
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cf9de6ed-2ca4-32e5-901d-ba845a2dce7a.roa
File: cf9de6ed-2ca4-32e5-901d-ba845a2dce7a.roa (raw, json)
Hash identifier: vzxQHLN91qsyVVSNfxVC0vLvwCGY/edW2hamp9tiNI8=
Subject key identifier: E4:B9:DC:AB:C3:10:FA:2E:C0:9F:4E:F1:F3:6C:F8:8C:35:8D:E5:EC
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328584EAA51E40E36D2336C75F52C80
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cf9de6ed-2ca4-32e5-901d-ba845a2dce7a.roa
Signing time: Thu 30 Jul 2026 01:00:12 +0000
ROA not before: Thu 30 Jul 2026 01:00:12 +0000
ROA not after: Wed 28 Oct 2026 01:00:12 +0000
asID: 15169
IP address blocks: 74.125.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 08 Aug 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:aa:51:e4:0e:36:d2:33:6c:75:f5:2c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jul 30 01:00:12 2026 GMT
Not After : Oct 28 01:00:12 2026 GMT
Subject: CN=037bb457-f45f-4d77-a0ca-2b90316ecaec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:91:e2:b1:5d:b5:70:86:62:46:3e:94:6b:de:
72:c6:16:d7:00:e0:77:2b:7e:6c:4a:08:9b:75:e3:
6b:7a:28:be:54:22:80:69:58:4d:26:75:db:8d:03:
cf:3b:e1:46:71:be:f3:57:1a:39:fb:1c:ba:69:97:
3d:87:5c:60:c3:9f:06:56:bb:bd:50:4a:86:75:4d:
90:6d:f8:dc:f3:74:1f:f5:78:78:a4:93:7a:20:09:
20:d5:6a:a9:ef:8a:5a:3e:ea:e9:8e:63:8a:54:4e:
9f:d0:45:20:f0:5d:20:44:79:ec:99:70:4e:45:12:
44:0c:ad:31:95:23:5d:01:23:df:c3:f4:b6:43:83:
da:9e:96:c7:bc:7a:8a:9e:3c:62:46:50:35:ba:ea:
bc:e0:2f:98:c0:e0:89:0f:82:7d:00:d0:a9:f9:0b:
79:50:bd:35:c0:30:33:7e:7e:2b:93:d6:7f:15:5a:
ca:8f:f7:54:a2:39:b9:58:af:4e:da:37:46:67:78:
a2:48:05:03:32:72:81:55:8c:e3:36:c9:19:ee:73:
ad:41:5b:82:d8:9d:d6:e7:c4:07:3b:71:ad:8d:47:
07:0a:1e:5f:28:35:a2:ee:d9:dd:25:cb:45:67:4e:
2c:50:59:e3:97:76:55:a3:ac:89:be:b9:37:42:fa:
82:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:B9:DC:AB:C3:10:FA:2E:C0:9F:4E:F1:F3:6C:F8:8C:35:8D:E5:EC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cf9de6ed-2ca4-32e5-901d-ba845a2dce7a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
74.125.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a7:f7:3a:f7:c0:f6:c5:1a:5c:9d:a7:52:f8:6b:c5:0a:d8:4e:
bc:69:46:95:7d:ab:23:0d:4f:90:26:ec:07:43:09:d5:74:52:
6d:2b:32:d8:a7:4e:68:fc:dc:c3:33:ff:e4:93:9b:c9:92:78:
a0:ad:3d:17:23:5a:f3:e5:3b:c2:ed:c3:cb:92:70:7b:a8:c1:
c6:eb:30:61:f2:d2:50:0a:71:ac:72:34:8e:4a:77:14:fa:7e:
0b:b3:a0:17:b6:f6:da:b0:b5:e9:38:c4:96:1f:e7:6b:b1:87:
8a:b7:c8:0f:5a:c1:1d:e5:5b:7b:05:c7:8e:91:ef:e6:5a:b8:
5e:b7:00:3c:71:b9:8b:18:91:47:c0:3b:a6:37:31:94:6b:ac:
c3:7e:38:2b:44:be:1f:b2:c6:44:0a:9b:07:52:b5:fb:89:38:
46:86:3f:f3:c7:c6:d8:f2:e8:c3:9e:77:62:c4:8b:05:55:42:
dd:eb:f5:ff:b4:51:73:55:f6:ce:fc:14:ff:37:9c:8e:65:d4:
d0:87:88:b9:a6:32:47:7a:06:72:ee:73:4d:a6:45:96:1f:80:
38:09:9a:16:08:1b:c3:f2:cd:9c:f4:c2:fa:42:22:13:6f:99:
9f:95:b7:3e:50:9c:83:82:f5:36:ca:95:f9:f9:a9:13:d2:15:
2f:fc:19:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 22:38:22 2026 by rpki-client