
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/589e3e61-8fae-384e-99a0-011c39c08dbb.roa
File: 589e3e61-8fae-384e-99a0-011c39c08dbb.roa (raw, json)
Hash identifier: idlBf4DlZra+aKtdwtg7dTC3cAPlkOVU52vTfaE+5mE=
Subject key identifier: CE:39:9F:CD:40:0F:A5:2B:F5:B7:DD:1C:43:0C:9B:B1:3B:43:92:88
Certificate issuer: /CN=aa912e91-41d3-4894-893c-8de4f94175f9
Certificate serial: 010D0C9F4328584EA7946D895382C23A59E3F000
Authority key identifier: 76:54:89:41:17:BD:71:F5:3E:44:87:AF:EB:98:7F:6D:B6:25:E6:55
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/589e3e61-8fae-384e-99a0-011c39c08dbb.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 16509
IP address blocks: 64.52.111.0/24 maxlen: 24
192.153.76.0/24 maxlen: 24
199.201.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:94:6d:89:53:82:c2:3a:59:e3:f0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa912e91-41d3-4894-893c-8de4f94175f9
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=e962db20-d92f-4898-b87c-d3caaf57c6d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8a:55:49:aa:b7:18:18:7b:24:73:a4:cc:6a:
e7:74:b4:c8:b4:75:99:c7:6f:de:51:89:22:62:6e:
d0:81:2f:1a:b2:8b:f5:da:c0:af:cf:26:c7:fd:5a:
33:5d:02:5d:8a:59:d5:dc:6a:c0:97:5a:a2:d6:32:
9a:65:8f:ec:e6:d5:a8:85:87:3b:dd:4c:9f:66:d1:
5c:75:51:8f:e7:6b:8c:f9:ad:e6:d4:40:5d:bc:b3:
08:78:23:f1:44:c3:22:ce:af:01:9a:ef:12:84:9e:
e0:93:b8:06:97:fe:00:a1:ec:af:22:48:81:cb:3f:
ed:c6:df:e4:cb:fe:e3:cc:13:64:c8:c9:76:da:67:
b0:3a:9c:34:31:7b:ee:07:75:2c:d4:c8:73:ba:24:
5d:2d:70:52:32:73:d8:61:35:00:04:a6:63:c0:a6:
47:8b:7a:91:2c:2d:3c:cc:8a:e0:2e:e7:81:f4:f1:
5f:e3:ae:ad:c2:8e:a6:ef:50:c3:18:be:8a:f0:9d:
7b:f1:62:df:0e:fc:9c:78:07:6c:c8:2c:12:81:e8:
e2:f6:83:09:9d:63:57:f6:2e:51:a2:48:a4:59:a2:
75:39:f0:26:12:25:24:6a:b8:c2:ea:b7:49:0c:c7:
85:77:e4:d4:42:69:00:8d:b6:9f:cc:48:df:c5:34:
41:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:39:9F:CD:40:0F:A5:2B:F5:B7:DD:1C:43:0C:9B:B1:3B:43:92:88
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/589e3e61-8fae-384e-99a0-011c39c08dbb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9/aa912e91-41d3-4894-893c-8de4f94175f9.crl
X509v3 Authority Key Identifier:
keyid:76:54:89:41:17:BD:71:F5:3E:44:87:AF:EB:98:7F:6D:B6:25:E6:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aa912e91-41d3-4894-893c-8de4f94175f9.cer
sbgp-ipAddrBlock: critical
IPv4:
64.52.111.0/24
192.153.76.0/24
199.201.127.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:03:37:59:dd:49:01:3d:f2:e3:40:51:18:b1:23:1a:74:77:
92:7b:aa:ce:e1:8d:33:74:cb:ad:a2:7e:40:da:b1:0d:09:83:
ad:ec:5c:d9:4d:12:a0:55:88:9b:91:d1:31:90:be:29:52:61:
8f:b9:b8:6e:a1:29:54:26:8d:9d:89:8a:47:60:7a:3d:39:18:
b1:87:7a:8e:95:df:e9:dd:f7:fd:e6:b9:d9:32:9a:27:b3:15:
1d:4e:d8:1b:6e:5f:42:47:86:2b:d1:74:56:97:ff:1d:9a:43:
f9:07:64:da:85:a6:50:d6:ec:26:eb:3f:bf:6c:de:a9:3d:7c:
94:93:56:3f:de:c7:29:14:1b:1a:b9:48:7a:e6:d4:87:6e:3f:
4e:0c:f5:b7:55:1b:5e:25:3b:45:ac:48:ce:4b:5a:79:c4:95:
fc:27:4e:7d:29:ee:d1:0b:32:bd:74:eb:35:cb:ab:d2:4a:40:
9d:9a:55:56:25:09:f8:81:a1:0e:91:27:20:42:d7:80:13:20:
8b:57:35:b6:2b:f2:8a:4a:bb:22:fd:3a:df:62:26:ab:1b:40:
aa:da:a1:e4:c5:aa:07:4f:b7:b2:94:e7:38:f8:2d:e0:30:f7:
e2:66:69:9c:f8:d5:b7:14:cc:a9:22:f9:d9:f4:dc:91:70:67:
d4:26:38:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:12:36 2026 by rpki-client