
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/43659337-d3a9-39a2-9081-bbcafeb0d57d.roa
File: 43659337-d3a9-39a2-9081-bbcafeb0d57d.roa (raw, json)
Hash identifier: R5z6tpq1rOq4UU8NxZbwt2SEI1emist3Q51p/YXPqo4=
Subject key identifier: 58:D3:69:A2:3B:C0:50:70:40:68:5A:E8:9D:99:78:E7:7E:05:AA:2F
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328584E086637F2507436D3B8FA9240
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/43659337-d3a9-39a2-9081-bbcafeb0d57d.roa
Signing time: Tue 02 Jun 2026 01:00:10 +0000
ROA not before: Tue 02 Jun 2026 01:00:10 +0000
ROA not after: Mon 31 Aug 2026 01:00:10 +0000
asID: 15169
IP address blocks: 70.32.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:08:66:37:f2:50:74:36:d3:b8:fa:92:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jun 2 01:00:10 2026 GMT
Not After : Aug 31 01:00:10 2026 GMT
Subject: CN=01b9a77f-893e-4976-b5cb-82c61a28f66c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:9b:8d:3a:58:27:e7:01:d0:41:30:77:a9:14:
70:cc:3d:15:97:4c:ac:66:05:7b:37:fc:e7:f5:d9:
26:37:40:1f:cc:95:02:55:64:eb:f6:1d:9a:21:cf:
b2:f3:a2:6d:1c:f7:0e:68:c7:6c:74:81:d8:01:c8:
11:18:ed:f6:3e:cc:11:8c:95:53:b1:91:08:7c:14:
9f:be:bf:c2:21:93:1e:83:12:f8:66:ac:d0:d4:9b:
6d:bb:f7:74:ed:f7:30:5d:9b:4e:71:bc:13:c3:dd:
b8:8c:95:78:7c:3b:e1:88:d8:9d:d0:4b:06:30:8d:
9c:d4:79:a1:bd:58:62:fb:57:c8:2e:47:91:54:9b:
ff:8d:9a:53:01:4a:85:1c:9e:a3:7f:61:0f:5f:56:
88:42:96:b5:5d:d0:7b:33:03:37:3f:45:5d:7e:29:
39:dc:02:41:14:25:67:0e:d8:be:8e:0c:f8:98:0a:
c9:9f:a3:cc:4b:6a:55:8e:e5:a0:30:25:4a:0d:3f:
96:63:a0:9f:7a:91:55:17:cb:4f:4a:d7:c5:61:85:
bd:a0:70:a1:d3:53:31:0a:38:a5:24:0a:66:cb:f2:
cd:2a:3a:1f:58:a2:f8:52:f7:cb:8d:05:9b:49:83:
54:74:15:9f:95:6f:84:6b:64:a7:6e:96:4a:ec:97:
97:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:D3:69:A2:3B:C0:50:70:40:68:5A:E8:9D:99:78:E7:7E:05:AA:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/43659337-d3a9-39a2-9081-bbcafeb0d57d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
70.32.152.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:b7:e1:19:78:ec:d2:7c:dd:04:80:ae:66:ba:a3:43:1a:e4:
a5:d9:3e:cc:f1:24:da:ae:37:73:f3:35:82:2d:70:61:00:e1:
62:18:c3:b0:d1:81:74:e7:dc:d9:06:be:61:a8:09:db:44:58:
6e:b9:76:8c:4c:80:27:6c:93:8a:04:b1:dc:7e:a5:05:32:88:
af:2c:3b:7e:c6:61:71:e1:9d:0b:4b:14:af:ad:04:23:de:ec:
4e:be:f0:0d:f2:7e:b0:69:d5:f8:de:7c:a1:24:4b:b6:e6:19:
35:9d:d4:b4:01:35:a8:62:38:8b:ea:2b:88:dc:cb:b5:09:a8:
5b:8e:f8:39:a0:40:10:f7:39:b8:ab:05:3b:06:cf:fd:19:c1:
55:ee:20:d3:65:bf:5e:05:37:30:8c:09:15:b5:1c:84:bd:c8:
08:f5:8d:0e:1d:37:a0:e1:27:82:a5:53:f3:48:4f:16:c1:88:
db:30:d4:a0:ea:c2:bf:92:2e:5c:32:42:25:6f:ac:52:52:9c:
ee:28:93:4e:f4:33:e7:ee:a9:f7:0a:03:3d:97:2b:1f:ba:01:
97:d6:15:1c:49:cd:01:fe:94:3f:45:07:19:2c:24:38:2e:e1:
15:d2:68:5a:07:b0:16:27:9c:f9:33:2d:25:3f:5d:62:ba:05:
b4:66:63:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:13:31 2026 by rpki-client