
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/baff326b-1f24-468c-b9c6-fa089a461350/296786d6-6c0e-38ad-bf10-759d9a0d6aa8.roa
File: 296786d6-6c0e-38ad-bf10-759d9a0d6aa8.roa (raw, json)
Hash identifier: WHSkxQS0y2EzuZSP+RUIG69T8lK4bQHp02K7bW6r1nw=
Subject key identifier: 33:5C:D7:CC:EF:DB:0C:8F:E7:33:C2:BE:98:69:2A:90:5B:25:21:CB
Certificate issuer: /CN=baff326b-1f24-468c-b9c6-fa089a461350
Certificate serial: 010D0C9F4328584EA797ED5F041E936C4F128000
Authority key identifier: 05:2D:96:20:77:4E:FD:BC:47:2C:1C:A1:09:8E:5B:31:5D:1C:FC:32
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/baff326b-1f24-468c-b9c6-fa089a461350.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/baff326b-1f24-468c-b9c6-fa089a461350/296786d6-6c0e-38ad-bf10-759d9a0d6aa8.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 18978
IP address blocks: 107.163.160.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/baff326b-1f24-468c-b9c6-fa089a461350/baff326b-1f24-468c-b9c6-fa089a461350.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/baff326b-1f24-468c-b9c6-fa089a461350/baff326b-1f24-468c-b9c6-fa089a461350.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/baff326b-1f24-468c-b9c6-fa089a461350.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 01 Aug 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:97:ed:5f:04:1e:93:6c:4f:12:80:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baff326b-1f24-468c-b9c6-fa089a461350
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=f321cc09-bb00-4749-b820-4aa1b68d9eb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:bc:f4:9b:2c:37:ef:ae:1e:68:79:21:f8:3d:
22:e2:59:83:0a:65:c6:da:cf:79:28:46:1f:8f:46:
23:ac:fb:e5:8b:11:65:63:22:cd:d9:63:0d:55:56:
2f:fb:c5:1c:91:72:8f:11:73:e8:b1:ae:95:2d:e4:
9c:28:d4:2f:5d:7f:bd:d4:46:e1:89:0f:c3:d1:92:
32:a9:6f:33:ba:47:02:ec:69:5d:b5:86:2b:d1:68:
a5:43:ec:fc:aa:b3:cb:58:fb:0b:8d:89:bc:3b:b3:
4e:70:77:51:0f:fb:9c:87:5a:85:89:b8:e6:92:13:
84:8a:11:21:4c:3e:63:1d:1e:6d:e2:f2:5d:1f:53:
9e:40:a7:c7:5d:04:88:44:13:58:31:33:4a:00:76:
65:85:c1:56:4a:d1:73:18:1c:fb:b4:41:1e:b0:b0:
b0:b5:b3:f5:51:d4:73:11:e7:23:f1:9b:19:b1:59:
48:52:f8:91:df:47:7f:cd:52:d7:29:88:53:8f:49:
f9:e2:c7:fa:62:b5:c4:08:5f:c9:1f:b7:1b:d4:7d:
29:67:d2:b0:df:50:4f:18:ce:9e:ba:4f:96:f4:94:
39:5e:e6:5d:bb:ba:ce:c1:78:20:33:da:eb:32:e5:
5d:a5:af:02:c9:91:27:4d:03:30:ca:f2:21:90:5d:
48:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:5C:D7:CC:EF:DB:0C:8F:E7:33:C2:BE:98:69:2A:90:5B:25:21:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/baff326b-1f24-468c-b9c6-fa089a461350/296786d6-6c0e-38ad-bf10-759d9a0d6aa8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/baff326b-1f24-468c-b9c6-fa089a461350/baff326b-1f24-468c-b9c6-fa089a461350.crl
X509v3 Authority Key Identifier:
keyid:05:2D:96:20:77:4E:FD:BC:47:2C:1C:A1:09:8E:5B:31:5D:1C:FC:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/baff326b-1f24-468c-b9c6-fa089a461350.cer
sbgp-ipAddrBlock: critical
IPv4:
107.163.160.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:57:56:73:f2:bd:6e:57:ce:6b:35:c6:9b:63:9b:2c:c9:fa:
38:0c:9d:cf:e3:ff:c6:81:0c:3a:c5:c5:50:fc:d5:9c:c0:6d:
5a:77:09:a2:16:61:8c:43:d2:31:81:9f:1c:89:04:34:f4:9a:
66:cd:77:0b:ad:98:2e:df:d5:6f:f7:1b:42:45:0a:8e:6f:fd:
62:21:9a:f3:6a:62:46:41:fa:f8:36:62:d2:85:d9:78:b4:d4:
58:d5:a4:96:73:66:0d:6c:d9:8e:7b:dc:df:a3:b2:73:e2:36:
91:fb:18:26:86:f6:1d:56:31:30:fd:24:11:7a:d9:81:dc:2b:
cc:65:46:4e:77:06:bc:ea:84:9f:2e:d3:b1:79:f7:1a:25:61:
44:0a:9c:f3:89:fc:77:79:e7:4d:8b:57:1a:17:3a:62:af:13:
43:8d:19:6b:cd:fe:5d:bd:2d:e1:e9:5e:46:2c:30:98:34:5c:
96:dc:09:0f:c8:6b:2e:a8:17:c5:f0:8a:2c:7c:35:64:66:58:
45:c6:5e:30:2b:d0:28:a1:42:30:8a:6f:f9:d5:f9:59:01:b8:
21:4e:29:ae:df:1e:de:e1:b9:cc:bd:70:11:09:d0:17:68:4a:
4a:cc:07:12:74:a1:4c:85:52:49:6b:84:34:a7:dd:9d:2a:5f:
52:94:f9:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 07:07:43 2026 by rpki-client