
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/ff8b3da8-5090-3dfd-82d0-bddf8f74bcc6.roa
File: ff8b3da8-5090-3dfd-82d0-bddf8f74bcc6.roa (raw, json)
Hash identifier: jzDvc3IkXNTuXWGaJUR5ho71y24xHByrpUEqC4XIDCI=
Subject key identifier: 6C:98:43:88:C5:AD:42:A2:2F:87:5E:5A:0B:BA:96:F1:EC:D6:82:C3
Certificate issuer: /CN=5017ced5-6e03-4c20-9eb2-caa57a2f7829
Certificate serial: 010D0C9F4328584D746FC0EC36AA2D3816367580
Authority key identifier: 22:BE:8F:1A:61:54:7A:78:F7:5D:8A:E8:D2:40:97:34:B7:EC:79:B1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/ff8b3da8-5090-3dfd-82d0-bddf8f74bcc6.roa
Signing time: Fri 10 Apr 2026 01:00:24 +0000
ROA not before: Fri 10 Apr 2026 01:00:24 +0000
ROA not after: Thu 09 Jul 2026 01:00:24 +0000
asID: 20454
IP address blocks: 69.160.32.0/20 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/5017ced5-6e03-4c20-9eb2-caa57a2f7829.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/5017ced5-6e03-4c20-9eb2-caa57a2f7829.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 21 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:74:6f:c0:ec:36:aa:2d:38:16:36:75:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5017ced5-6e03-4c20-9eb2-caa57a2f7829
Validity
Not Before: Apr 10 01:00:24 2026 GMT
Not After : Jul 9 01:00:24 2026 GMT
Subject: CN=ca46b6c1-2196-44d0-b482-5a8933a5d005
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:f8:44:95:85:27:fe:49:fb:1d:69:e7:6b:fb:
6c:50:c2:50:84:2e:d4:ce:4b:7b:30:f0:89:8c:f1:
07:58:c4:72:c6:ae:e0:44:a9:3e:ac:6f:6f:1f:37:
82:ac:8a:e0:59:9a:14:51:d3:d8:73:11:3c:05:10:
34:26:88:5b:75:84:5c:a3:d3:cd:dd:9f:81:74:13:
64:b3:2e:c5:31:14:17:32:30:b1:bb:24:2f:f9:6b:
91:de:82:e2:c8:80:a0:61:fd:7a:03:d8:88:04:71:
29:19:2a:de:5a:7b:d7:a4:29:05:98:96:0f:fe:b1:
89:dc:14:b9:e1:f7:5a:ee:91:6e:31:2d:b0:03:01:
d5:3b:c8:e2:07:58:50:e9:2d:81:f2:ed:b9:76:6b:
e3:67:9a:38:0b:d2:17:3e:de:87:61:4e:6f:5c:2a:
39:c0:9a:78:4d:10:84:ca:f0:10:c8:63:e9:20:d9:
df:7d:86:a4:6c:9a:f9:ec:be:cb:2d:5e:ca:96:52:
3b:27:fd:38:7d:47:58:6d:b5:89:6b:71:74:ea:ff:
ac:24:06:db:e6:2f:38:f3:9f:6f:1c:ed:b8:08:5e:
a2:00:97:e5:82:9c:f9:70:8f:71:23:11:40:db:f7:
b3:0a:48:dc:e5:f8:86:63:a7:a4:eb:9e:34:c7:92:
e8:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:98:43:88:C5:AD:42:A2:2F:87:5E:5A:0B:BA:96:F1:EC:D6:82:C3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/ff8b3da8-5090-3dfd-82d0-bddf8f74bcc6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829/5017ced5-6e03-4c20-9eb2-caa57a2f7829.crl
X509v3 Authority Key Identifier:
keyid:22:BE:8F:1A:61:54:7A:78:F7:5D:8A:E8:D2:40:97:34:B7:EC:79:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5017ced5-6e03-4c20-9eb2-caa57a2f7829.cer
sbgp-ipAddrBlock: critical
IPv4:
69.160.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:b1:c2:54:cd:93:ab:e3:de:06:7e:26:61:ad:f7:06:d4:5c:
63:dd:57:49:8d:ee:a8:e5:fb:84:2e:d1:06:fc:04:fe:81:5d:
b5:dc:b0:f6:b1:f7:cf:e2:7e:d8:30:20:c2:ce:67:4c:63:53:
bd:1c:26:48:44:f7:f6:2e:08:3d:6d:8d:d9:07:4d:2a:fc:2b:
8b:93:17:a7:ce:5b:9b:b7:79:b2:da:a4:7c:8a:20:d7:53:5a:
50:26:ef:b7:06:cc:c3:17:82:9a:15:57:27:6d:21:84:7c:1d:
df:d5:13:07:02:c1:ae:7c:4c:1a:6a:40:ee:31:91:8b:b7:08:
b7:23:0c:bf:39:05:05:19:04:cd:9b:39:13:46:d4:70:4a:59:
12:fd:fd:f7:ed:6c:56:66:b1:92:7a:65:a9:d4:27:55:69:ed:
3f:e6:ce:46:01:98:15:a8:8b:f6:31:ac:23:6b:74:dd:12:dd:
2a:0c:f9:2f:9d:14:8e:07:88:14:d3:e9:94:01:8f:c3:98:8f:
f3:63:59:15:ca:c1:ed:55:7a:91:0c:44:02:e3:e1:f0:f0:c2:
f5:bc:d5:53:42:0d:49:7d:16:5f:a2:73:07:a7:f8:57:7f:78:
83:fc:dc:69:83:ef:25:1a:0c:71:fc:36:7a:d9:48:d4:6f:30:
b2:04:7e:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:15:04 2026 by rpki-client