
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/60899ba4-2e02-3634-b503-2d70ad64f496.roa
File: 60899ba4-2e02-3634-b503-2d70ad64f496.roa (raw, json)
Hash identifier: nh238jf1W/MeSt5+Nx/bbhuhC1SvrY/lh6YHKgEqMxo=
Subject key identifier: 22:94:E9:09:54:10:68:08:5F:84:1F:2C:5F:2D:BA:C0:C3:92:5D:9F
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328584E086605820966FD324DDE0480
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/60899ba4-2e02-3634-b503-2d70ad64f496.roa
Signing time: Tue 02 Jun 2026 01:00:10 +0000
ROA not before: Tue 02 Jun 2026 01:00:10 +0000
ROA not after: Mon 31 Aug 2026 01:00:10 +0000
asID: 15169
IP address blocks: 70.32.136.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:08:66:05:82:09:66:fd:32:4d:de:04:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jun 2 01:00:10 2026 GMT
Not After : Aug 31 01:00:10 2026 GMT
Subject: CN=4ac0a164-3214-4080-8e5a-5e8bb9809396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:cf:56:31:28:8a:83:63:b4:ad:4e:d0:59:53:
3a:6c:03:f0:1d:57:73:61:37:37:97:7e:fc:92:98:
51:9c:61:8b:31:bc:f1:c5:c6:95:e9:59:a4:9a:75:
6a:77:7d:42:ec:b8:2f:88:d7:e3:68:f2:f4:99:c4:
37:19:5a:c0:d4:6d:5c:fc:b1:67:d0:6c:73:18:f2:
33:e6:6f:56:92:75:e1:23:ad:0f:97:e2:fa:c7:76:
c0:2f:c9:c4:1a:62:69:bf:f6:cd:0d:8f:86:a7:f1:
a0:ad:07:0f:ae:87:10:c2:90:03:93:ff:7f:3d:a4:
6a:dd:cc:25:9c:8a:29:76:89:94:73:8f:9d:5a:d5:
df:d9:dc:5a:14:df:ff:41:46:15:e4:09:13:72:53:
f7:fe:2a:7c:d0:11:57:08:ab:dc:66:6e:26:79:70:
61:e0:31:ff:d2:95:97:bd:90:81:84:c8:f4:e8:73:
5e:4f:33:f7:36:9e:11:bc:df:37:55:d8:24:81:df:
41:37:f0:b9:a8:ab:b2:93:eb:5b:c2:c1:a1:05:1e:
98:de:d2:b9:db:a6:62:8f:a7:23:72:aa:a4:94:3b:
60:3a:b5:7e:17:77:25:37:21:3f:0d:85:57:24:03:
52:5f:1f:a4:0c:8b:b2:bf:d2:2f:95:0e:a3:53:93:
cd:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:94:E9:09:54:10:68:08:5F:84:1F:2C:5F:2D:BA:C0:C3:92:5D:9F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/60899ba4-2e02-3634-b503-2d70ad64f496.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
70.32.136.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:f9:b7:98:90:ad:34:7a:69:60:0f:aa:66:c8:c6:cc:65:92:
a0:4f:70:8b:b0:c6:c9:19:f2:2a:4b:cf:dd:48:06:27:da:5c:
13:7e:0e:13:fc:1a:94:40:b5:ac:c3:b7:00:08:30:19:08:c6:
e2:5e:09:10:85:e9:e7:5d:b5:e9:55:2e:05:eb:f2:7a:50:e1:
f8:a8:ec:9c:d4:17:d6:5e:f5:86:18:8f:a5:0c:b5:f3:7d:6b:
a6:b3:33:72:74:a7:09:a3:8c:e8:e2:8a:b3:15:c5:09:f5:2e:
a3:2c:93:99:c8:57:79:82:28:57:c1:10:af:0d:ac:e9:cc:29:
3d:22:37:c7:7d:0d:c9:ee:95:4c:9f:c0:3a:58:09:ee:fe:4d:
00:b0:5d:37:90:48:ac:4b:b2:2e:d7:d4:cb:4f:6d:74:df:03:
84:a5:e4:0b:59:e1:bd:b5:df:12:26:71:ee:6b:c4:ab:72:79:
60:f2:42:d8:a0:26:aa:e5:a4:0e:2b:94:c1:85:81:a7:f9:aa:
28:ee:b9:4c:56:02:68:ab:f6:90:39:d3:65:f4:b6:72:98:ed:
23:6b:0b:30:07:b2:6e:02:02:b8:ac:8a:08:a5:64:2e:b0:fa:
ee:70:3a:c3:49:5a:70:f1:aa:ef:9c:ea:20:72:b4:59:04:08:
62:ae:ea:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:20:37 2026 by rpki-client