
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a42880a1-b447-3c0e-acb2-9877d9ca7371.roa
File: a42880a1-b447-3c0e-acb2-9877d9ca7371.roa (raw, json)
Hash identifier: fkyh+yI3YwnfcvdRUK2oVrwOT7gDOD1aPg7tIjeNWnY=
Subject key identifier: B8:F9:C1:69:8D:96:42:E1:95:41:C1:E5:34:46:50:84:E2:33:06:E8
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328584EA79A719EBDE4CC02C881C9F0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a42880a1-b447-3c0e-acb2-9877d9ca7371.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 15169
IP address blocks: 108.170.192.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:9a:71:9e:bd:e4:cc:02:c8:81:c9:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=3f20b590-0e0b-45ea-8944-9f0fa3bc0171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fa:fb:83:c7:1a:32:3b:6b:68:e1:d4:99:41:
87:3f:9c:81:89:c6:bc:b4:9a:a4:d6:b6:ef:ac:e0:
a8:71:0f:eb:39:7e:04:76:ab:44:0e:d0:bd:c7:21:
08:72:27:92:5b:90:92:a7:46:3e:1f:fd:5e:0a:4f:
9d:83:8c:5d:a7:e3:68:3b:02:2d:1c:cb:df:e7:57:
9d:68:98:7b:bb:9b:a6:25:19:33:5e:d9:9c:63:a4:
b7:41:92:b9:43:5b:a8:0f:8e:dc:57:d1:0a:29:26:
6e:41:f1:bf:f8:c2:bd:41:0f:ce:bd:fd:b1:04:e4:
99:bd:44:88:cc:04:90:51:06:4c:3b:16:8d:26:0b:
18:1e:5b:55:6a:bc:2d:36:85:51:70:04:06:f6:ce:
45:4a:27:a1:ab:1a:8f:fe:5b:b8:ad:db:ec:90:e7:
38:88:82:47:ae:14:16:ba:bb:12:bc:8d:08:6c:39:
69:ca:eb:8b:88:df:47:94:03:6c:1d:62:9e:ed:5a:
a4:45:93:6d:4a:7d:5c:98:d5:de:91:e8:82:9a:52:
44:0f:0f:de:d3:65:4b:86:f8:48:1e:b4:64:36:79:
a9:27:af:66:d7:57:b6:47:4c:46:c0:b2:90:6d:64:
6b:7a:44:e6:3e:1a:6b:1b:fa:91:c5:87:5c:a7:5e:
c1:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:F9:C1:69:8D:96:42:E1:95:41:C1:E5:34:46:50:84:E2:33:06:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a42880a1-b447-3c0e-acb2-9877d9ca7371.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
108.170.192.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:bc:58:8b:60:f9:ca:94:c9:0d:b6:97:32:fe:9e:de:a4:dc:
52:96:95:93:0a:50:f6:14:d5:5f:ee:40:2b:d8:22:58:ca:ff:
b7:cc:b7:7f:32:86:67:a1:70:bf:f0:c4:da:e4:20:51:50:3e:
99:19:65:41:20:b3:fb:56:20:b4:a6:9b:c1:e4:69:88:f5:aa:
29:a6:7f:a3:4d:20:d3:eb:dd:f6:88:23:b0:6a:7b:17:9a:5d:
5c:05:e3:a7:6a:7a:7a:fe:09:c5:29:d3:00:b9:0e:0f:ab:dc:
e6:0d:fe:8f:41:2b:12:73:da:df:e1:85:50:74:2c:c3:ec:0f:
e6:9e:2c:7e:35:19:6d:05:6e:cc:1b:fc:da:ed:b1:c1:6a:cc:
77:84:c0:ec:ee:c1:28:2f:fe:36:34:36:58:f4:43:22:c6:59:
20:14:af:5f:7d:08:bd:b0:c9:cc:81:46:eb:5f:2e:0f:ca:31:
c9:16:c2:f1:6b:46:c0:d9:55:48:29:e8:b4:db:d8:3d:6c:97:
73:84:e3:35:27:4f:4a:55:26:87:04:61:05:96:c1:e9:02:8b:
32:e0:39:5e:76:b2:d9:dd:62:06:cf:f0:10:58:96:2d:7d:af:
5e:37:fe:db:74:5c:57:40:77:15:10:d7:8e:2d:35:2c:89:6b:
0e:d3:2c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:49:35 2026 by rpki-client