
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/c4aff5f6-4c2e-351b-bc56-896db0726984.roa
File: c4aff5f6-4c2e-351b-bc56-896db0726984.roa (raw, json)
Hash identifier: slcqfFZqvHFdPBgO1o9F7U4+ERDUvAKfkiqMzl6gMh4=
Subject key identifier: F5:52:E0:47:31:7A:B1:17:1A:E9:F2:C7:42:1B:BE:41:FE:BB:88:F9
Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial: 010D0C9F4328584E7A64DEFC788243F9D45E5C00
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/c4aff5f6-4c2e-351b-bc56-896db0726984.roa
Signing time: Sun 12 Jul 2026 21:00:13 +0000
ROA not before: Sun 12 Jul 2026 21:00:13 +0000
ROA not after: Sat 10 Oct 2026 21:00:13 +0000
asID: 30058
IP address blocks: 67.159.42.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 22 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:7a:64:de:fc:78:82:43:f9:d4:5e:5c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
Validity
Not Before: Jul 12 21:00:13 2026 GMT
Not After : Oct 10 21:00:13 2026 GMT
Subject: CN=eda81593-85e6-4147-a6da-7b08b2e7c577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:95:32:49:eb:ee:8f:86:1e:c3:6e:ba:a8:56:
a2:cc:43:ad:c0:99:68:24:80:7b:b6:24:94:c7:18:
fd:35:ee:7d:cc:83:c2:16:73:b9:49:f6:b4:70:b8:
0c:26:5b:69:c0:06:b6:38:a1:71:92:83:b4:f6:d3:
96:24:ee:49:d1:1f:11:f8:05:f9:f3:07:51:89:5c:
cc:9b:29:0e:cd:a0:2e:be:9b:20:fc:4e:35:4d:9c:
dd:6e:b3:a8:71:e7:e7:4c:ff:b7:54:5c:b6:e5:32:
c9:da:d7:b8:a4:af:cf:b1:a3:a1:98:6b:19:c8:29:
06:7e:34:1b:de:49:23:60:45:e3:a8:50:b7:cc:42:
55:d8:19:25:c9:09:29:b2:f9:e0:72:4c:4b:c6:38:
29:23:aa:93:9d:96:df:9a:3f:2e:54:b2:3b:d5:8d:
dd:3a:6a:3c:91:26:be:59:44:28:75:90:c8:9c:d3:
68:5a:70:ce:95:f0:a8:6e:e4:b2:b3:8e:dd:b7:c5:
09:50:28:a3:51:bb:95:b8:d4:af:72:7c:c3:14:7e:
fd:bf:e3:bc:f9:55:09:50:e0:de:2f:b7:49:75:d6:
27:65:a1:f1:cf:60:cd:f4:1a:28:1b:a0:34:41:41:
c9:45:45:23:98:bd:d4:85:c8:3d:05:bb:b5:56:5b:
c7:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:52:E0:47:31:7A:B1:17:1A:E9:F2:C7:42:1B:BE:41:FE:BB:88:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/c4aff5f6-4c2e-351b-bc56-896db0726984.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
X509v3 Authority Key Identifier:
keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
sbgp-ipAddrBlock: critical
IPv4:
67.159.42.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:de:38:77:1f:f4:2f:8c:73:b9:95:87:b6:55:55:b6:70:47:
d2:47:5f:bf:b1:89:fe:95:ae:15:6b:32:67:ff:1e:74:20:73:
06:62:0a:de:78:e9:17:ab:32:9f:2b:15:8b:a1:c8:90:45:ec:
05:37:4f:78:d9:5a:7b:d6:f6:5a:32:64:1e:c3:0f:73:2a:01:
03:54:b1:e1:bb:50:5a:78:91:4e:2b:f5:b0:74:68:c6:53:6c:
a0:da:7b:a4:bb:62:5c:74:4d:9b:dd:e4:a9:0d:a6:bd:4e:2d:
be:68:49:b0:ef:40:f9:44:eb:dc:13:a5:b1:f3:41:70:73:c3:
62:91:8d:4f:32:b6:b4:7f:8f:05:48:f1:e8:f2:55:82:06:d3:
86:4f:5b:62:92:d8:83:5d:42:28:3a:5f:4c:c3:61:08:2a:de:
2a:0a:a7:f9:94:4f:19:fb:f1:5f:69:c2:e9:98:50:f5:88:4b:
0e:8d:f7:ab:b3:6d:a7:4f:2d:12:e9:ed:60:fe:f6:d6:60:3b:
a4:1b:cb:f4:b2:6d:82:de:5b:82:39:a8:20:d0:78:79:97:8c:
1a:c3:d4:99:76:b1:ed:e0:fe:d0:96:d9:a4:c3:75:c9:c3:a8:
48:50:28:62:ef:85:8f:bf:92:53:fa:e8:4f:72:43:86:a1:41:
71:3b:d4:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:54:04 2026 by rpki-client