
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/5ff2122e-57a3-35ed-8d3a-4e61730a3190.roa
File: 5ff2122e-57a3-35ed-8d3a-4e61730a3190.roa (raw, json)
Hash identifier: i00EVnjBF3mcmu8RMqUnr/fBRK8rk7W/OA68yHJDwxg=
Subject key identifier: 40:E3:B0:0F:DB:33:86:CF:F9:26:D5:E3:FE:54:F1:05:0E:21:C9:5C
Certificate issuer: /CN=24c31307-e10d-4537-aa7a-6bbf3692c5d6
Certificate serial: 010D0C9F4328584E90BA52CA49BB9A636F6AD2C0
Authority key identifier: 53:48:D6:8D:23:DE:C9:1F:62:B7:F0:97:56:05:53:9B:42:52:3B:9C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/5ff2122e-57a3-35ed-8d3a-4e61730a3190.roa
Signing time: Mon 20 Jul 2026 21:00:11 +0000
ROA not before: Mon 20 Jul 2026 21:00:11 +0000
ROA not after: Sun 18 Oct 2026 21:00:11 +0000
asID: 40833
IP address blocks: 170.149.238.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/24c31307-e10d-4537-aa7a-6bbf3692c5d6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/24c31307-e10d-4537-aa7a-6bbf3692c5d6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 26 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:90:ba:52:ca:49:bb:9a:63:6f:6a:d2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24c31307-e10d-4537-aa7a-6bbf3692c5d6
Validity
Not Before: Jul 20 21:00:11 2026 GMT
Not After : Oct 18 21:00:11 2026 GMT
Subject: CN=1541ec8c-5aef-454f-adad-85baf4880962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:c7:29:67:36:df:30:c6:e3:6c:28:1c:ce:69:
b4:e2:43:cf:56:40:3d:19:ad:75:52:2f:90:6f:c5:
56:67:e0:04:4a:3a:dc:58:6e:91:87:44:e0:33:f2:
94:39:fc:51:2b:81:84:bf:2c:0c:9f:9a:52:c6:8a:
8a:9f:17:22:ad:fa:af:51:3d:ed:13:d3:87:ad:bd:
65:22:79:f2:bb:35:6b:de:27:6c:54:0b:25:2e:48:
5a:3a:97:67:0f:0f:7a:78:c9:33:e0:a3:72:4e:e6:
63:11:ab:84:af:a9:eb:8b:f4:5b:e0:ec:98:51:6e:
3e:06:94:c7:a0:a5:79:36:8b:6f:cd:34:55:8e:8b:
66:8d:dd:70:5b:94:fb:73:02:2e:d0:8e:0c:c9:51:
70:42:97:c6:f9:68:e3:57:6b:e1:85:b7:63:66:f9:
ec:72:a9:0e:dc:d0:6d:c6:40:1d:9a:08:7a:99:12:
32:59:d8:2f:7d:12:89:9c:1f:08:ee:ec:c8:c0:45:
44:24:d3:cf:bc:b3:d4:0b:78:09:20:30:2e:09:6e:
8f:43:5e:f2:a8:dd:43:e4:3c:5d:b7:6e:6f:d6:79:
41:4b:35:48:13:42:05:17:24:83:bf:16:0a:49:ee:
82:3c:97:f4:e2:30:17:c6:3e:16:30:12:8c:99:d2:
b0:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:E3:B0:0F:DB:33:86:CF:F9:26:D5:E3:FE:54:F1:05:0E:21:C9:5C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/5ff2122e-57a3-35ed-8d3a-4e61730a3190.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/24c31307-e10d-4537-aa7a-6bbf3692c5d6.crl
X509v3 Authority Key Identifier:
keyid:53:48:D6:8D:23:DE:C9:1F:62:B7:F0:97:56:05:53:9B:42:52:3B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6.cer
sbgp-ipAddrBlock: critical
IPv4:
170.149.238.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:bd:d6:e8:24:a1:3e:db:b0:8b:34:a0:13:6b:e9:3e:a6:7a:
32:66:bd:18:8c:55:83:9a:17:c7:c0:dc:8a:d3:b3:a6:3c:1d:
7b:9d:a8:62:9a:e5:09:ad:03:33:2f:a2:5c:1f:32:38:29:63:
87:9d:c1:78:92:e3:30:c6:aa:43:41:60:72:1d:f7:a6:a6:e0:
5e:c5:52:15:df:26:d0:aa:50:23:c1:ae:b8:0a:f0:cf:b8:22:
17:7c:9e:79:e7:15:a2:37:78:3c:88:ae:de:40:4b:89:23:da:
ea:8d:6d:73:6f:ca:f1:aa:3e:a4:1f:55:69:9c:97:fb:ba:56:
31:5e:ed:9f:f0:d8:ae:42:a2:21:bc:be:cd:58:a4:be:5e:7d:
23:35:28:77:7d:c8:93:18:46:cf:41:9b:c9:32:9e:56:7b:9f:
29:3b:57:81:47:71:bd:03:15:04:3d:b0:67:01:e4:dd:ba:31:
1a:67:9c:61:dd:df:4d:32:21:ec:bd:0f:54:40:7b:39:76:ac:
84:af:3a:37:76:b3:ca:33:5f:2b:89:f1:88:a0:16:78:54:b5:
ac:bc:8e:e1:a3:87:d1:c7:33:f5:38:cd:eb:f5:61:42:96:e7:
0f:28:ba:6e:eb:10:a7:80:55:ae:35:b1:9b:48:9e:4e:92:ff:
24:70:43:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:57:29 2026 by rpki-client