
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/4ae22426-5ad3-366b-b41f-7b6722ec2f5b.roa
File: 4ae22426-5ad3-366b-b41f-7b6722ec2f5b.roa (raw, json)
Hash identifier: J1eWKffg2XFJnrDWFAmwQ8AZI5KzqDeNFDv8no+D80g=
Subject key identifier: 52:BC:D0:73:B8:98:81:ED:9A:5A:17:02:6A:04:24:1D:24:F0:58:81
Certificate issuer: /CN=aff0c042-cf36-4d6f-954a-bee61a5b3dcc
Certificate serial: 010D0C9F4328584E9EAFE496D3916926DEBF335C
Authority key identifier: 60:C9:6D:C0:44:A6:6F:BD:2F:6E:CB:03:EA:6B:17:FC:BA:6C:2E:89
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/4ae22426-5ad3-366b-b41f-7b6722ec2f5b.roa
Signing time: Sat 25 Jul 2026 21:00:12 +0000
ROA not before: Sat 25 Jul 2026 21:00:12 +0000
ROA not after: Fri 23 Oct 2026 21:00:12 +0000
asID: 53454
IP address blocks: 162.244.128.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/aff0c042-cf36-4d6f-954a-bee61a5b3dcc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/aff0c042-cf36-4d6f-954a-bee61a5b3dcc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:9e:af:e4:96:d3:91:69:26:de:bf:33:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff0c042-cf36-4d6f-954a-bee61a5b3dcc
Validity
Not Before: Jul 25 21:00:12 2026 GMT
Not After : Oct 23 21:00:12 2026 GMT
Subject: CN=8027fa62-69b9-47ff-9669-64f470b0a92f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:4e:b4:dd:5a:54:08:63:cb:89:39:71:41:db:
d6:ff:93:01:34:52:d7:a5:46:f3:58:13:7b:e5:95:
32:61:d8:68:99:36:b1:d5:0d:b6:f0:da:82:be:33:
51:95:66:67:38:94:5f:a3:ca:4e:cb:78:ba:f7:be:
6c:3a:61:76:18:c6:19:59:c7:b6:13:0e:c5:81:35:
9f:68:8c:61:a0:ac:c0:a5:db:c8:8f:97:58:6c:82:
9c:46:90:1a:e8:e8:9b:b0:31:89:d3:54:e7:84:0b:
b9:46:83:8f:30:55:24:6d:16:16:5b:69:eb:0a:9c:
06:9d:c0:a8:8b:e6:31:8b:84:66:2f:7c:4a:d5:73:
72:fc:0a:71:30:9f:ce:7d:6a:e6:30:48:f1:48:8e:
fe:b7:d8:0a:b3:44:4e:09:7a:66:a8:78:8d:60:f8:
e2:fe:8b:13:f6:b3:b5:74:f2:3d:a8:65:e8:99:5b:
39:d0:73:a1:0e:74:c9:ad:c8:73:8b:6d:33:e9:9f:
12:b0:4a:7a:1f:b8:b8:3c:65:83:e3:65:0d:35:c6:
24:3f:64:dc:b4:e6:38:1a:71:9c:d3:d4:f9:6d:13:
b0:f1:c1:05:47:06:0f:34:9a:6b:1d:33:54:e1:65:
18:83:bb:64:66:ad:f9:ef:82:bf:4b:b1:2f:5a:3c:
57:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:BC:D0:73:B8:98:81:ED:9A:5A:17:02:6A:04:24:1D:24:F0:58:81
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/4ae22426-5ad3-366b-b41f-7b6722ec2f5b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc/aff0c042-cf36-4d6f-954a-bee61a5b3dcc.crl
X509v3 Authority Key Identifier:
keyid:60:C9:6D:C0:44:A6:6F:BD:2F:6E:CB:03:EA:6B:17:FC:BA:6C:2E:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aff0c042-cf36-4d6f-954a-bee61a5b3dcc.cer
sbgp-ipAddrBlock: critical
IPv4:
162.244.128.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:81:2b:8b:c3:fd:a4:7b:f2:f8:5f:0f:02:00:e1:9f:84:1d:
d4:b7:00:a6:67:56:5f:ae:9c:89:3d:49:10:27:99:44:8d:e6:
46:1e:4b:ab:7f:67:cc:8f:7e:b4:46:b5:32:84:4e:75:0d:7d:
e0:83:1f:6d:7a:ee:a9:f3:c9:6f:a1:1c:45:44:d2:4c:6a:df:
f8:1c:21:b5:c3:94:b3:0e:2e:ed:bb:b4:41:c1:3c:a5:29:a8:
87:4d:73:36:e4:1a:4b:94:c0:4b:c8:61:00:f2:5b:62:20:04:
b6:49:73:67:86:98:0f:0f:04:97:fb:fc:ea:06:eb:f5:2f:ab:
16:2d:71:97:5d:cb:d5:9a:30:6e:ac:e3:de:b5:b0:e2:16:a7:
99:06:98:2f:cf:de:3e:c8:79:3e:99:8e:a0:3d:d1:01:00:a8:
cc:74:25:39:1a:50:09:44:f6:22:b9:22:2e:1a:cb:7e:2c:4e:
08:9f:e6:b5:59:4b:04:ab:d3:f7:cb:6f:3c:72:9e:4a:03:8a:
aa:59:63:41:d1:ec:b9:b3:d5:d0:cf:77:86:dc:25:eb:4c:5d:
02:a4:c4:6c:0b:d1:34:9a:aa:77:4a:49:3d:02:1b:6f:05:51:
a6:f1:bc:3e:fe:ae:b5:d0:d1:76:ac:9f:43:45:c1:c9:58:07:
51:a8:98:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:29:24 2026 by rpki-client