
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/c1730c8f-6052-35c4-8aa7-0c45b33145b4.roa
File: c1730c8f-6052-35c4-8aa7-0c45b33145b4.roa (raw, json)
Hash identifier: cVj9Ic3WQ95RdHBdunEp2hwRitBRCxEpi/oy1CjsRXI=
Subject key identifier: 32:CB:CB:8F:B5:5C:F6:59:1B:5D:A8:84:F2:0A:18:D8:B1:79:B6:B4
Certificate issuer: /CN=590b174f-a815-4e24-9512-3236e7727928
Certificate serial: 010D0C9F4328584F3CE29B1F46F08913EF7FF740
Authority key identifier: D8:5D:C5:86:07:52:75:A5:37:2A:BF:59:D3:44:F5:EC:94:01:0B:9A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/c1730c8f-6052-35c4-8aa7-0c45b33145b4.roa
Signing time: Sun 20 Sep 2026 13:00:12 +0000
ROA not before: Sun 20 Sep 2026 13:00:12 +0000
ROA not after: Sat 19 Dec 2026 14:00:12 +0000
asID: 396479
IP address blocks: 69.72.44.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/590b174f-a815-4e24-9512-3236e7727928.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/590b174f-a815-4e24-9512-3236e7727928.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:3c:e2:9b:1f:46:f0:89:13:ef:7f:f7:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=590b174f-a815-4e24-9512-3236e7727928
Validity
Not Before: Sep 20 13:00:12 2026 GMT
Not After : Dec 19 14:00:12 2026 GMT
Subject: CN=1d0e45aa-bd91-402b-b87e-51f30628dc5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:bd:ff:a4:6b:ad:f4:16:af:e3:f2:c1:60:b2:
aa:73:47:09:92:e7:1f:11:38:99:8d:ed:5a:f3:28:
c3:53:d6:1e:bb:e3:0f:dd:f4:7d:83:8e:a1:50:cc:
8b:3a:d9:c8:31:8a:63:60:b8:07:54:ff:76:c0:39:
5d:5c:c2:00:3c:02:60:65:51:70:e9:61:a7:70:58:
e1:8b:30:96:60:82:d0:69:98:bf:8d:2a:f4:29:d9:
d0:fa:cc:e9:86:9e:0b:81:29:d3:30:3b:d6:8d:d6:
7c:af:66:c1:b0:dd:4e:d3:57:df:8e:28:f6:63:92:
0e:25:d8:9c:2e:af:18:35:4b:e4:09:f8:a6:e3:d8:
c1:87:55:0e:3f:ec:8e:12:65:03:4c:ad:df:a1:87:
62:28:7d:2b:16:0b:58:20:21:03:16:c5:68:e2:59:
16:cc:60:9a:a1:4a:ae:01:94:bf:34:7a:8f:aa:ba:
88:4e:79:80:c4:79:1e:0e:55:13:9f:de:1a:49:81:
2f:4d:81:15:b8:9e:ea:02:77:32:c8:90:3d:6f:de:
c7:61:c7:81:0e:17:be:2a:06:bc:08:35:6d:d8:26:
1b:a9:55:3c:4d:54:36:b1:71:8a:43:87:06:7d:b8:
5d:ca:74:a3:b8:5a:51:87:55:7d:cc:a5:6b:46:50:
4c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:CB:CB:8F:B5:5C:F6:59:1B:5D:A8:84:F2:0A:18:D8:B1:79:B6:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/c1730c8f-6052-35c4-8aa7-0c45b33145b4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928/590b174f-a815-4e24-9512-3236e7727928.crl
X509v3 Authority Key Identifier:
keyid:D8:5D:C5:86:07:52:75:A5:37:2A:BF:59:D3:44:F5:EC:94:01:0B:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590b174f-a815-4e24-9512-3236e7727928.cer
sbgp-ipAddrBlock: critical
IPv4:
69.72.44.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:cd:f6:75:d0:2b:cd:ef:40:af:ca:db:5c:94:28:ad:f6:c5:
93:db:a5:8d:8e:e8:02:39:d9:45:9e:7a:b2:52:3e:76:11:93:
4c:9c:1a:3a:13:b1:1b:df:59:e9:dd:a9:59:c3:98:64:ac:59:
68:18:e9:ac:87:45:bc:43:18:b7:29:b1:e1:27:1d:3d:ef:b0:
67:c9:83:26:d2:37:cb:d2:85:e5:4a:79:f5:d1:d5:dc:0d:28:
02:6e:93:46:b2:f0:d1:bb:5c:56:c7:2f:5c:83:11:80:d7:54:
4d:75:12:b5:ab:2a:8d:0d:99:59:a6:6d:a3:73:15:0e:ac:9f:
c4:7f:7d:2a:03:fa:6f:21:7b:42:0c:a7:de:c6:19:26:8e:9c:
5d:0d:24:d8:15:31:e0:6d:c1:ba:5b:a4:04:b6:1e:78:1c:65:
d8:18:ee:43:4f:3e:ff:ea:e9:ff:20:83:09:d0:b5:0c:0a:b5:
83:b6:0d:63:dc:89:2e:7b:7a:00:d6:dc:a1:b9:fe:a0:5d:c9:
98:5c:3e:15:00:f2:ad:c0:1a:26:43:81:6a:2e:8d:ff:be:47:
a5:54:7b:77:f4:f9:24:ee:20:8f:6e:92:85:98:a9:e7:98:4e:
aa:38:98:b9:5d:a0:83:3f:d7:13:67:4b:3e:12:9a:46:d0:7f:
b2:16:56:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:00:34 2026 by rpki-client