:2e:55:95:ff:db:b1:d5:d4:cc:b7:
57:5f:31:54:2b:ad:72:e4:84:63:97:35:77:b6:82:3e:8d:1c:
b5:a9:b7:56:73:a7:32:56:b4:64:85:f4:46:9e:6c:a6:e4:c3:
00:56:6a:e2:ba:c1:27:af:03:db:1c:22:e2:58:5c:2e:ef:ca:
a6:01:e6:33:13:eb:73:93:cd:ba:c7:43:ac:fa:79:b1:ea:92:
6d:65:2b:a0:de:91:c3:bc:11:cf:f0:92:92:b0:09:ab:b1:70:
d3:6c:92:71:ce:58:a1:1c:64:c4:f7:5e:92:73:70:bd:93:f9:
ed:7b:dc:3b:fb:ff:4c:62:ac:91:3e:fc:7c:ad:ed:5e:f9:15:
07:b7:e9:0b:41:b1:e8:ec:bf:e5:e1:42:43:a6:a5:11:65:8b:
ca:cd:48:ba:99:56:c0:5b:4a:48:2b:69:7e:c9:0d:25:12:fc:
e4:a9:fd:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 21:46:07 2026 by rpki-client