
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/981a47a8-b157-34ff-b2ec-b1ed4ccb6514.roa
File: 981a47a8-b157-34ff-b2ec-b1ed4ccb6514.roa (raw, json)
Hash identifier: 9Nc2c4J0SWxvxgxOPGl+8VEOnWLROAR332bYLazSClc=
Subject key identifier: 49:F7:B2:16:50:74:A5:F9:C0:5A:0F:DB:98:5A:99:58:A9:FA:47:7F
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328584EAA51B933ADB24D093B1EB580
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/981a47a8-b157-34ff-b2ec-b1ed4ccb6514.roa
Signing time: Thu 30 Jul 2026 01:00:12 +0000
ROA not before: Thu 30 Jul 2026 01:00:12 +0000
ROA not after: Wed 28 Oct 2026 01:00:12 +0000
asID: 15169
IP address blocks: 70.32.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 08 Aug 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:aa:51:b9:33:ad:b2:4d:09:3b:1e:b5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jul 30 01:00:12 2026 GMT
Not After : Oct 28 01:00:12 2026 GMT
Subject: CN=cd1841e8-0596-4d77-8b97-a81441f3c2fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:87:8d:60:22:63:aa:f7:65:59:44:c8:25:c5:
de:73:b6:84:83:87:16:3f:0c:88:c7:e6:20:0e:27:
d1:e5:53:f2:16:2b:ab:cf:d9:56:7a:14:69:55:d0:
2b:46:59:5e:b0:fa:e2:bb:72:29:cc:ec:63:06:dc:
89:cf:3d:df:85:60:a5:f9:4d:53:37:6d:ad:bf:88:
ed:93:99:7c:62:2f:3a:8b:e1:5a:74:5d:62:e7:fb:
05:25:92:c3:9b:73:c9:b1:87:c7:20:6d:ea:3f:3b:
cc:24:48:f0:6a:ce:8b:97:81:20:b1:55:1e:bb:c0:
a0:ad:84:af:e8:fa:61:bd:65:d6:64:64:ac:24:75:
a0:e0:f4:2a:3e:be:f3:58:47:66:77:6a:6b:79:6e:
ae:e5:75:d8:9f:5d:20:7a:cd:b8:0f:fe:1b:95:5d:
93:51:58:3c:85:69:00:50:1c:7b:07:39:40:ab:cb:
44:a3:f1:8d:cb:61:6f:f8:67:03:ec:c9:25:8e:be:
44:57:e5:d3:28:83:19:ac:87:28:61:c5:9e:16:e2:
37:f6:82:fb:5e:be:fe:e1:4e:c5:18:fd:85:a2:c6:
0b:45:4a:e9:f0:13:80:1a:be:d6:b7:2d:6f:d1:0d:
16:51:29:5e:fb:00:4f:1f:f8:36:53:49:1a:77:91:
7c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:F7:B2:16:50:74:A5:F9:C0:5A:0F:DB:98:5A:99:58:A9:FA:47:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/981a47a8-b157-34ff-b2ec-b1ed4ccb6514.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
70.32.129.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:4a:50:a5:a1:43:2e:ea:d3:17:63:9a:64:41:87:52:16:21:
58:34:63:c0:ac:97:94:ca:62:ff:89:d5:b4:cd:23:77:a2:8d:
25:d5:28:ea:2f:81:d1:a4:17:0b:05:33:6a:c4:f1:de:36:b3:
c9:35:93:5b:c3:7e:f2:b3:0d:d6:b1:a7:46:33:04:9c:b1:1c:
0c:04:a2:40:07:16:3a:f1:ae:e4:3d:fc:3c:11:b8:15:30:3d:
89:04:9b:ed:2f:76:d4:8c:62:04:5d:ab:99:5f:59:06:32:93:
bf:8d:dd:27:28:26:94:93:b2:b9:a0:9c:18:b4:19:40:eb:a1:
48:3b:6a:a9:98:44:dd:10:7f:3a:d7:a7:72:27:3f:95:39:54:
a6:81:2a:21:ba:9e:48:08:9e:6d:27:60:ef:67:4f:3a:f0:6f:
20:f2:13:86:99:67:70:59:55:82:87:e4:60:e0:cb:0e:78:8e:
5d:f6:c9:86:53:e6:e8:c6:46:8a:27:2a:92:4a:12:95:bc:f6:
29:9c:71:ce:0b:03:fb:ae:47:2c:30:1d:76:20:21:5a:fc:93:
d2:54:6f:e0:f0:67:d4:b7:cf:38:df:bc:76:9a:76:59:a9:34:
5e:c3:6c:c1:89:21:d5:69:d4:af:f2:85:52:36:b8:a1:7d:fb:
94:fb:21:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 21:44:12 2026 by rpki-client