
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/520bc7ed-25b1-3d9c-b3af-6a03e72a5019.roa
File: 520bc7ed-25b1-3d9c-b3af-6a03e72a5019.roa (raw, json)
Hash identifier: BG/txiKMEeNJrHoFykFPmkjcjtJtPxUAKgPh+KIr4FQ=
Subject key identifier: 25:39:95:4B:CC:C8:5C:62:28:18:77:6B:03:91:68:C1:D4:11:7C:91
Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Certificate serial: 010D0C9F4328584E6144ACF2B2D34528ABF1BBC0
Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/520bc7ed-25b1-3d9c-b3af-6a03e72a5019.roa
Signing time: Fri 03 Jul 2026 21:00:11 +0000
ROA not before: Fri 03 Jul 2026 21:00:11 +0000
ROA not after: Thu 01 Oct 2026 21:00:11 +0000
asID: 13414
IP address blocks: 199.16.156.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 26 Jul 2026 04:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:61:44:ac:f2:b2:d3:45:28:ab:f1:bb:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Validity
Not Before: Jul 3 21:00:11 2026 GMT
Not After : Oct 1 21:00:11 2026 GMT
Subject: CN=0e5ab1f4-ef54-4a43-a50f-f18de7559d85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ee:90:34:13:55:d9:3a:0f:fe:af:4d:95:d5:
e6:36:c4:1b:e3:77:18:ff:5e:d6:40:c3:9c:28:97:
6b:0f:27:8c:57:02:34:ce:1b:52:c3:00:1c:0a:5a:
ed:89:a2:6e:ed:0e:d0:7c:e6:00:aa:01:32:f9:97:
50:9c:4d:27:b3:34:d3:96:9e:ed:bb:b3:da:6f:d5:
5f:28:78:62:56:9b:f9:6d:24:72:0f:b5:a7:70:40:
61:fb:0b:07:01:73:93:26:c8:73:f4:47:5e:5d:1a:
17:97:23:18:1a:fb:f8:61:48:3f:42:3f:04:60:dc:
80:9b:94:9a:de:9a:7e:1a:39:02:2b:d1:4f:4d:94:
46:6e:5a:29:5f:87:06:c8:6c:ec:7d:33:45:ec:76:
35:56:00:41:da:c5:ac:b8:e5:e7:be:46:f4:ac:5b:
9d:17:50:3d:c1:2a:01:fc:19:36:da:4f:4d:38:0a:
f0:db:65:14:12:16:dd:9e:df:1a:e3:7a:76:8c:a2:
82:77:4b:15:72:dd:20:ea:60:ec:88:3d:d7:d7:f8:
19:bd:2c:3c:a1:fa:67:91:fa:a8:93:99:db:34:a7:
3c:63:5a:11:49:1d:50:14:e8:8b:30:b0:ba:6d:34:
fd:b2:9a:76:20:1d:ac:ef:07:2a:e9:2b:5c:0e:d3:
ac:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:39:95:4B:CC:C8:5C:62:28:18:77:6B:03:91:68:C1:D4:11:7C:91
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/520bc7ed-25b1-3d9c-b3af-6a03e72a5019.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl
X509v3 Authority Key Identifier:
keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
sbgp-ipAddrBlock: critical
IPv4:
199.16.156.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:a8:d0:e5:f7:16:ca:1d:6a:a8:2a:25:32:76:5b:f0:a5:4b:
9e:f1:52:6e:2c:ea:8a:86:3d:e6:f9:57:a9:1b:bf:9e:52:fe:
24:4a:e3:84:8f:01:fd:bd:35:2d:3e:af:e8:15:e0:5e:e7:e1:
19:61:48:96:8e:90:bf:04:6c:ba:d8:58:54:de:33:82:a4:fe:
e1:03:22:2c:6e:3e:b1:31:93:69:5e:1c:27:cb:b7:43:37:93:
0d:7c:b5:e6:23:3d:ed:5d:de:c6:1b:24:af:c6:f1:e8:bb:5e:
3b:93:7b:05:1b:67:95:9f:01:5f:9a:ce:09:05:8e:33:a3:42:
67:96:64:02:f2:16:3f:14:59:0f:6c:16:5d:02:42:ff:2f:4e:
51:d9:df:5f:7f:4a:d3:3d:cb:96:f6:48:83:cc:75:90:5c:5c:
13:4f:a0:b7:fc:9e:b3:a3:d0:d3:ba:ae:7d:68:04:56:22:2a:
e0:6d:88:8d:22:15:91:69:b0:a7:dd:81:ae:0f:97:cc:b9:3b:
5b:94:be:01:74:44:b8:ef:06:05:d8:50:d4:72:a4:2f:7d:d8:
af:f9:b9:c9:92:00:fb:cf:68:b3:d2:23:8b:05:e0:d3:d6:65:
b5:ed:99:32:76:81:48:00:3f:c1:9b:05:36:a6:0b:0b:02:c3:
19:66:70:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:29:34 2026 by rpki-client