
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/33d78819-d68b-349a-8527-6568c3437399.roa
File: 33d78819-d68b-349a-8527-6568c3437399.roa (raw, json)
Hash identifier: 9cDAKuEAVXNvS1hQQ0nSDba0w9HhxwWHifNGphl6m5Q=
Subject key identifier: F8:4F:EE:EC:CD:BD:CA:BF:14:57:E8:22:AC:06:A6:B3:B4:0F:39:17
Certificate issuer: /CN=aac59959-e898-42ad-9d0a-f1b87a7d0114
Certificate serial: 010D0C9F4328584EA78738659C83A9D9447EA100
Authority key identifier: BA:5E:03:A7:6E:5D:7C:17:23:C9:B5:84:50:DC:8D:58:4B:AF:80:BE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/33d78819-d68b-349a-8527-6568c3437399.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 46294
IP address blocks: 76.77.18.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:87:38:65:9c:83:a9:d9:44:7e:a1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aac59959-e898-42ad-9d0a-f1b87a7d0114
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=493f6297-7e9c-4da7-9566-b1b014dd3e2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:0b:7b:55:74:59:13:a2:d7:24:ca:77:f7:72:
cd:26:d1:be:37:65:30:81:b2:79:cc:dc:7b:72:6e:
4a:b8:b6:d6:bf:fb:5a:cb:21:af:99:59:ed:62:4b:
ed:59:69:a4:0a:1d:5c:57:4a:ca:cc:ed:47:29:17:
3f:06:3e:17:f0:99:49:28:80:8e:f0:1e:1e:5f:fa:
b6:38:f4:2e:e3:c0:1e:2b:0f:4d:bc:2d:2b:61:d5:
8e:49:92:3a:d7:d4:e8:16:78:4d:f7:d1:08:20:05:
a4:9f:63:c7:1a:ef:da:e2:59:49:98:c7:1e:ef:b4:
d3:83:e1:c1:70:1b:ae:96:12:8b:84:95:2e:b1:64:
9f:7e:a6:75:df:9d:b9:28:21:35:57:df:bd:05:63:
ed:a6:59:7f:95:61:e9:ed:10:a8:c2:bb:cd:b9:22:
b1:40:b8:3c:1d:66:9b:97:7d:3d:58:13:8d:69:8b:
5c:7e:fc:d5:55:f1:0e:15:9b:7c:80:46:61:4b:3e:
21:9b:77:15:e2:e6:48:cc:e9:91:42:fe:5c:74:79:
d9:51:34:80:c9:ec:0c:ac:be:92:a1:5b:cc:6a:52:
bb:90:9b:b3:28:68:76:da:6e:0c:77:61:64:ea:9d:
48:2c:89:20:6c:2f:12:56:10:58:d8:db:68:23:fc:
85:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:4F:EE:EC:CD:BD:CA:BF:14:57:E8:22:AC:06:A6:B3:B4:0F:39:17
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/33d78819-d68b-349a-8527-6568c3437399.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114/aac59959-e898-42ad-9d0a-f1b87a7d0114.crl
X509v3 Authority Key Identifier:
keyid:BA:5E:03:A7:6E:5D:7C:17:23:C9:B5:84:50:DC:8D:58:4B:AF:80:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/aac59959-e898-42ad-9d0a-f1b87a7d0114.cer
sbgp-ipAddrBlock: critical
IPv4:
76.77.18.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ab:70:08:8e:56:d0:a2:3a:c3:16:b3:ca:28:66:28:48:da:74:
2f:be:a6:b5:69:c9:a7:eb:d3:e4:f6:75:dc:30:c6:84:ce:b9:
4b:97:c9:22:0a:9b:68:69:4c:0e:fd:68:b0:69:04:68:cb:a8:
61:61:ea:07:8b:56:ec:67:1f:0f:72:da:d4:49:ae:a0:62:df:
bd:6a:21:f2:2e:aa:ef:01:52:de:5e:8b:19:c0:2b:5b:8b:af:
7c:14:34:f2:9b:d8:3a:12:75:14:a3:2a:2a:94:7f:6c:46:b5:
67:6d:da:19:fd:22:71:e5:6c:71:7a:8a:9a:a7:ec:76:31:13:
09:ef:00:3d:e5:71:2d:c9:76:4f:63:01:db:31:c2:27:86:5f:
f4:b8:68:e2:8a:df:ea:09:c0:46:17:ba:81:5b:2f:f7:fe:66:
7b:30:0e:c3:f6:e5:9b:15:e4:d3:4a:3f:ab:70:bb:9c:ca:a4:
66:90:21:15:24:a4:7a:34:32:db:21:a7:18:47:26:dc:e8:0b:
02:36:66:6d:92:7d:85:47:e5:84:b6:11:25:6e:e4:e9:8f:b6:
59:43:31:7a:af:da:d1:a8:60:74:8b:4d:8d:b5:c9:93:f4:76:
68:e7:68:d5:d4:4a:bb:34:e9:0e:f4:4b:7a:fc:9e:1b:64:9f:
e6:90:12:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:22:17 2026 by rpki-client