
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a401becd-3ae1-3b96-8178-8f59dad578c9.roa
File: a401becd-3ae1-3b96-8178-8f59dad578c9.roa (raw, json)
Hash identifier: kBF27gmIXyoCa8R5dQJwJLT7yMgfo/+SqIqgyDdRs6Q=
Subject key identifier: 32:11:0A:47:46:A9:75:43:22:AB:4F:34:21:F8:3B:56:F4:56:54:07
Certificate issuer: /CN=a062a219-9ee8-48a3-897a-8410b6da94a1
Certificate serial: 010D0C9F4328584E885A3E39CDF47654DAC46180
Authority key identifier: 14:28:27:66:05:9D:24:A0:B4:F2:88:0F:EF:A9:EC:E0:E9:6E:86:18
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a401becd-3ae1-3b96-8178-8f59dad578c9.roa
Signing time: Fri 17 Jul 2026 21:00:12 +0000
ROA not before: Fri 17 Jul 2026 21:00:12 +0000
ROA not after: Thu 15 Oct 2026 21:00:12 +0000
asID: 803
IP address blocks: 216.197.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a062a219-9ee8-48a3-897a-8410b6da94a1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a062a219-9ee8-48a3-897a-8410b6da94a1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:88:5a:3e:39:cd:f4:76:54:da:c4:61:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a062a219-9ee8-48a3-897a-8410b6da94a1
Validity
Not Before: Jul 17 21:00:12 2026 GMT
Not After : Oct 15 21:00:12 2026 GMT
Subject: CN=6177a35a-7437-4fab-9e77-ca4ffb357833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:34:30:0c:90:c7:3e:cc:62:8d:2f:ec:58:db:
94:ce:05:1b:c8:ba:08:e4:ad:4f:9f:97:d5:3a:ae:
ba:7f:9a:0c:a4:99:e4:16:d1:de:f7:c0:7d:b5:70:
11:1e:cc:88:85:8f:42:95:88:7c:0d:91:cc:f1:f1:
67:8b:79:6d:8b:32:4c:6f:bc:53:4f:a7:59:fe:82:
9b:ed:78:0b:31:d7:ec:e1:ca:8d:d5:94:df:cd:7e:
ac:a2:9f:2d:24:07:b2:9a:d6:4c:44:ff:89:73:6a:
64:f1:bf:f9:e6:16:f2:1e:6d:0e:fb:67:6e:67:33:
4f:2b:10:ad:1e:ad:a2:29:b1:a5:b0:28:ee:7f:2e:
70:a3:33:d3:f8:ae:16:ae:a4:be:7e:60:ec:59:53:
68:f9:49:d6:26:f4:b9:00:ee:15:9c:dc:21:2d:15:
46:ef:ed:64:60:80:1a:20:bd:41:65:ca:c1:21:d2:
02:58:51:46:23:07:34:87:52:89:ec:33:b9:4a:42:
91:46:ea:0f:09:15:4d:ec:0c:47:48:d9:9f:5a:80:
f9:c8:3c:39:82:b9:79:68:a9:76:67:43:d7:86:9c:
b6:42:fb:d3:d8:a2:89:74:09:86:59:a6:81:b8:20:
fd:12:9e:86:86:24:aa:e2:ef:a7:f8:3f:82:50:90:
35:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:11:0A:47:46:A9:75:43:22:AB:4F:34:21:F8:3B:56:F4:56:54:07
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a401becd-3ae1-3b96-8178-8f59dad578c9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1/a062a219-9ee8-48a3-897a-8410b6da94a1.crl
X509v3 Authority Key Identifier:
keyid:14:28:27:66:05:9D:24:A0:B4:F2:88:0F:EF:A9:EC:E0:E9:6E:86:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a062a219-9ee8-48a3-897a-8410b6da94a1.cer
sbgp-ipAddrBlock: critical
IPv4:
216.197.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:8f:19:a0:dd:23:8b:1e:7a:32:71:c8:12:fa:76:e2:83:ef:
70:13:5b:ab:1e:db:64:57:45:bc:62:5e:17:75:f0:7b:5d:06:
e1:2f:b6:b1:cf:69:e4:4b:83:c4:86:3b:d1:06:d1:7e:0e:ae:
a2:6a:43:ec:c6:c2:70:04:55:26:32:b1:1d:38:ed:94:89:42:
38:ed:b3:79:ce:f3:da:a2:d4:01:63:44:c5:00:96:03:0d:7b:
97:92:39:f1:86:70:fa:ca:a9:ed:33:83:d7:16:66:63:eb:08:
03:e3:49:ce:13:e7:8d:ed:ad:46:71:74:21:ce:cf:34:a0:1e:
99:5e:f6:4a:90:06:f6:4c:0d:3d:35:34:fa:bd:31:1c:c9:50:
1e:62:63:b4:b1:8a:cb:82:44:ef:c8:83:c3:08:ff:16:a3:67:
5c:4c:e3:db:d4:ad:e6:74:4e:8e:c4:95:13:e0:90:6f:86:ad:
8c:cb:1d:90:a8:a4:21:ad:dc:61:51:c1:6e:5c:45:7d:fd:00:
88:ea:d1:8e:10:96:b5:ef:42:d1:f2:c1:41:f6:b0:72:b4:11:
bc:01:11:b0:5b:1d:23:c4:72:49:c2:4a:12:06:97:f6:c8:f9:
84:a8:85:4d:51:82:dc:f7:eb:f0:81:ad:27:37:85:dc:ad:09:
f8:b9:2c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:26:30 2026 by rpki-client