
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/df5385bc-7c9f-361d-8431-48648c5562f2.roa
File: df5385bc-7c9f-361d-8431-48648c5562f2.roa (raw, json)
Hash identifier: XjvUWPiGReSPQmauwkBziKLWsGBKXebHzUuO7gxnVfY=
Subject key identifier: 52:F5:9B:CC:12:B0:85:EF:EF:62:B4:4C:36:A4:F5:B5:DF:7E:01:F5
Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial: 010D0C9F4328584E4AEF32CB14C7D340EEBAAD80
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/df5385bc-7c9f-361d-8431-48648c5562f2.roa
Signing time: Thu 25 Jun 2026 21:00:12 +0000
ROA not before: Thu 25 Jun 2026 21:00:12 +0000
ROA not after: Wed 23 Sep 2026 21:00:12 +0000
asID: 6643
IP address blocks: 173.199.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 15 Jul 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:4a:ef:32:cb:14:c7:d3:40:ee:ba:ad:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
Validity
Not Before: Jun 25 21:00:12 2026 GMT
Not After : Sep 23 21:00:12 2026 GMT
Subject: CN=0710080a-8e34-40b3-940d-14377d7e20ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:bb:56:74:28:76:f7:db:9b:21:14:a6:c6:4f:
78:45:a5:f3:24:93:ac:39:f5:2f:b0:cb:50:99:85:
4c:91:ff:22:22:1b:20:3e:bd:51:f9:66:20:91:83:
ff:26:fd:e5:bf:84:4a:c2:32:f1:d7:85:92:2a:b5:
2a:3a:03:8d:34:4a:7e:66:a3:3a:20:2d:2c:f6:21:
c8:c2:53:a3:87:ab:b0:c8:11:d6:97:7d:ca:ff:d3:
84:1e:06:a8:ea:73:01:0d:bd:34:36:39:1a:11:e0:
0f:91:22:d8:cf:c8:dc:9d:f7:d5:3b:f1:46:f5:d2:
66:45:43:8d:66:53:f5:19:46:17:98:d1:02:fc:5e:
ba:87:5d:65:18:b0:90:b7:75:19:67:25:31:4d:68:
ce:09:b1:3d:fb:6b:dc:02:ed:43:ac:f4:f0:5b:9d:
9c:a6:da:28:ba:95:19:ae:73:d9:e7:8e:ca:50:37:
f5:f1:81:be:fa:60:33:e8:ae:b8:fe:16:c9:65:cd:
cc:a6:f4:63:11:21:c4:49:81:68:47:52:d8:18:94:
58:7f:60:d4:1f:02:a4:53:52:ee:f8:35:be:79:33:
b8:25:2d:27:de:a6:23:47:f3:82:aa:68:5b:78:20:
02:9f:de:28:b5:9b:81:d5:0c:71:5c:34:d5:63:61:
6a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:F5:9B:CC:12:B0:85:EF:EF:62:B4:4C:36:A4:F5:B5:DF:7E:01:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/df5385bc-7c9f-361d-8431-48648c5562f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
X509v3 Authority Key Identifier:
keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
sbgp-ipAddrBlock: critical
IPv4:
173.199.11.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:6f:79:20:19:17:36:e6:25:a2:91:8e:17:26:03:51:64:4c:
60:b7:e7:04:90:69:d9:b6:23:ed:06:b9:b1:6c:d7:51:9e:b8:
dc:1e:e5:e7:81:e3:34:63:5c:95:14:6f:ec:c3:11:f1:49:de:
1b:de:86:6e:c3:b7:f0:da:ac:8e:76:78:e2:e1:b0:7d:16:fa:
0d:0e:1e:06:f3:12:62:be:f1:e6:8b:fe:04:6c:9e:d1:20:15:
ee:ae:18:63:b2:4a:fc:d7:7a:b4:56:9f:51:0b:91:4b:c2:d0:
ef:c9:55:57:75:4d:58:80:95:99:e4:b4:c9:22:8a:54:98:62:
f7:0c:77:90:61:41:17:e4:46:92:86:ce:4f:8a:b1:0b:1b:96:
35:08:05:af:57:5b:c3:d0:5c:1b:3e:94:b4:41:d9:8c:f5:8b:
d5:46:94:cb:e7:13:1e:90:83:1d:9b:d5:12:b7:81:d7:d2:8b:
51:7a:f3:90:88:9e:1d:46:50:c2:e0:f4:81:5c:fb:e7:f8:3d:
46:4a:f2:b9:a5:5c:2e:43:b3:d2:8f:0e:16:32:f8:04:e1:ef:
58:69:13:08:b1:5c:20:f0:b3:94:3c:fe:71:95:08:9e:9b:bd:
b1:ce:53:1f:dc:41:bf:88:e9:d3:e5:1e:ba:f0:c8:bb:17:2e:
6e:97:d7:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 19:54:31 2026 by rpki-client