
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/28664a9a-e120-3701-b0b7-b5858658be81.roa
File: 28664a9a-e120-3701-b0b7-b5858658be81.roa (raw, json)
Hash identifier: VQlBu7BnZGQd+isPRd8aavI43O0jySoe27OLlsiHZS4=
Subject key identifier: 87:75:D5:C1:BB:03:F5:A8:BE:9A:9B:D9:CB:39:89:5F:C8:E9:1C:7A
Certificate issuer: /CN=32e3a3ad-b1ac-413d-8f98-a69429a6ca98
Certificate serial: 010D0C9F4328584EF87CBB02D6A4978835752EE0
Authority key identifier: C9:95:54:7B:39:F5:77:ED:0B:E3:8A:70:7B:F6:77:43:FA:AC:C9:7D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/28664a9a-e120-3701-b0b7-b5858658be81.roa
Signing time: Thu 27 Aug 2026 01:00:12 +0000
ROA not before: Thu 27 Aug 2026 01:00:12 +0000
ROA not after: Wed 25 Nov 2026 02:00:12 +0000
asID: 14618
IP address blocks: 52.144.58.0/24 maxlen: 24
168.245.151.0/24 maxlen: 24
192.139.134.0/24 maxlen: 24
199.19.89.0/24 maxlen: 24
199.19.90.0/24 maxlen: 24
199.19.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 21 Sep 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:f8:7c:bb:02:d6:a4:97:88:35:75:2e:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32e3a3ad-b1ac-413d-8f98-a69429a6ca98
Validity
Not Before: Aug 27 01:00:12 2026 GMT
Not After : Nov 25 02:00:12 2026 GMT
Subject: CN=5d079290-48f3-478b-a539-c3e58687abde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:7d:3e:0c:44:90:8e:00:0b:62:bc:16:68:fe:
60:b2:9d:7c:e5:fa:1f:43:66:5d:38:d5:48:ee:bb:
f9:58:7e:67:45:9a:31:9f:da:1e:12:94:43:65:d6:
98:c2:41:4d:9d:01:d4:00:0d:25:40:c0:fb:0e:54:
ee:a2:cc:b4:1e:bd:21:a4:3c:e4:d2:22:f9:1d:18:
f7:39:db:e3:29:1c:2c:31:3a:a7:72:dc:22:3d:22:
4f:ba:b9:85:c3:66:4b:7f:44:1d:21:bd:44:77:07:
f8:a0:28:61:d3:fe:0a:53:ce:96:b3:f6:1a:19:47:
1a:cc:5f:79:76:08:5a:b6:57:91:c7:85:41:e8:c8:
c6:5c:f0:1d:37:67:b0:c8:61:ab:06:9d:86:70:02:
5c:61:e9:40:b0:52:ad:d4:b3:27:e8:6a:cc:3e:2f:
a5:31:fb:3c:76:53:57:0b:3c:fd:d6:27:96:d6:d7:
72:4e:64:bf:d0:55:64:18:a9:28:70:3d:8a:2c:8f:
b4:70:47:ef:0c:7d:64:27:c7:ce:f3:c7:eb:a0:93:
e7:35:23:a1:b6:fc:01:65:68:e1:f3:92:77:a6:54:
3b:7f:5e:26:9a:76:6c:2e:c3:9d:05:4f:cc:d0:c9:
c5:ec:6c:f1:4b:04:26:da:97:77:62:d2:3c:65:cf:
37:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:75:D5:C1:BB:03:F5:A8:BE:9A:9B:D9:CB:39:89:5F:C8:E9:1C:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/28664a9a-e120-3701-b0b7-b5858658be81.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.crl
X509v3 Authority Key Identifier:
keyid:C9:95:54:7B:39:F5:77:ED:0B:E3:8A:70:7B:F6:77:43:FA:AC:C9:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32e3a3ad-b1ac-413d-8f98-a69429a6ca98.cer
sbgp-ipAddrBlock: critical
IPv4:
52.144.58.0/24
168.245.151.0/24
192.139.134.0/24
199.19.89.0-199.19.91.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:b0:25:1c:1a:c6:5b:ec:d6:8a:d4:90:d3:c6:7f:9b:8b:f6:
24:39:2c:ae:49:fe:c2:9f:b8:a4:83:69:40:ec:e2:58:cd:c6:
86:62:e4:bf:5b:2d:7b:a5:f9:4a:10:c7:51:43:34:b7:ee:38:
16:c1:24:5f:9b:06:a8:33:c0:7d:a0:da:3d:38:27:4e:dd:8c:
65:36:0a:ed:c3:ba:9c:34:a9:df:6e:82:b3:2e:c2:fa:da:9c:
4d:08:fe:c8:dc:9b:f8:3f:c7:34:1b:e1:11:d0:f6:67:ac:2e:
ee:54:17:ee:0e:d1:de:93:a4:b1:6a:4a:58:64:e7:ef:89:2e:
69:7f:f9:44:20:d7:88:c8:95:40:c4:04:e8:cc:a4:37:08:e3:
d0:14:14:f7:1b:3d:b4:4e:d9:ba:8c:6e:b5:43:8e:34:e7:f5:
ee:7e:0a:51:4f:b1:8d:51:34:dc:99:42:05:c8:4b:55:a5:c0:
4e:9f:7d:a1:50:5e:79:b4:80:54:bd:be:63:80:22:2b:ee:fc:
cc:1e:60:87:3c:da:fa:65:0d:c4:a4:b4:b7:5a:ef:cc:46:b6:
89:23:b8:33:25:18:45:2c:f0:27:76:ab:01:48:a0:62:da:3a:
c9:15:08:fb:d6:8c:c8:9a:29:80:a6:e9:c7:fa:93:6b:49:86:
b5:d3:9c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:09:33 2026 by rpki-client