
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/d5f30706-6678-3210-83e0-1f1f74338577.roa
File: d5f30706-6678-3210-83e0-1f1f74338577.roa (raw, json)
Hash identifier: 8MyUE3nef+SnDWlXtvPyeOkQfF49Fu/vfJ2qcwfCLLg=
Subject key identifier: B1:82:85:A0:7C:A1:84:E9:BA:B6:DF:52:DF:31:16:58:F5:38:EB:38
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F4328584EA796FCE79DA5AF4628A5AD14
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/d5f30706-6678-3210-83e0-1f1f74338577.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 81
IP address blocks: 128.109.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:96:fc:e7:9d:a5:af:46:28:a5:ad:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=050bb70b-37e3-45da-883c-3070e04a60ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e2:f6:d6:92:2e:50:27:78:33:30:d3:18:be:
ee:64:76:0e:94:52:32:78:1e:51:f4:1c:92:f8:3b:
64:f1:10:cc:1e:af:8e:09:6a:d6:7c:fe:bf:6d:df:
0e:2e:c6:7b:ee:59:65:17:c8:41:7c:f1:d1:69:fb:
03:a9:5c:23:e1:e3:e6:8b:0b:05:7a:ca:a3:f3:7c:
9e:5f:74:64:b0:f5:91:a9:2d:bc:cd:65:f5:5d:56:
d0:0a:6b:06:35:e9:6d:6f:ec:37:8b:32:60:fb:79:
92:70:e7:53:bd:58:2a:8b:1e:86:d8:cb:af:85:dd:
07:78:44:fd:bb:bf:37:9a:22:7b:67:34:74:11:a2:
4e:66:1a:2b:91:3e:9d:4c:48:33:7b:a1:93:20:22:
7b:4a:e4:e3:7e:34:10:67:83:84:80:92:9b:e8:33:
5f:9a:e8:8d:cd:a9:2d:a0:09:e4:01:f6:57:03:74:
93:36:74:29:34:d8:88:60:89:d9:20:c5:c1:d2:f5:
46:71:29:ff:e5:c9:50:a0:ba:c7:c6:1a:17:0c:8b:
58:ea:89:60:e5:73:3c:71:10:65:57:e2:08:fc:c4:
f3:57:dc:d4:0a:0c:af:97:f4:da:9c:9c:59:8a:1c:
20:b9:e9:5e:74:52:33:fe:da:6f:f2:7b:23:37:3d:
15:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:82:85:A0:7C:A1:84:E9:BA:B6:DF:52:DF:31:16:58:F5:38:EB:38
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/d5f30706-6678-3210-83e0-1f1f74338577.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
128.109.139.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:e9:35:0e:0f:9e:3d:a5:9f:15:ac:52:d1:f1:6f:ad:0e:ba:
1d:fe:7e:c6:25:af:b9:87:6f:00:b4:a1:0d:cc:90:a1:ed:26:
17:e0:39:26:6d:46:e0:9f:1d:05:2c:c2:2f:62:0c:6e:db:22:
88:36:07:0e:22:a1:3d:36:4b:f3:a8:e0:a3:e6:10:cd:65:e9:
f1:05:00:ec:51:e6:19:f5:4a:cb:bf:b1:5b:22:07:85:0b:b9:
90:77:76:6b:b3:41:f6:42:57:b6:bf:a7:b5:34:45:c4:c1:56:
14:ca:90:42:ca:47:4a:8e:b7:1f:65:bd:b1:48:1a:a6:f5:78:
e3:6d:3b:7d:df:75:60:32:6e:ee:78:a0:e3:cb:40:23:47:e6:
6e:6b:c9:43:b1:e6:a5:06:fe:bd:c8:6e:82:df:bd:17:8c:ec:
95:7c:88:47:1b:a6:4d:76:6e:14:7c:e2:36:d7:0d:6d:7e:5f:
87:c0:ad:98:89:2b:a4:48:71:e2:04:48:79:78:15:11:0f:90:
3f:3b:68:23:95:2a:be:74:4f:0b:58:bd:bc:50:79:2d:0c:5e:
96:09:c8:a7:61:18:7f:55:c7:b8:ee:70:40:e6:9a:b7:48:6b:
4d:6c:a4:92:3c:01:7a:70:ac:61:4b:3f:79:a8:f8:92:1a:4d:
74:e1:dd:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:58:45 2026 by rpki-client