
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/69f557b3-7b94-42c2-98b7-d0ca92c25457/da304c7a-5ed1-3525-8c64-f8c6c6a83e24.roa
File: da304c7a-5ed1-3525-8c64-f8c6c6a83e24.roa (raw, json)
Hash identifier: ge0D8u6Z96OrWBBT0Guu2OBlee31AHzR0i8xGnRAzSw=
Subject key identifier: 98:D6:C2:AC:9D:EA:B5:52:50:69:66:BA:03:20:64:87:22:CE:A2:E3
Certificate issuer: /CN=69f557b3-7b94-42c2-98b7-d0ca92c25457
Certificate serial: 010D0C9F4328584E859D3B9CD8F42014F9D00780
Authority key identifier: B8:EA:04:8F:42:C3:13:BB:8B:4A:35:50:54:EE:D7:CF:43:98:1D:E3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/69f557b3-7b94-42c2-98b7-d0ca92c25457.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/69f557b3-7b94-42c2-98b7-d0ca92c25457/da304c7a-5ed1-3525-8c64-f8c6c6a83e24.roa
Signing time: Thu 16 Jul 2026 21:27:50 +0000
ROA not before: Thu 16 Jul 2026 21:27:50 +0000
ROA not after: Wed 14 Oct 2026 21:27:50 +0000
asID: 32453
IP address blocks: 209.151.128.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/69f557b3-7b94-42c2-98b7-d0ca92c25457/69f557b3-7b94-42c2-98b7-d0ca92c25457.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/69f557b3-7b94-42c2-98b7-d0ca92c25457/69f557b3-7b94-42c2-98b7-d0ca92c25457.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/69f557b3-7b94-42c2-98b7-d0ca92c25457.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:85:9d:3b:9c:d8:f4:20:14:f9:d0:07:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f557b3-7b94-42c2-98b7-d0ca92c25457
Validity
Not Before: Jul 16 21:27:50 2026 GMT
Not After : Oct 14 21:27:50 2026 GMT
Subject: CN=c4bee0a1-e6d3-4d75-9867-b9378302b3fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e9:d9:c4:ee:95:87:ac:29:85:e3:a6:bd:f0:
40:fa:a6:c4:cc:99:a1:39:ce:0c:e7:6f:dc:a3:1f:
82:c6:db:f2:7d:3b:c5:e3:6b:b8:6e:0e:64:a4:73:
ea:dd:ab:f7:85:45:5f:bc:52:51:ad:c8:2c:c1:7d:
ef:26:e4:fb:3b:11:44:7c:9a:3c:c7:af:d8:63:6c:
64:9c:f8:b2:01:43:25:60:6b:39:0d:5d:47:e0:85:
ee:c4:07:9a:1b:78:20:76:11:e0:e1:72:79:c8:db:
90:62:c1:37:88:d8:d2:de:e9:e4:7e:4e:0f:ee:ac:
c3:dc:21:03:65:96:8d:fe:2e:3a:70:74:b2:2f:19:
76:4e:ab:59:be:c7:52:3f:43:7e:b5:3d:21:9e:71:
02:e6:22:41:16:1b:3a:64:13:10:46:d0:72:5f:28:
d2:b4:4e:98:03:a2:07:06:3a:6b:0d:bf:1e:c9:04:
37:db:b1:b8:39:e7:f8:f2:e4:76:a6:81:f6:87:bf:
f1:13:0e:90:48:fc:07:c0:d4:41:85:cc:e6:81:5e:
1a:90:92:eb:b2:d1:41:8e:d5:25:ba:a9:db:8c:2c:
23:72:c9:68:27:ad:4f:a3:8c:28:05:24:92:00:73:
ba:b9:b9:0a:00:c1:29:6d:28:e3:59:dd:69:3c:9b:
44:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:D6:C2:AC:9D:EA:B5:52:50:69:66:BA:03:20:64:87:22:CE:A2:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/69f557b3-7b94-42c2-98b7-d0ca92c25457/da304c7a-5ed1-3525-8c64-f8c6c6a83e24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/69f557b3-7b94-42c2-98b7-d0ca92c25457/69f557b3-7b94-42c2-98b7-d0ca92c25457.crl
X509v3 Authority Key Identifier:
keyid:B8:EA:04:8F:42:C3:13:BB:8B:4A:35:50:54:EE:D7:CF:43:98:1D:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/69f557b3-7b94-42c2-98b7-d0ca92c25457.cer
sbgp-ipAddrBlock: critical
IPv4:
209.151.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:4b:54:57:9b:2b:8e:b9:d6:e5:3f:bd:b0:8e:5d:7d:0d:fa:
6f:07:02:34:5f:59:18:97:26:de:08:1f:50:49:8f:30:96:37:
7f:56:cc:54:78:31:e0:80:32:e8:a0:97:37:f5:a7:1e:de:fa:
01:00:61:2a:62:3f:90:6a:2c:56:44:29:cb:7a:34:bb:ba:1b:
75:83:62:b5:84:76:06:e4:24:f1:6d:c5:e0:14:a2:98:8b:76:
85:53:3a:f1:34:10:3d:fc:2d:fd:20:1c:a1:ff:f8:10:09:0b:
9c:25:d9:97:34:4c:b8:6b:9b:a4:eb:f6:3b:8e:ce:20:f1:51:
01:a2:63:a8:20:84:11:6e:68:32:08:3e:2b:4a:7d:01:6a:ba:
f5:c9:58:86:45:50:7e:98:47:c5:f3:9e:a1:2d:b6:72:60:1f:
76:86:10:ac:ec:d8:96:23:40:26:49:70:98:2a:70:82:d5:a6:
af:5a:f1:ef:dc:44:7e:74:3b:33:6b:1f:cf:33:b2:67:7d:f8:
60:b5:b3:2f:08:59:a9:5f:64:33:0c:9e:f3:45:b6:9b:14:1d:
78:16:d3:c0:5e:6a:ee:55:e0:d6:7a:37:ab:8f:07:b7:3c:74:
4d:c7:2c:39:74:84:91:fa:7b:2c:8f:70:01:15:d1:8f:46:ce:
ae:57:4e:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:14:39 2026 by rpki-client