
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/5acf57a9-6d5d-32d9-8e9b-9a22cce1ffcb.roa
File: 5acf57a9-6d5d-32d9-8e9b-9a22cce1ffcb.roa (raw, json)
Hash identifier: Sn8x61lZ/Ljn4kMvhTCWVaTMGw6FrFy3dzSbxAi8E9s=
Subject key identifier: 9D:5B:2D:9E:01:4F:9C:5E:8F:32:F6:7F:22:74:9C:A5:11:D4:2C:C6
Certificate issuer: /CN=a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1
Certificate serial: 010D0C9F4328584DA6B012961EA6C3F3C3E58AE0
Authority key identifier: 5E:DC:0E:02:DA:6E:E4:15:BF:E2:23:91:E4:DC:A3:27:51:0B:7A:0D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/5acf57a9-6d5d-32d9-8e9b-9a22cce1ffcb.roa
Signing time: Tue 28 Apr 2026 01:00:24 +0000
ROA not before: Tue 28 Apr 2026 01:00:24 +0000
ROA not after: Mon 27 Jul 2026 01:00:24 +0000
asID: 21766
IP address blocks: 152.97.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 01 May 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:a6:b0:12:96:1e:a6:c3:f3:c3:e5:8a:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1
Validity
Not Before: Apr 28 01:00:24 2026 GMT
Not After : Jul 27 01:00:24 2026 GMT
Subject: CN=1989a6b2-e362-40e7-849c-5fa0502b8d25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:44:bf:d4:aa:5a:9d:4c:19:6d:d9:27:6f:c4:
1c:50:b3:c2:27:03:a0:a2:2c:8c:fe:45:85:02:58:
86:d1:2a:17:23:fe:73:51:81:13:79:52:32:c2:48:
6d:4f:8b:c3:b2:52:57:0e:9e:ff:d6:98:3e:52:02:
ec:d5:97:ac:ae:a7:45:0b:48:89:6a:89:03:7e:bc:
42:58:cb:a6:07:83:49:9c:9e:62:94:0c:ea:74:9e:
f3:b0:82:46:30:45:9e:9f:fc:cf:2e:7c:7b:a6:1f:
88:de:49:9e:01:e2:26:59:a3:8e:10:59:95:6a:9b:
bc:ba:bc:7b:75:3c:cf:b6:75:ca:f9:ba:0e:62:ae:
10:27:04:82:89:13:9c:ff:31:01:99:86:98:c6:52:
cf:12:f6:0f:0c:02:4e:00:77:2f:7c:a9:c4:8c:95:
fc:a5:2a:3f:09:c5:9a:99:a4:f1:88:db:1d:3b:e4:
38:99:2c:a5:56:70:d5:b5:68:55:47:a4:0f:a9:78:
fb:b4:f6:ec:6b:de:9f:35:8f:9e:92:ba:74:24:6e:
69:d7:64:1c:cf:42:08:94:7f:b7:a7:c7:b9:c3:8e:
2f:4d:d2:9f:ae:56:6b:81:71:4e:e9:57:5a:ed:67:
d2:22:29:53:0c:21:60:eb:ca:00:8d:73:cf:32:f7:
f3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:5B:2D:9E:01:4F:9C:5E:8F:32:F6:7F:22:74:9C:A5:11:D4:2C:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/5acf57a9-6d5d-32d9-8e9b-9a22cce1ffcb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.crl
X509v3 Authority Key Identifier:
keyid:5E:DC:0E:02:DA:6E:E4:15:BF:E2:23:91:E4:DC:A3:27:51:0B:7A:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a7d7f14e-72c4-47e4-ad06-a1b72f94c7b1.cer
sbgp-ipAddrBlock: critical
IPv4:
152.97.64.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ae:49:30:6a:91:aa:1e:d0:9d:63:c5:75:93:94:b5:79:5d:46:
23:97:47:d4:d2:88:3b:7e:1f:cc:28:5f:e3:1d:25:c7:61:7a:
01:90:4e:fa:e5:15:13:59:f0:d9:2a:77:54:83:74:21:fb:82:
6d:a6:32:a8:e7:e0:98:91:73:b7:b0:65:ae:14:db:d9:fa:00:
49:76:5f:7c:da:10:69:24:25:84:97:e2:48:5a:70:d6:6f:d9:
b3:ab:2b:3d:2f:f7:86:7c:ae:fa:db:7d:26:4d:a0:2d:81:12:
dd:0b:32:c6:d4:e4:91:ee:57:1f:42:96:91:f2:0f:2d:06:05:
5f:9c:6c:ca:51:24:de:29:28:5a:2e:87:78:c1:14:bf:5b:8b:
7e:f4:f2:8e:f3:84:49:8f:41:be:23:ea:86:bb:05:c2:7e:f2:
65:d9:ac:3d:a6:a1:4d:cc:7c:b1:aa:a0:17:01:32:57:f2:0b:
ed:d8:09:18:36:99:cd:ee:8a:da:96:86:ea:68:1e:a1:5a:06:
9d:67:b7:c8:4e:cb:2f:e1:a8:3f:84:e6:2d:4d:61:24:8b:53:
8d:83:a9:71:9e:66:86:60:57:c0:96:12:be:9b:f1:b3:78:84:
c8:34:51:df:51:ef:f9:75:8f:18:22:67:e4:12:e1:af:45:2f:
23:44:7c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 12:17:43 2026 by rpki-client