
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3af32542-c9f5-3111-92af-80e94a931b6a.roa
File: 3af32542-c9f5-3111-92af-80e94a931b6a.roa (raw, json)
Hash identifier: F+xpIPDXvrz6/CIvrV6opjJ2ITh/IS4VzNadsHEqKbI=
Subject key identifier: 30:96:A3:9F:0B:8F:A0:4D:42:63:99:02:08:CC:53:B0:8C:D0:0A:09
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328584EAA51AC344ECDE1A047273E80
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3af32542-c9f5-3111-92af-80e94a931b6a.roa
Signing time: Thu 30 Jul 2026 01:00:12 +0000
ROA not before: Thu 30 Jul 2026 01:00:12 +0000
ROA not after: Wed 28 Oct 2026 01:00:12 +0000
asID: 15169
IP address blocks: 70.32.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 08 Aug 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:aa:51:ac:34:4e:cd:e1:a0:47:27:3e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jul 30 01:00:12 2026 GMT
Not After : Oct 28 01:00:12 2026 GMT
Subject: CN=6c0af699-2ccc-4db8-808a-c93773198c1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:75:1d:c2:57:73:42:ea:5d:fe:73:16:4e:d8:
05:dd:4a:6e:e5:24:c2:b6:56:9d:0a:d1:58:64:fb:
ba:07:a7:92:29:7f:37:db:f1:dc:d2:c3:6c:6c:a7:
a7:d5:49:bd:4a:95:3e:73:ec:79:e2:e9:da:08:90:
a2:6c:54:f7:1d:66:78:c4:78:81:73:f3:81:ac:08:
e4:bf:5d:99:0b:76:db:00:0d:83:c9:27:fb:a3:61:
df:4d:57:e1:3d:63:44:d9:ff:fd:29:8f:53:53:5a:
12:44:79:87:cb:de:4b:f6:b4:08:ca:e3:92:8d:74:
f8:34:fa:50:f9:ab:c4:96:0e:d8:11:3c:4c:de:31:
2b:6e:f8:21:80:f8:58:ab:b6:6a:31:96:8a:a8:b7:
09:b5:58:c9:ac:ff:bc:98:41:bc:67:4f:a2:c5:df:
d5:11:a5:d4:33:b6:70:5b:56:ef:c9:89:7f:75:46:
6e:68:a7:a6:06:ef:64:78:80:3e:23:46:66:0d:ff:
d8:2b:d4:3c:90:32:21:94:bc:cb:ec:16:ff:7d:78:
f8:d7:8d:54:a9:09:16:6a:30:3c:e7:46:74:77:c5:
54:44:8c:21:0e:94:bb:dd:7b:ab:d6:23:1f:02:a2:
8d:5e:81:04:c4:94:74:c0:f6:f1:d0:99:e1:c9:12:
96:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:96:A3:9F:0B:8F:A0:4D:42:63:99:02:08:CC:53:B0:8C:D0:0A:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3af32542-c9f5-3111-92af-80e94a931b6a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
70.32.158.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:ca:4e:91:14:4b:02:af:ad:ae:11:26:81:23:50:76:53:86:
67:d6:6d:60:f4:ea:ed:10:2a:fc:90:60:4b:f6:09:ee:1f:38:
16:f8:37:f7:f1:17:52:11:83:50:d4:53:45:45:da:ee:c1:6c:
5f:2f:1a:5c:71:51:05:f5:13:4e:62:e5:bd:fe:e5:0e:25:e7:
4e:7b:43:e3:cd:53:b1:c7:07:36:f4:11:6f:e8:1b:6a:33:0b:
6b:70:8a:d3:9a:17:43:4b:cc:ac:24:d3:00:49:4d:77:a6:31:
c1:23:ab:1e:2f:f7:34:65:f7:e3:35:2f:26:b5:fd:5e:37:92:
81:97:3c:08:10:8c:02:bb:72:21:3a:c9:56:c2:8b:22:72:ae:
28:7f:32:76:e9:42:24:21:18:07:cf:04:d3:0d:aa:bc:28:67:
fa:19:e5:b8:56:fc:e2:77:f5:4e:7e:50:6b:10:86:d5:b1:16:
85:8b:b7:45:99:77:1d:d3:22:c5:32:11:46:7d:60:08:31:dc:
a9:95:9d:a4:5a:5a:44:3b:49:ec:cf:87:23:9e:b5:50:e1:28:
37:d1:7d:73:7e:fb:8c:31:d5:82:88:51:fa:bb:a2:55:5e:a7:
04:00:9a:51:8d:a3:e1:16:71:36:9b:3e:f1:50:9e:a9:8a:fe:
4c:a0:2d:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 21:47:25 2026 by rpki-client