
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/2c32e3bd-1200-3988-9a54-ee4a6d275c11.roa
File: 2c32e3bd-1200-3988-9a54-ee4a6d275c11.roa (raw, json)
Hash identifier: DLiOoCPjM4SZP/rFgGN35QuupR4bGRTriUVSF0rHTBQ=
Subject key identifier: 1B:48:71:EA:3F:0B:99:29:1E:B4:3C:92:70:CA:EB:E4:41:3F:9F:3F
Certificate issuer: /CN=f3e09673-5c6e-4340-ad11-4da8dfb8c777
Certificate serial: 010D0C9F4328584EA798BCB53C2FC283D22EDD00
Authority key identifier: 6B:3F:AD:C6:78:35:65:4F:18:4F:BB:AA:8E:7B:24:08:DE:32:DA:BB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/2c32e3bd-1200-3988-9a54-ee4a6d275c11.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 14464
IP address blocks: 131.109.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/f3e09673-5c6e-4340-ad11-4da8dfb8c777.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/f3e09673-5c6e-4340-ad11-4da8dfb8c777.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:98:bc:b5:3c:2f:c2:83:d2:2e:dd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3e09673-5c6e-4340-ad11-4da8dfb8c777
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=30972caa-9381-4100-bcb9-326c822e1a54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:5b:eb:92:9c:8a:59:f8:e1:0a:19:35:fb:43:
82:42:d2:6e:8d:ad:39:d4:09:ab:17:0f:e0:c7:79:
a2:67:53:49:ae:99:e7:7f:71:00:9a:d0:31:92:70:
fb:9e:27:55:19:68:26:7b:89:c5:0c:02:05:35:f0:
bd:da:f3:ae:f6:3a:c9:ff:89:4c:b7:15:e5:d9:b2:
1e:1d:f8:a1:f6:41:80:62:e7:01:dc:eb:11:64:e5:
d2:97:8c:57:b8:46:9c:05:b8:51:52:d2:3b:e6:88:
74:73:01:da:1d:f3:89:43:5a:29:16:18:47:63:43:
83:bc:86:30:c6:07:23:a4:f6:14:5f:c7:7e:38:d9:
83:b4:51:5b:78:14:47:66:79:83:1e:52:ed:4f:8b:
18:d4:f7:ee:14:70:2c:23:bb:dd:cb:b4:d2:e5:5b:
3e:bc:7b:29:a8:6e:6a:91:31:4c:37:68:cd:e7:56:
a6:82:f1:68:33:f0:4a:5e:0d:31:51:0a:35:48:55:
62:17:96:61:42:40:d5:ea:34:e5:ab:9c:fa:e4:f4:
42:f6:e9:71:01:c1:2c:b3:bf:07:95:41:69:39:e8:
e0:ae:45:59:1d:46:ad:fe:2f:bb:a9:c3:ea:fc:5d:
35:ed:c7:5b:96:a4:44:c0:31:30:67:cb:57:e4:01:
ed:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:48:71:EA:3F:0B:99:29:1E:B4:3C:92:70:CA:EB:E4:41:3F:9F:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/2c32e3bd-1200-3988-9a54-ee4a6d275c11.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777/f3e09673-5c6e-4340-ad11-4da8dfb8c777.crl
X509v3 Authority Key Identifier:
keyid:6B:3F:AD:C6:78:35:65:4F:18:4F:BB:AA:8E:7B:24:08:DE:32:DA:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f3e09673-5c6e-4340-ad11-4da8dfb8c777.cer
sbgp-ipAddrBlock: critical
IPv4:
131.109.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:e5:76:75:75:97:b1:21:68:b6:60:91:95:69:0a:41:9f:c7:
97:cf:3a:4c:fc:7d:68:5a:1f:da:c1:41:03:9e:d4:24:0a:cb:
5a:db:e9:39:82:26:78:0a:4d:ea:ee:45:b6:84:ae:42:5b:d9:
90:00:d9:bf:6e:cf:ea:eb:06:7f:66:e9:e6:37:58:46:93:4c:
3e:bd:a4:05:17:86:f4:46:94:88:4f:2e:ba:a3:dd:a6:1f:a3:
c1:ae:f0:08:c4:c2:8b:b0:7a:9d:40:ed:b2:87:1e:7c:c4:43:
ac:4c:fd:5e:6e:a2:36:5b:57:07:63:81:3f:4f:fa:00:ee:9e:
bf:cd:31:a6:84:39:c6:71:16:22:65:76:f8:67:7b:05:b0:66:
53:e7:b8:42:5d:1b:cc:52:de:a0:9b:6f:a9:99:90:45:fb:e8:
94:80:7b:95:85:df:08:e2:76:79:af:ec:c8:2c:d8:d5:b7:de:
72:d8:1c:62:ee:3e:9a:15:08:92:5f:38:62:b4:ec:da:2d:fc:
f8:11:f8:6e:e8:ee:00:6b:3c:28:0e:f8:bd:3e:08:17:2d:2b:
a5:84:7b:23:30:3f:da:23:58:3f:d9:8a:2d:84:37:55:f7:5c:
70:32:d5:a3:d5:2a:7c:93:e6:1b:7a:82:11:82:8b:18:da:95:
d8:c6:9a:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:52:57 2026 by rpki-client