
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/954a6489-42f6-3808-b280-a76e596e6f06.roa
File: 954a6489-42f6-3808-b280-a76e596e6f06.roa (raw, json)
Hash identifier: mPT3dKb8RG4r13eVUye7nqMnI6ODezEROMCdmD5YcSc=
Subject key identifier: 3E:A6:EB:D2:3D:19:CB:5A:17:64:43:5A:A9:1A:07:71:52:05:E7:84
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328584E0865F65CE8991903906555C0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/954a6489-42f6-3808-b280-a76e596e6f06.roa
Signing time: Tue 02 Jun 2026 01:00:10 +0000
ROA not before: Tue 02 Jun 2026 01:00:10 +0000
ROA not after: Mon 31 Aug 2026 01:00:10 +0000
asID: 15169
IP address blocks: 64.233.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:08:65:f6:5c:e8:99:19:03:90:65:55:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jun 2 01:00:10 2026 GMT
Not After : Aug 31 01:00:10 2026 GMT
Subject: CN=12bcfc03-b43c-4b62-8c6b-3a3a3e851908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:00:24:f7:dc:ca:e2:ac:b8:49:15:d2:7a:f6:
b2:d2:ce:39:65:e8:c3:69:be:b3:fe:33:43:5f:b8:
ea:c7:42:49:d5:fc:5e:e5:4a:9a:9e:68:77:52:10:
bd:1b:7c:88:53:cb:a6:7e:e9:05:e3:8e:18:e4:8b:
99:3e:72:bf:1c:a5:00:d5:6b:57:40:be:d2:c5:ab:
a0:33:cc:25:d0:46:46:80:3f:42:8a:28:1b:da:12:
47:a7:b4:f7:82:41:26:fa:23:7d:51:53:cb:ac:9a:
73:c9:c5:55:44:f6:09:35:67:a0:97:92:96:7c:66:
b1:33:28:05:1a:ff:96:37:a3:8b:b2:7f:95:3a:73:
d0:26:27:ad:7f:59:1b:0e:46:2e:46:75:cf:13:32:
df:e0:34:ba:3a:34:13:3f:3c:26:cc:6d:5a:9e:56:
b7:18:ae:f5:1d:25:48:12:bf:80:fe:93:3f:59:23:
9f:df:68:93:26:f5:8c:20:6c:32:7d:4c:bb:7f:62:
fc:95:39:0b:ed:26:fc:1f:00:0a:74:50:50:17:81:
d1:da:ad:41:68:f8:0e:ec:af:23:7b:2c:4b:37:1a:
18:8a:90:28:f0:27:3f:7d:3c:2b:89:36:29:99:d8:
5c:4e:44:88:0d:46:76:75:6c:22:5c:fc:b1:e1:b9:
29:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:A6:EB:D2:3D:19:CB:5A:17:64:43:5A:A9:1A:07:71:52:05:E7:84
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/954a6489-42f6-3808-b280-a76e596e6f06.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
64.233.171.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:27:15:23:35:8e:f6:62:53:76:46:0b:a2:06:b5:44:78:0b:
2b:aa:41:ea:2a:1d:55:76:10:0d:0e:72:49:15:fd:b4:f2:53:
7f:f7:ae:86:46:91:91:48:5f:23:23:7c:51:0c:3b:09:c0:f0:
63:dd:63:97:f0:0a:1b:7c:33:33:05:2e:48:a5:05:8e:c6:d0:
20:af:92:78:1d:a1:75:e6:fb:e2:cd:6b:a3:1d:7f:91:d5:fa:
1a:15:06:51:cf:27:48:51:a1:ed:8e:f6:d8:ea:20:b1:8f:87:
b3:16:a8:53:94:8e:23:98:e4:dd:a9:70:47:2b:9f:7c:85:2c:
45:f1:75:34:fe:61:95:9f:98:de:e5:4a:01:7b:55:0c:92:17:
71:06:98:00:cb:30:ed:03:9c:3b:04:97:6b:20:e6:52:f7:2f:
98:f8:bf:22:e0:5e:7c:d2:e1:1e:0b:36:f1:ea:e8:a0:41:0f:
74:64:f1:08:cd:79:8f:08:20:a8:30:94:9b:97:76:eb:f0:0c:
cf:0c:20:98:44:4f:f1:2a:02:a7:1e:a8:50:22:e6:20:1b:ce:
ad:dc:39:85:30:e0:e1:6a:7e:cd:b2:b3:4b:c1:e4:b6:63:94:
93:a4:2b:f5:e8:65:a8:82:47:37:88:96:3b:3f:32:67:07:47:
d1:c3:53:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:09:59 2026 by rpki-client