
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/79af2149-f711-4230-b22d-36786f0219ac/32eeceb1-3acd-3d7e-8e68-5f0863d73647.roa
File: 32eeceb1-3acd-3d7e-8e68-5f0863d73647.roa (raw, json)
Hash identifier: drwfj+N/gMJxMZ17gr0rUNWQUZrYVZoBuhhOPqY4pSE=
Subject key identifier: 2A:80:B5:FA:7E:53:F4:8E:57:FE:7F:57:EF:29:82:06:78:06:4C:AE
Certificate issuer: /CN=79af2149-f711-4230-b22d-36786f0219ac
Certificate serial: 010D0C9F4328584E6B0A1363B079A230A4CB4F80
Authority key identifier: 57:8B:80:AA:14:73:59:B7:A3:1A:AE:FD:34:13:F5:5B:DA:2A:0F:4A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/79af2149-f711-4230-b22d-36786f0219ac.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/79af2149-f711-4230-b22d-36786f0219ac/32eeceb1-3acd-3d7e-8e68-5f0863d73647.roa
Signing time: Tue 07 Jul 2026 09:00:12 +0000
ROA not before: Tue 07 Jul 2026 09:00:12 +0000
ROA not after: Mon 05 Oct 2026 09:00:12 +0000
asID: 398182
IP address blocks: 64.186.10.0/24 maxlen: 24
198.135.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/79af2149-f711-4230-b22d-36786f0219ac/79af2149-f711-4230-b22d-36786f0219ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/79af2149-f711-4230-b22d-36786f0219ac/79af2149-f711-4230-b22d-36786f0219ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/79af2149-f711-4230-b22d-36786f0219ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:6b:0a:13:63:b0:79:a2:30:a4:cb:4f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79af2149-f711-4230-b22d-36786f0219ac
Validity
Not Before: Jul 7 09:00:12 2026 GMT
Not After : Oct 5 09:00:12 2026 GMT
Subject: CN=4b3fbb94-c52e-4573-93d2-2bb1eecfaf16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:3f:c3:ee:56:a2:64:c0:a9:1b:a2:d1:5d:d9:
7a:f9:c6:5a:4a:ec:03:fd:45:4b:90:fe:39:51:e3:
08:67:29:dd:c2:43:ad:6e:49:df:81:12:59:cb:2a:
9f:c4:01:5f:2f:21:14:49:2d:9f:00:e8:06:34:db:
35:7a:d2:21:0b:19:1e:dd:f3:8c:f2:17:bc:48:4b:
ab:79:b8:94:6d:5a:a1:d7:60:6c:3b:ad:2f:2c:1a:
93:7a:9d:dd:d9:98:3f:20:d9:73:51:55:d1:e7:df:
c1:b6:ca:8b:9a:40:97:f3:cb:79:b5:b6:64:aa:81:
6b:a6:a8:4e:c9:56:8a:e3:5c:1f:ab:93:d5:1d:8d:
f8:07:8b:62:ba:26:b7:ee:9e:9f:3c:ee:50:a3:60:
bb:66:1c:7d:c8:2e:a1:2f:1d:cc:ed:10:98:93:be:
1b:e5:64:1f:59:75:5a:d0:1b:b3:cc:49:8c:92:be:
a8:8a:69:f7:a1:28:10:f3:2f:a3:c2:e0:9b:08:c6:
e2:84:22:f2:12:67:22:90:fe:a5:4d:f1:96:00:df:
04:f5:90:6a:f6:77:8e:9f:43:30:63:15:bb:b6:22:
3e:a3:7c:9b:49:f9:84:0d:54:03:d5:cb:53:32:06:
5a:5a:1d:ba:9c:1b:1a:4c:85:45:0a:17:28:bb:cf:
59:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:80:B5:FA:7E:53:F4:8E:57:FE:7F:57:EF:29:82:06:78:06:4C:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/79af2149-f711-4230-b22d-36786f0219ac/32eeceb1-3acd-3d7e-8e68-5f0863d73647.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/79af2149-f711-4230-b22d-36786f0219ac/79af2149-f711-4230-b22d-36786f0219ac.crl
X509v3 Authority Key Identifier:
keyid:57:8B:80:AA:14:73:59:B7:A3:1A:AE:FD:34:13:F5:5B:DA:2A:0F:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/79af2149-f711-4230-b22d-36786f0219ac.cer
sbgp-ipAddrBlock: critical
IPv4:
64.186.10.0/24
198.135.152.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:77:70:41:c5:6c:64:b4:03:b3:20:d6:c9:19:2c:78:66:d3:
9d:99:9f:1b:05:9d:b9:4f:24:b4:cb:26:f4:1d:00:66:01:2a:
b0:0f:ba:7e:fe:f9:ec:97:60:10:8f:ca:a0:b4:d1:5f:ad:74:
96:56:70:b2:4a:01:37:16:c7:12:fd:aa:98:03:2f:59:92:65:
49:0b:bc:0a:ef:d3:82:d1:1c:37:52:0c:e9:a4:33:9e:1d:27:
a0:12:8e:cc:e9:b9:4a:cf:93:74:c0:7d:9f:42:ae:d7:21:4c:
ca:01:59:2c:86:5d:c0:de:b8:fd:a9:25:c9:58:d9:51:b4:d1:
e4:7e:63:22:b7:f6:63:fb:0e:01:e8:b3:bb:57:66:46:34:58:
89:1e:6a:0e:a2:1b:ba:bb:89:ed:c2:aa:a2:2b:ae:10:47:d3:
0f:6b:16:56:cc:12:7d:67:eb:05:3a:d8:ea:e7:ba:f9:f3:68:
07:76:68:e4:42:e0:09:0c:38:93:2b:3c:5c:83:e8:4d:80:7b:
33:32:78:54:8a:89:68:7b:b8:e3:58:f6:fb:a6:8d:5e:fb:f3:
5a:e8:a8:92:4d:a8:c0:22:5f:88:53:5f:d7:44:b4:5e:c2:8d:
36:9b:95:5e:08:97:a4:ef:ef:07:4b:57:9b:da:23:30:1b:5d:
97:06:19:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:55:29 2026 by rpki-client