
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f/5af6c3a4-de4c-3553-81c6-60041b0a2abd.roa
File: 5af6c3a4-de4c-3553-81c6-60041b0a2abd.roa (raw, json)
Hash identifier: kca0RbkpV2G8+c6UH3RsYlCWCC7wi7MEkMy0SnbJmdM=
Subject key identifier: A6:A2:76:31:9A:1A:A6:31:F5:DD:9D:CF:16:AA:D9:04:3C:B9:C2:9C
Certificate issuer: /CN=370b86f5-0ae7-4e6c-a32e-08310156df3f
Certificate serial: 010D0C9F4328584EA78738A1C3910832DCB036C0
Authority key identifier: 2A:70:6E:55:84:63:E3:EE:72:60:90:EA:4D:26:CE:F2:9C:2E:98:D0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f/5af6c3a4-de4c-3553-81c6-60041b0a2abd.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 64227
IP address blocks: 50.20.196.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f/370b86f5-0ae7-4e6c-a32e-08310156df3f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f/370b86f5-0ae7-4e6c-a32e-08310156df3f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:87:38:a1:c3:91:08:32:dc:b0:36:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=370b86f5-0ae7-4e6c-a32e-08310156df3f
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=bb547639-be35-4dd8-8eaf-e8e58070a475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:bb:de:0a:9e:5b:a3:30:6b:0e:ca:15:19:92:
cf:e0:79:1b:9b:66:88:35:a5:54:eb:35:1b:d2:a9:
0f:23:a1:26:01:c2:d1:b6:61:bb:96:51:25:75:2a:
a1:f9:40:fe:fd:b2:54:13:b9:a3:37:b4:c2:fe:4f:
ee:69:f1:42:3d:27:b2:2d:c9:a1:f9:8d:0c:1e:39:
4e:cf:2b:70:bd:15:80:56:1c:03:18:52:12:55:b1:
a8:1a:c9:aa:21:5c:41:86:34:27:29:f9:a4:b7:bc:
8b:53:70:99:d1:df:d4:a7:b6:89:62:14:bd:20:a1:
52:8c:4a:2f:b4:0f:2c:d4:1d:99:70:fb:cf:98:dc:
9c:d2:43:e7:db:68:85:e3:61:4b:3e:53:ba:fb:7a:
0c:15:3c:ed:87:80:dc:67:dc:41:17:b1:57:c8:cd:
de:0a:42:4a:fd:26:4a:b3:74:ad:55:85:7f:dd:1c:
6e:cc:1c:39:6c:4b:ab:60:8d:41:ed:c1:fa:99:01:
81:02:0f:6f:d3:f7:2e:07:8b:00:f9:cc:ec:03:d7:
50:0e:5e:f1:00:75:ab:a9:87:22:fb:da:21:5c:6f:
77:fa:eb:9b:68:c3:f0:06:c6:3f:f0:e7:0f:3c:29:
6f:be:4d:ee:3f:ca:76:65:04:24:9a:da:d6:1d:9c:
30:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:A2:76:31:9A:1A:A6:31:F5:DD:9D:CF:16:AA:D9:04:3C:B9:C2:9C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f/5af6c3a4-de4c-3553-81c6-60041b0a2abd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f/370b86f5-0ae7-4e6c-a32e-08310156df3f.crl
X509v3 Authority Key Identifier:
keyid:2A:70:6E:55:84:63:E3:EE:72:60:90:EA:4D:26:CE:F2:9C:2E:98:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f.cer
sbgp-ipAddrBlock: critical
IPv4:
50.20.196.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:ea:5e:b5:ef:aa:48:0f:17:69:37:36:a4:d0:18:02:ab:02:
f1:63:16:67:15:6b:ab:76:99:56:d3:5f:26:17:c6:fa:8e:3f:
8a:88:16:92:37:c5:3d:96:1e:1f:26:16:6d:48:c1:e9:a5:f1:
3e:3e:b4:79:3f:1f:3d:a6:23:e8:ea:22:30:b5:2c:68:97:23:
77:56:8a:24:c3:bd:33:e0:9e:34:8c:d7:76:70:8b:a1:81:25:
0e:6a:3f:de:0d:25:d8:fb:c5:85:1d:a7:1b:0c:44:f6:09:d0:
fd:c9:b9:ca:06:25:94:c5:87:8b:4c:5a:90:22:ea:12:e4:b7:
a3:38:22:d5:74:03:80:b9:ee:96:d2:d5:ac:19:16:2e:60:76:
d4:7a:a6:06:1d:81:cc:9f:b5:2a:b9:d0:2f:6d:5a:eb:74:e0:
d8:65:f3:13:c4:d5:19:e0:95:39:6f:07:e8:b4:ae:f7:55:3a:
3c:b6:11:d3:80:53:49:12:bb:c5:31:58:1e:d0:9f:12:e8:72:
c0:66:7c:da:e6:2b:06:b6:55:80:b9:20:06:15:b1:c0:0e:1e:
8b:0e:49:25:03:6c:f9:ad:c2:b2:b4:67:fb:13:63:db:38:30:
d3:5b:bc:1a:0f:16:3d:ec:ea:c6:94:8a:e1:14:6b:97:3f:fc:
02:d0:c0:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:10:35 2026 by rpki-client