
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/70b34a7f-46b7-31a3-9db4-62ee9a7297a5.roa
File: 70b34a7f-46b7-31a3-9db4-62ee9a7297a5.roa (raw, json)
Hash identifier: Lmxfk3mtCSTAXVWs9s58f0+vIYP1K2ILXG7weA7ETCE=
Subject key identifier: D4:FC:F4:0A:FB:F7:82:5B:9D:23:F9:40:3F:6C:D2:FC:81:5D:4E:7F
Certificate issuer: /CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
Certificate serial: 010D0C9F4328584E9EAFE8EEB9D1755C6A411C80
Authority key identifier: A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/70b34a7f-46b7-31a3-9db4-62ee9a7297a5.roa
Signing time: Sat 25 Jul 2026 21:00:12 +0000
ROA not before: Sat 25 Jul 2026 21:00:12 +0000
ROA not after: Fri 23 Oct 2026 21:00:12 +0000
asID: 399185
IP address blocks: 16.7.32.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:9e:af:e8:ee:b9:d1:75:5c:6a:41:1c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa
Validity
Not Before: Jul 25 21:00:12 2026 GMT
Not After : Oct 23 21:00:12 2026 GMT
Subject: CN=7c4f3096-d4db-4315-8d75-fdce769c3e29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:a9:15:a8:b4:63:03:ba:2d:18:fb:06:4b:30:
a1:1d:8a:23:d4:33:75:19:5e:b5:01:98:2f:ba:bd:
13:a7:0e:95:4c:8c:fa:b0:06:31:74:e4:e2:39:06:
c6:4a:43:d4:b9:bf:16:68:6e:57:1c:9e:8e:b8:a2:
52:fa:3c:d3:ad:5a:b1:00:d1:69:f2:46:16:20:ba:
1a:b0:db:9c:0f:59:54:8b:cf:3f:7d:59:f8:4b:db:
9b:78:be:47:ee:94:f8:40:89:78:27:da:47:d3:2e:
0b:52:48:10:3a:26:d8:c8:8f:29:09:44:1d:cd:66:
e4:02:3a:29:aa:c3:4d:a0:a5:c9:9f:10:e4:cd:aa:
12:43:b1:39:d7:86:96:0c:2b:fb:7f:33:67:ab:83:
7b:05:de:eb:66:04:83:0d:3c:9d:99:e7:25:93:db:
ce:d2:89:0c:bb:12:1e:15:01:36:fb:76:ec:f4:3f:
54:35:5a:64:42:c9:79:8f:a3:f0:e2:af:09:ab:9e:
28:9d:8e:72:5a:2f:50:a9:94:05:8a:0f:9d:b5:aa:
c4:0f:3f:52:4e:c2:2b:32:ed:26:16:38:da:97:3e:
4f:8c:33:6b:3b:26:30:46:f0:30:b0:5f:17:89:cf:
82:86:02:3b:77:ba:32:5b:84:74:21:a5:a2:ac:02:
64:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:FC:F4:0A:FB:F7:82:5B:9D:23:F9:40:3F:6C:D2:FC:81:5D:4E:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/70b34a7f-46b7-31a3-9db4-62ee9a7297a5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.crl
X509v3 Authority Key Identifier:
keyid:A8:43:7A:D0:A3:E0:15:CC:9F:23:55:96:F3:C5:01:F0:B6:70:64:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5abc34ba-5ab4-4f1a-965e-3d6ec04cdbfa.cer
sbgp-ipAddrBlock: critical
IPv4:
16.7.32.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:75:e1:7e:a9:b1:46:1a:03:99:77:d9:ca:91:ef:85:11:48:
3d:24:93:88:8a:ee:a7:61:9e:9a:7e:26:04:4b:d6:87:72:c7:
eb:f3:4b:80:2f:5e:79:37:25:17:ef:0b:f8:68:b3:0f:bb:bf:
84:1f:40:a9:d7:e9:f8:f5:52:25:4f:59:03:28:fe:1b:45:25:
9b:2d:6b:1d:71:11:3d:5b:5a:86:f5:2e:16:35:96:3c:e2:71:
98:bc:e8:6c:fa:26:d7:b5:b3:68:fe:8a:da:f4:f4:02:27:27:
eb:71:75:06:1b:a4:b4:eb:45:4f:22:f6:e7:a0:0c:c8:ff:3f:
2a:84:9e:96:3b:2b:3d:61:5f:a0:17:20:aa:21:32:c6:c8:f2:
69:0c:21:e3:78:0a:57:19:dc:6f:ad:92:2c:5e:52:00:9b:b5:
44:9a:14:ba:95:b4:1d:11:3d:dc:d1:a6:3e:06:4a:56:50:9d:
0f:9e:06:fc:93:c6:0e:4e:6d:99:10:5f:4f:a3:15:94:31:f0:
38:3f:dc:14:e3:fd:eb:6e:3e:46:10:8f:d2:f4:3c:0c:9d:dd:
ab:e0:30:bd:3d:80:09:3a:73:f0:7b:88:d9:52:8e:9b:42:d7:
ff:42:51:77:fe:07:e0:5a:1c:b0:fd:a8:e7:74:db:b9:ca:a8:
9b:39:d0:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:31:22 2026 by rpki-client