
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8b973e20-42b5-497e-831b-66d353f928d7/32fd2aed-084b-34c3-ad42-8399607ba2b0.roa
File: 32fd2aed-084b-34c3-ad42-8399607ba2b0.roa (raw, json)
Hash identifier: F1Mi+0KXCMslwwndFlAIvlEgUKeEEAdVtC1jCIft/Oc=
Subject key identifier: C3:21:96:28:78:19:F9:BE:71:69:F6:41:63:DD:98:A3:66:78:4D:65
Certificate issuer: /CN=8b973e20-42b5-497e-831b-66d353f928d7
Certificate serial: 010D0C9F4328584E736A1A7C603E8C4B2D00BAC0
Authority key identifier: 0C:A2:EB:93:3F:8C:DC:D9:88:91:5A:BD:94:65:16:32:77:02:19:73
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8b973e20-42b5-497e-831b-66d353f928d7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8b973e20-42b5-497e-831b-66d353f928d7/32fd2aed-084b-34c3-ad42-8399607ba2b0.roa
Signing time: Fri 10 Jul 2026 09:00:12 +0000
ROA not before: Fri 10 Jul 2026 09:00:12 +0000
ROA not after: Thu 08 Oct 2026 09:00:12 +0000
asID: 6341
IP address blocks: 156.76.0.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8b973e20-42b5-497e-831b-66d353f928d7/8b973e20-42b5-497e-831b-66d353f928d7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8b973e20-42b5-497e-831b-66d353f928d7/8b973e20-42b5-497e-831b-66d353f928d7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8b973e20-42b5-497e-831b-66d353f928d7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:73:6a:1a:7c:60:3e:8c:4b:2d:00:ba:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b973e20-42b5-497e-831b-66d353f928d7
Validity
Not Before: Jul 10 09:00:12 2026 GMT
Not After : Oct 8 09:00:12 2026 GMT
Subject: CN=c3df83ca-998b-41e9-a69e-0d949d4b4aea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:6a:d6:9e:de:52:63:b5:c6:a5:a9:e1:f8:a4:
6d:d4:f5:d9:b7:cd:e4:87:74:f7:f4:d0:5c:b4:26:
08:9e:35:1e:dd:43:6a:d3:65:7c:56:35:17:10:f3:
5a:91:73:27:a6:62:8e:28:2c:b8:f9:10:90:ad:1a:
8b:a5:d3:d8:88:60:4f:db:14:f1:f1:43:17:ef:c3:
2d:85:f5:45:c3:ce:71:dd:ce:c8:f5:98:68:51:b7:
0f:9d:fd:08:77:1e:b4:7f:6f:79:57:bb:fe:2e:62:
03:db:bf:f3:ad:cd:2c:2e:95:af:c6:63:39:bc:5f:
ec:8c:47:29:c1:89:a2:24:b5:9e:a4:8d:1e:46:77:
06:ab:b0:f2:03:8d:06:19:ac:08:0e:82:1d:9b:b9:
91:5e:fb:1a:03:1b:4f:51:8b:77:e4:67:30:d1:c9:
09:29:16:7e:c7:1c:8a:24:a5:b6:66:fb:1d:44:89:
15:f5:ff:9a:72:91:d6:ac:b4:7b:d7:84:7b:01:e7:
26:82:56:59:2a:c6:25:05:80:62:11:ad:5a:30:b1:
24:0f:c1:5f:59:5d:07:5a:2b:79:ed:58:74:f4:27:
c9:6c:ab:72:00:76:2a:ea:bb:c8:00:1f:18:ca:3d:
81:74:3d:c8:16:22:08:2b:9c:c0:bb:1b:a2:6a:a3:
7b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:21:96:28:78:19:F9:BE:71:69:F6:41:63:DD:98:A3:66:78:4D:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8b973e20-42b5-497e-831b-66d353f928d7/32fd2aed-084b-34c3-ad42-8399607ba2b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8b973e20-42b5-497e-831b-66d353f928d7/8b973e20-42b5-497e-831b-66d353f928d7.crl
X509v3 Authority Key Identifier:
keyid:0C:A2:EB:93:3F:8C:DC:D9:88:91:5A:BD:94:65:16:32:77:02:19:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8b973e20-42b5-497e-831b-66d353f928d7.cer
sbgp-ipAddrBlock: critical
IPv4:
156.76.0.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:f9:1d:43:45:d2:1c:4f:88:5e:10:8a:b2:8f:e4:ee:61:bd:
24:4a:b1:90:0d:ff:08:ce:f9:e8:c5:2e:a8:7a:b6:3c:c7:5a:
b5:c5:52:c8:a4:13:04:6a:0c:1e:5f:f0:c6:ee:20:5f:23:e5:
12:8e:d8:5c:1d:54:67:0b:fd:5b:36:c8:5f:32:2c:3b:52:67:
a6:d1:a4:b1:dd:2b:a5:8b:db:4b:2f:8d:14:c4:9c:bc:b0:e0:
20:d7:02:bc:75:6f:75:54:50:da:97:d7:9a:9d:c1:57:43:00:
bb:44:c9:1d:78:ca:db:87:2a:4b:40:d5:74:5e:9d:37:fe:75:
b9:c0:06:9b:21:94:ab:05:60:40:bf:45:6e:62:98:7e:0f:1b:
57:4b:f2:4e:c9:44:37:3f:db:c6:70:87:ca:20:8a:47:32:b9:
b3:85:ab:59:45:03:57:b7:01:a4:9a:5f:a2:85:ce:70:ab:5c:
ca:3e:8a:02:35:12:24:42:88:34:83:ec:ab:63:5c:e6:19:9b:
77:19:42:48:16:13:aa:1f:7a:91:9d:e1:cc:6e:68:73:16:05:
10:aa:ff:af:43:76:b4:14:f4:3b:5b:3e:7e:d0:07:c9:e2:d3:
5c:50:3d:de:33:3c:b7:b8:85:c9:25:ec:4f:67:39:5c:7b:f1:
f7:c2:75:bf
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5zahp8YD6MSy0AusAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGI5NzNlMjAtNDJiNS00OTdlLTgzMWItNjZkMzUzZjky
OGQ3MB4XDTI2MDcxMDA5MDAxMloXDTI2MTAwODA5MDAxMlowLzEtMCsGA1UEAxMk
YzNkZjgzY2EtOTk4Yi00MWU5LWE2OWUtMGQ5NDlkNGI0YWVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhmrWnt5SY7XGpanh+KRt1PXZt83kh3T39NBc
tCYInjUe3UNq02V8VjUXEPNakXMnpmKOKCy4+RCQrRqLpdPYiGBP2xTx8UMX78Mt
hfVFw85x3c7I9ZhoUbcPnf0Idx60f295V7v+LmID27/zrc0sLpWvxmM5vF/sjEcp
wYmiJLWepI0eRncGq7DyA40GGawIDoIdm7mRXvsaAxtPUYt35Gcw0ckJKRZ+xxyK
JKW2ZvsdRIkV9f+acpHWrLR714R7AecmglZZKsYlBYBiEa1aMLEkD8FfWV0HWit5
7Vh09CfJbKtyAHYq6rvIAB8Yyj2BdD3IFiIIK5zAuxuiaqN7vwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMMhlih4Gfm+cWn2QWPdmKNmeE1lMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy84Yjk3
M2UyMC00MmI1LTQ5N2UtODMxYi02NmQzNTNmOTI4ZDcvMzJmZDJhZWQtMDg0Yi0z
NGMzLWFkNDItODM5OTYwN2JhMmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvOGI5NzNlMjAtNDJiNS00OTdlLTgz
MWItNjZkMzUzZjkyOGQ3LzhiOTczZTIwLTQyYjUtNDk3ZS04MzFiLTY2ZDM1M2Y5
MjhkNy5jcmwwHwYDVR0jBBgwFoAUDKLrkz+M3NmIkVq9lGUWMncCGXMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy84Yjk3M2UyMC00MmI1LTQ5N2UtODMxYi02NmQz
NTNmOTI4ZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnEwAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIb5HUNF0hxPiF4QirKP5O5hvSRKsZAN/wjO+ejFLqh6tjzHWrXFUsik
EwRqDB5f8MbuIF8j5RKO2FwdVGcL/Vs2yF8yLDtSZ6bRpLHdK6WL20svjRTEnLyw
4CDXArx1b3VUUNqX15qdwVdDALtEyR14ytuHKktA1XRenTf+dbnABpshlKsFYEC/
RW5imH4PG1dL8k7JRDc/28Zwh8ogikcyubOFq1lFA1e3AaSaX6KFznCrXMo+igI1
EiRCiDSD7KtjXOYZm3cZQkgWE6ofepGd4cxuaHMWBRCq/69DdrQU9DtbPn7QB8ni
01xQPd4zPLe4hckl7E9nOVx78ffCdb8=
-----END CERTIFICATE-----
Generated at Fri Jul 24 20:12:16 2026 by rpki-client