
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d3734592-2041-34fe-a749-b1b6a5fd8bbf.roa
File: d3734592-2041-34fe-a749-b1b6a5fd8bbf.roa (raw, json)
Hash identifier: aKVVPOmhTQ6EmJQmkDP5IFMZ3SjS9Hd7atOYIazb7vc=
Subject key identifier: 84:52:E0:72:A9:1C:7E:F9:94:FC:A5:D2:A3:73:81:F0:B2:B9:2D:FF
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328584EAA51FB9F3CE47504A89C7F80
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d3734592-2041-34fe-a749-b1b6a5fd8bbf.roa
Signing time: Thu 30 Jul 2026 01:00:12 +0000
ROA not before: Thu 30 Jul 2026 01:00:12 +0000
ROA not after: Wed 28 Oct 2026 01:00:12 +0000
asID: 15169
IP address blocks: 70.32.158.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 08 Aug 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:aa:51:fb:9f:3c:e4:75:04:a8:9c:7f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jul 30 01:00:12 2026 GMT
Not After : Oct 28 01:00:12 2026 GMT
Subject: CN=c9b3011c-44b4-4f75-b6bc-d078a41ec2f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:c5:9b:e5:1a:aa:34:85:42:6c:b1:34:6a:ea:
ae:1f:8d:b9:f6:dc:5a:a4:82:8b:3c:6e:3c:9b:27:
41:70:ef:05:f0:7e:f4:73:7e:aa:16:52:da:9c:e1:
32:fe:ca:4c:b7:73:64:91:00:cd:ff:41:a6:ac:f3:
bb:a6:92:43:b3:0b:fb:ca:2f:4c:63:9c:a8:15:0b:
1c:47:b2:a2:48:d2:fa:e2:50:a8:c6:1f:b7:5a:b1:
57:b4:1e:66:cd:7b:a7:81:ae:6a:a5:73:e5:83:59:
ce:ca:35:7f:99:b3:a1:67:7f:03:a9:e0:e6:cf:e8:
be:09:95:0d:8c:20:60:29:24:7a:20:15:2f:0c:d0:
61:2b:4f:89:69:03:47:ba:40:fb:ee:1b:bc:41:d7:
53:85:f7:36:58:e6:9d:84:49:fb:bf:03:42:46:46:
4c:28:96:97:49:f3:63:bf:87:78:b3:62:58:da:c2:
25:f1:1b:cd:a1:d7:e5:89:07:c5:62:a4:22:8f:0c:
6a:22:ad:12:d9:a4:af:12:45:a6:3a:63:61:9f:72:
aa:3a:fa:da:4a:7d:96:2e:0a:a9:31:0d:d3:39:e8:
59:99:c4:74:48:88:76:eb:b7:3a:38:71:99:c3:d8:
15:c4:a9:1b:05:26:39:c1:1d:87:8f:5d:c8:c2:5e:
5a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:52:E0:72:A9:1C:7E:F9:94:FC:A5:D2:A3:73:81:F0:B2:B9:2D:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d3734592-2041-34fe-a749-b1b6a5fd8bbf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
70.32.158.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:05:c2:ba:4e:f1:47:1a:06:02:5f:8f:e2:28:f3:9e:5b:fd:
6c:fe:34:5d:48:a3:c9:eb:9e:27:19:52:1d:5b:9a:de:9e:a4:
cb:58:9c:a2:cf:3d:25:d4:6d:74:fa:60:14:31:b9:47:03:b6:
f7:57:a6:c6:99:d5:06:50:12:e0:6c:15:67:e1:9d:b0:29:7d:
90:8d:99:b1:7b:de:a7:39:24:60:85:8f:40:d5:01:4b:16:84:
7b:aa:89:5a:94:80:b5:e6:e6:0c:57:39:ed:e4:e6:34:a9:a9:
ec:3c:6a:92:e0:df:9c:8e:83:83:bd:52:ed:09:f5:97:09:6e:
b8:b0:df:a7:5a:0b:5d:63:51:52:7d:53:2a:55:ad:9f:98:86:
3b:4a:8f:c0:68:37:f4:36:bf:83:ad:13:1a:83:c1:a5:4c:fa:
91:94:e5:03:1b:da:0a:8b:ed:9f:6d:30:ce:03:94:41:6b:d5:
62:3f:f8:6f:0f:06:46:e5:9a:e5:a1:07:3c:10:3e:ca:7a:cf:
1c:31:be:ee:37:2f:8e:f3:60:89:2d:fe:e1:f8:9b:74:03:3c:
81:6f:00:2e:0c:df:bd:e2:31:25:8f:27:1d:ac:55:86:39:5d:
eb:d6:83:70:58:8d:ab:64:90:04:17:7b:53:5b:5f:36:e0:13:
38:5b:21:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 21:43:54 2026 by rpki-client