
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b5cc6610-beaf-3d52-a794-3dc457ee6cec.roa
File: b5cc6610-beaf-3d52-a794-3dc457ee6cec.roa (raw, json)
Hash identifier: PMpkSbc+Z2MkP3o0iaPcDj50rNLVw0nz8HC1wpWJzG0=
Subject key identifier: D6:C7:A5:40:CF:E6:02:44:D4:31:A8:FA:FB:4C:B9:63:CF:9E:CE:08
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328584EAA51F9B1F27A17A2675C8700
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b5cc6610-beaf-3d52-a794-3dc457ee6cec.roa
Signing time: Thu 30 Jul 2026 01:00:12 +0000
ROA not before: Thu 30 Jul 2026 01:00:12 +0000
ROA not after: Wed 28 Oct 2026 01:00:12 +0000
asID: 15169
IP address blocks: 70.32.140.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 08 Aug 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:aa:51:f9:b1:f2:7a:17:a2:67:5c:87:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jul 30 01:00:12 2026 GMT
Not After : Oct 28 01:00:12 2026 GMT
Subject: CN=39e1875e-4b67-46c6-b4bd-1f24e51f1e71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:77:3c:82:8d:76:4c:b1:fb:08:da:71:c7:77:
70:d9:db:d4:d7:ea:ea:ac:d1:18:98:82:15:4e:fe:
d2:4a:83:fb:d8:bd:4c:6a:84:c8:c7:bc:8c:d4:14:
fb:19:53:f1:4e:5b:eb:e7:6b:06:e1:e6:09:2b:76:
7b:1c:c0:50:bf:cc:14:a6:8c:b9:87:d7:07:1f:ae:
92:53:45:fa:14:af:fd:5d:62:e6:34:60:6a:5b:7c:
b5:16:d4:34:a5:e7:df:69:86:06:16:c7:42:b2:51:
54:7e:a6:01:a0:b0:95:54:ba:c4:53:6a:54:70:89:
fe:d9:88:8d:fe:a2:60:cb:17:79:77:14:d0:8a:93:
fa:95:93:9a:83:44:2d:bc:d1:e5:f8:79:aa:00:b9:
ab:e3:f4:a8:99:63:f0:f6:ab:4a:9f:0e:ec:46:fd:
3c:86:2e:37:35:c7:b6:e9:9c:de:5c:73:df:8a:85:
4c:eb:4e:d4:07:a4:c2:39:e4:44:68:6e:0a:ec:9c:
58:b7:d8:da:ce:f6:67:ef:af:93:a1:28:e0:bc:a1:
ee:5c:3d:06:5b:1e:87:cc:38:a2:fa:ec:17:2a:77:
a7:56:2e:e4:81:3b:5b:cf:8a:5a:15:82:87:e4:ea:
ed:8d:d7:54:29:c2:d9:d7:63:6f:bf:fe:b9:e3:25:
b8:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:C7:A5:40:CF:E6:02:44:D4:31:A8:FA:FB:4C:B9:63:CF:9E:CE:08
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b5cc6610-beaf-3d52-a794-3dc457ee6cec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
70.32.140.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:07:c2:61:e0:63:24:b7:ac:20:15:d3:c8:88:c6:99:85:cb:
0c:0f:85:2c:90:c9:8d:6d:a0:14:18:bb:6d:22:a6:ae:3f:1a:
0f:cc:2f:74:8e:02:d3:84:db:33:82:9b:41:6d:00:6e:4c:33:
86:47:29:0d:14:5d:f5:a3:ad:7e:f3:6b:20:b8:d8:a2:70:5b:
01:08:5a:d8:2e:6f:14:f8:c8:57:a9:b6:71:35:a0:ee:80:a5:
14:2e:17:f1:fc:45:1d:36:94:1c:ee:82:fa:be:5b:8c:03:81:
43:53:57:17:cb:c2:6b:d3:64:fd:0c:39:8a:db:30:4d:ea:27:
b3:81:fc:a5:fe:cd:a8:9d:a8:5b:a0:26:bf:dc:8d:7b:f0:25:
b4:7a:64:ff:74:7d:e9:66:1a:6b:79:9d:23:6f:7f:fc:04:30:
bf:df:20:0d:f6:df:4d:8b:89:00:64:e3:5d:09:37:00:a5:c7:
34:37:3e:c6:04:d5:cc:29:01:91:7f:25:2a:e2:75:37:e3:a9:
21:5d:f6:f1:79:2a:9c:85:08:c6:84:80:de:51:44:9b:39:e9:
32:72:52:12:ef:39:5c:f4:c5:8a:86:2d:d4:85:d1:69:69:12:
d2:d0:e0:95:ae:42:33:03:4b:79:ef:0c:50:3c:54:75:ed:74:
16:bc:93:c2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6qUfmx8noXomdchwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI2MDczMDAxMDAxMloXDTI2MTAyODAxMDAxMlowLzEtMCsGA1UEAxMk
MzllMTg3NWUtNGI2Ny00NmM2LWI0YmQtMWYyNGU1MWYxZTcxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3c8go12TLH7CNpxx3dw2dvU1+rqrNEYmIIV
Tv7SSoP72L1MaoTIx7yM1BT7GVPxTlvr52sG4eYJK3Z7HMBQv8wUpoy5h9cHH66S
U0X6FK/9XWLmNGBqW3y1FtQ0peffaYYGFsdCslFUfqYBoLCVVLrEU2pUcIn+2YiN
/qJgyxd5dxTQipP6lZOag0QtvNHl+HmqALmr4/SomWPw9qtKnw7sRv08hi43Nce2
6ZzeXHPfioVM607UB6TCOeREaG4K7JxYt9jazvZn76+ToSjgvKHuXD0GWx6HzDii
+uwXKnenVi7kgTtbz4paFYKH5OrtjddUKcLZ12Nvv/654yW4vwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNbHpUDP5gJE1DGo+vtMuWPPns4IMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYjVjYzY2MTAtYmVhZi0z
ZDUyLWE3OTQtM2RjNDU3ZWU2Y2VjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRiCMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHEHwmHgYyS3rCAV08iIxpmFywwPhSyQyY1toBQYu20ipq4/Gg/ML3SO
AtOE2zOCm0FtAG5MM4ZHKQ0UXfWjrX7zayC42KJwWwEIWtgubxT4yFeptnE1oO6A
pRQuF/H8RR02lBzugvq+W4wDgUNTVxfLwmvTZP0MOYrbME3qJ7OB/KX+zaidqFug
Jr/cjXvwJbR6ZP90felmGmt5nSNvf/wEML/fIA32302LiQBk410JNwClxzQ3PsYE
1cwpAZF/JSridTfjqSFd9vF5KpyFCMaEgN5RRJs56TJyUhLvOVz0xYqGLdSF0Wlp
EtLQ4JWuQjMDS3nvDFA8VHXtdBa8k8I=
-----END CERTIFICATE-----
Generated at Fri Aug 7 21:43:50 2026 by rpki-client