
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/af6da1df-6310-375d-ba7f-a2f60512f77a.roa
File: af6da1df-6310-375d-ba7f-a2f60512f77a.roa (raw, json)
Hash identifier: cCvNS2W0GULZeqIdGpQR5YSPkSrLZru2HftQcdnvufM=
Subject key identifier: 1A:63:04:69:A1:5F:84:B1:B3:B1:3F:34:40:3D:09:9B:C6:12:E1:7F
Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial: 010D0C9F4328584EA0152B6A9D38FD4436BE67E0
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/af6da1df-6310-375d-ba7f-a2f60512f77a.roa
Signing time: Sun 26 Jul 2026 09:00:12 +0000
ROA not before: Sun 26 Jul 2026 09:00:12 +0000
ROA not after: Sat 24 Oct 2026 09:00:12 +0000
asID: 31898
IP address blocks: 67.217.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a0:15:2b:6a:9d:38:fd:44:36:be:67:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
Validity
Not Before: Jul 26 09:00:12 2026 GMT
Not After : Oct 24 09:00:12 2026 GMT
Subject: CN=a616e252-5b4e-46e3-b96b-44c280ee39b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ab:93:f1:60:92:11:45:cc:38:88:71:2c:03:
d7:ff:6a:84:d0:da:2f:51:de:d8:ce:19:56:e0:f2:
30:4d:3a:47:77:72:99:dc:18:7d:3d:08:df:8b:b3:
ab:37:80:d4:15:1a:47:9a:55:dd:d7:cc:d8:91:6e:
b0:90:18:69:c0:d8:b1:5b:8f:88:14:61:1f:a9:e4:
2d:b8:cf:1a:b7:36:50:09:d5:db:9f:90:6e:9c:43:
05:09:01:f8:5b:63:bb:57:c4:93:11:69:3a:a6:f2:
b8:eb:86:cd:d4:00:54:08:5d:73:7f:df:2b:0c:ab:
ee:36:e3:2c:9c:b8:25:76:c8:b5:03:67:be:ba:7a:
d4:31:a5:29:98:bc:eb:ea:19:1e:e2:cb:a6:ed:cb:
45:c8:8f:7d:72:fd:6e:6a:b5:78:ce:4f:c0:c6:62:
63:6e:59:08:42:4b:a5:23:41:12:e8:4c:49:db:a5:
17:7e:c8:aa:82:78:b5:73:5f:34:68:e4:ea:ab:25:
dd:a2:79:b0:65:ea:95:e2:53:cf:7e:fd:ee:0c:db:
24:6d:61:4f:00:d3:35:f6:7b:3f:3f:ff:d5:a2:3b:
85:b8:36:77:81:e0:34:b8:b8:43:83:7f:a5:23:d2:
e0:18:f4:47:d8:bb:19:c9:97:e8:b7:c1:62:37:7f:
81:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:63:04:69:A1:5F:84:B1:B3:B1:3F:34:40:3D:09:9B:C6:12:E1:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/af6da1df-6310-375d-ba7f-a2f60512f77a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
X509v3 Authority Key Identifier:
keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
sbgp-ipAddrBlock: critical
IPv4:
67.217.93.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:6a:0f:60:c7:27:ee:50:15:90:42:44:51:65:77:06:cf:12:
e3:11:4d:40:9a:54:9a:ce:f4:ab:53:5d:46:e4:a2:01:dc:65:
64:da:2c:5f:ed:1c:07:02:1d:8e:54:85:ab:d4:2b:3e:00:22:
ed:03:68:a5:f9:0d:61:ad:42:a7:56:42:68:71:76:48:31:45:
e5:11:8f:d0:16:29:83:80:2a:ea:62:0a:ff:59:ec:b4:29:c5:
73:ed:39:68:0c:ed:cf:31:35:2a:63:d5:0d:f1:7a:93:e0:4a:
11:3e:6f:0e:ad:82:e0:5f:2f:93:d6:3f:b9:1b:f0:69:53:da:
6c:ec:a6:40:1a:50:37:4a:ce:77:bb:89:ad:72:17:6f:56:8d:
06:25:d1:87:ca:b8:98:a2:49:b6:d1:e6:71:ad:f5:54:de:da:
c0:62:b6:2d:06:f2:da:08:05:fd:f9:94:c6:20:b5:d1:93:0b:
7f:b6:44:e6:5d:13:8d:80:db:c5:e4:d9:d6:e0:70:b4:be:ab:
b2:30:1c:5b:c9:e6:3f:00:92:1c:7e:e5:18:4e:fd:8f:cc:d9:
dc:93:92:86:2e:92:84:e7:af:f2:f4:4c:c5:79:a9:99:6d:aa:
a0:a1:15:76:96:d0:3e:ca:c6:8b:1b:1f:67:13:d2:5f:41:d8:
72:86:63:e3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6gFStqnTj9RDa+Z+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy
OWJmMB4XDTI2MDcyNjA5MDAxMloXDTI2MTAyNDA5MDAxMlowLzEtMCsGA1UEAxMk
YTYxNmUyNTItNWI0ZS00NmUzLWI5NmItNDRjMjgwZWUzOWI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6uT8WCSEUXMOIhxLAPX/2qE0NovUd7YzhlW
4PIwTTpHd3KZ3Bh9PQjfi7OrN4DUFRpHmlXd18zYkW6wkBhpwNixW4+IFGEfqeQt
uM8atzZQCdXbn5BunEMFCQH4W2O7V8STEWk6pvK464bN1ABUCF1zf98rDKvuNuMs
nLgldsi1A2e+unrUMaUpmLzr6hke4sum7ctFyI99cv1uarV4zk/AxmJjblkIQkul
I0ES6ExJ26UXfsiqgni1c180aOTqqyXdonmwZeqV4lPPfv3uDNskbWFPANM19ns/
P//VojuFuDZ3geA0uLhDg3+lI9LgGPRH2LsZyZfot8FiN3+BtwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBpjBGmhX4Sxs7E/NEA9CZvGEuF/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2
ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvYWY2ZGExZGYtNjMxMC0z
NzVkLWJhN2YtYTJmNjA1MTJmNzdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx
NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4
MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx
YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ9ldMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADFqD2DHJ+5QFZBCRFFldwbPEuMRTUCaVJrO9KtTXUbkogHcZWTaLF/t
HAcCHY5UhavUKz4AIu0DaKX5DWGtQqdWQmhxdkgxReURj9AWKYOAKupiCv9Z7LQp
xXPtOWgM7c8xNSpj1Q3xepPgShE+bw6tguBfL5PWP7kb8GlT2mzspkAaUDdKzne7
ia1yF29WjQYl0YfKuJiiSbbR5nGt9VTe2sBiti0G8toIBf35lMYgtdGTC3+2ROZd
E42A28Xk2dbgcLS+q7IwHFvJ5j8Akhx+5RhO/Y/M2dyTkoYukoTnr/L0TMV5qZlt
qqChFXaW0D7KxosbH2cT0l9B2HKGY+M=
-----END CERTIFICATE-----
Generated at Wed Jul 29 10:13:50 2026 by rpki-client