
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/996680e8-cf66-37bf-a1d6-3f519c7383ea.roa
File: 996680e8-cf66-37bf-a1d6-3f519c7383ea.roa (raw, json)
Hash identifier: HD4Nz2ZKT5hZBrJjqwQxvljx326yhEh6M2HkHS50piA=
Subject key identifier: 57:27:61:D3:9B:CF:19:B8:89:D8:2A:1B:06:27:13:35:C5:7C:BE:3A
Certificate issuer: /CN=a32c2393-27b5-4456-8f30-13915a38d80a
Certificate serial: 010D0C9F4328584EA7874AB0C9F8D0858298FE80
Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/996680e8-cf66-37bf-a1d6-3f519c7383ea.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 14114
IP address blocks: 157.133.128.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:87:4a:b0:c9:f8:d0:85:82:98:fe:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=a4932c8a-33b9-45f4-994f-61210171efc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:69:c3:be:11:3d:3d:1c:00:62:b5:ca:7c:7c:
44:8e:1e:51:c8:c8:cf:f9:6b:5c:a2:d1:86:1e:bf:
22:9d:71:6c:a5:02:1d:c9:64:0f:bf:dd:d6:c5:61:
ab:41:06:ab:e6:6f:ce:ff:47:7c:ed:78:ae:e4:2d:
df:4c:a3:71:f6:d8:1a:d8:55:4c:40:51:c6:b5:55:
44:43:81:81:a0:0e:8a:71:00:6a:40:f1:ad:0e:93:
eb:53:60:5c:6f:97:e0:32:11:ac:b6:ca:e6:35:96:
9e:7d:f5:4f:ba:50:1f:6f:ab:c9:89:09:91:f2:84:
64:87:81:64:2a:a6:ae:8c:a7:8f:36:88:92:ce:e8:
45:00:15:e6:a2:f1:8f:ad:c6:41:de:5c:af:20:0c:
81:68:d4:71:20:8e:22:08:e9:7e:4d:bd:8d:a9:ac:
44:e5:fd:c7:e7:1b:5c:8b:f2:1c:03:76:74:61:c4:
76:32:22:2b:ff:9d:27:b5:ac:41:d8:28:ea:41:95:
2c:e5:ae:e5:01:9c:0a:dd:fc:0a:4a:8c:d9:be:46:
71:25:c5:c9:02:8d:8a:18:86:d8:d3:3d:26:62:da:
30:e8:64:38:c8:af:84:86:d7:09:50:21:06:20:37:
ed:3b:13:52:f2:c4:8b:3e:a7:2d:1a:3e:1e:3b:53:
f9:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:27:61:D3:9B:CF:19:B8:89:D8:2A:1B:06:27:13:35:C5:7C:BE:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/996680e8-cf66-37bf-a1d6-3f519c7383ea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl
X509v3 Authority Key Identifier:
keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
sbgp-ipAddrBlock: critical
IPv4:
157.133.128.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:91:dc:1b:98:de:00:3f:21:d5:e2:f6:93:32:85:50:92:fe:
3e:47:d1:a8:e8:61:5a:64:a1:74:be:6a:69:ca:41:6f:f3:24:
62:f7:33:62:8d:80:df:21:03:7b:dd:4d:fb:1d:e9:4c:17:58:
24:41:70:38:c9:16:84:15:ed:8e:d5:c9:68:82:86:bb:62:d6:
e8:8c:e6:33:24:c6:2c:48:6c:5c:46:c1:e3:be:dd:1e:f8:a1:
28:e2:d8:0e:ed:71:78:76:fd:ab:c5:ff:39:b4:c2:33:14:54:
5b:84:2c:80:59:97:48:3d:e7:d3:35:ff:88:2f:fd:09:c8:1b:
13:67:17:59:56:8f:28:32:5d:81:c9:6c:e4:e7:91:92:30:61:
12:e0:ca:47:d8:eb:ce:62:3e:f2:d9:51:dc:8e:9b:22:f4:e4:
13:76:8a:59:38:3a:ce:5a:a1:55:95:dc:87:1b:00:8c:fb:75:
03:69:36:5e:d1:18:b2:f5:f8:2e:1e:f9:7a:b7:4d:12:f2:66:
ca:96:a0:f7:dc:36:9d:80:ee:d0:84:a5:0f:d0:af:87:07:7b:
ea:1c:c0:a5:2c:b6:82:62:be:21:08:e1:50:e9:ec:97:65:6d:
b8:1c:37:e2:42:1f:2f:26:57:77:33:46:97:e8:5b:f6:3e:98:
fb:82:9d:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:48:12 2026 by rpki-client