
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/5bc88940-6061-3911-99db-8f1685160272.roa
File: 5bc88940-6061-3911-99db-8f1685160272.roa (raw, json)
Hash identifier: BysTnaE28xY0huHGVi9diOdX6QmDZyVENkOqGthHE/4=
Subject key identifier: 78:D9:A9:C4:2B:73:31:3D:F7:C3:7B:B5:30:9C:C0:14:55:D3:C9:B5
Certificate issuer: /CN=601de417-7cdc-45d3-8d80-7279489a39e0
Certificate serial: 010D0C9F4328584DAF1BCF58F300D317A8129540
Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/5bc88940-6061-3911-99db-8f1685160272.roa
Signing time: Fri 01 May 2026 01:24:04 +0000
ROA not before: Fri 01 May 2026 01:24:04 +0000
ROA not after: Thu 30 Jul 2026 01:24:04 +0000
asID: 63023
IP address blocks: 170.101.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:af:1b:cf:58:f3:00:d3:17:a8:12:95:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0
Validity
Not Before: May 1 01:24:04 2026 GMT
Not After : Jul 30 01:24:04 2026 GMT
Subject: CN=5d248783-6580-44ce-96bc-152a4200a5f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:01:a6:57:4c:2b:07:71:1d:ba:71:4d:9d:39:
77:53:46:0a:8e:ca:d0:bc:2f:39:aa:df:e2:b2:b1:
f0:70:23:08:ab:57:5f:42:8b:36:f2:e0:4c:98:de:
0c:a8:5b:75:3a:a7:77:c4:69:4c:5e:ec:13:de:e2:
da:28:0c:ad:36:79:31:4c:c8:36:c5:07:f1:37:f3:
53:19:cc:88:0b:8f:e4:0b:42:81:68:57:d4:64:7c:
2e:8c:7f:3f:d4:ed:9b:f3:9e:72:b2:1e:37:fd:24:
fa:5e:f8:5f:d2:24:27:a6:98:f9:70:79:8d:83:4f:
d3:75:72:68:0b:d1:48:81:17:9d:ac:f9:4e:0a:eb:
b0:81:75:72:4e:55:7b:41:a0:2e:bb:11:67:62:7a:
f7:20:51:c6:c4:1f:af:9b:69:36:ee:61:23:b2:54:
bb:3a:be:cd:94:ec:a3:c0:0d:e5:8d:3e:66:48:29:
6f:01:89:58:4a:5c:57:7c:c6:d1:c7:f1:a9:7c:7b:
12:f6:82:cc:9e:1c:1b:76:5d:48:bd:58:e9:c7:d9:
87:e1:64:24:61:fa:b0:81:12:af:21:ac:07:08:61:
86:cd:03:0d:43:2a:66:03:60:04:0b:a8:e7:8b:16:
8f:f0:4a:1a:87:33:db:70:0f:1f:36:2a:8a:64:40:
2c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:D9:A9:C4:2B:73:31:3D:F7:C3:7B:B5:30:9C:C0:14:55:D3:C9:B5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/5bc88940-6061-3911-99db-8f1685160272.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl
X509v3 Authority Key Identifier:
keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer
sbgp-ipAddrBlock: critical
IPv4:
170.101.119.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:d9:0e:d6:16:52:44:9c:08:b0:8e:94:c4:45:24:61:5f:50:
fb:8b:72:a2:4c:c3:4a:ee:c2:0e:7c:12:91:84:cf:ad:b0:4d:
ef:91:3b:93:18:00:06:82:52:4d:5f:9b:8d:d1:bb:5a:e3:b9:
69:2d:29:1a:a3:2e:94:ec:df:c4:0b:97:30:0d:70:99:89:15:
eb:af:60:ca:36:28:3f:3b:de:a0:6e:c5:e5:1e:dd:a7:c8:3d:
69:3d:5d:4a:94:12:86:ce:fe:5f:10:d8:74:54:90:89:31:bd:
3c:19:3a:85:e2:e3:91:7c:e3:75:f9:2e:fc:05:c6:be:04:e0:
36:e3:2e:24:a1:3b:8d:85:25:87:40:33:f5:ea:ab:f6:df:4f:
7f:14:7c:7d:64:cd:d3:8c:fb:9b:ef:ca:b3:72:4e:93:11:70:
88:05:29:e9:7f:7e:b7:ed:46:5a:c8:58:df:ae:79:7b:60:e4:
d5:2c:04:d1:95:c0:62:93:3c:3e:a0:85:67:7d:e3:90:35:a1:
ca:eb:60:cc:6d:8b:35:8b:aa:1e:39:db:4a:4b:3a:c3:da:07:
38:c0:2d:d9:56:3f:02:bd:9b:42:11:45:d8:2e:40:16:c7:26:
e6:45:d9:9e:3d:b1:e3:5b:df:bb:19:db:a6:a8:3a:8b:38:6f:
70:31:fa:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:43:42 2026 by rpki-client