
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/6bf652f0-96db-31c2-820e-46026e39ff44.roa
File: 6bf652f0-96db-31c2-820e-46026e39ff44.roa (raw, json)
Hash identifier: tJkmS9RW7ClAzPhn6gS/l2TfTWUui/kPiE6ix4rikLI=
Subject key identifier: 57:78:45:8C:B9:5C:22:6E:F3:78:A5:08:35:9E:19:0B:F1:A9:83:17
Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial: 010D0C9F4328584DAC4578012FED247672A0E4C0
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/6bf652f0-96db-31c2-820e-46026e39ff44.roa
Signing time: Thu 30 Apr 2026 01:00:26 +0000
ROA not before: Thu 30 Apr 2026 01:00:26 +0000
ROA not after: Wed 29 Jul 2026 01:00:26 +0000
asID: 31898
IP address blocks: 158.120.28.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:ac:45:78:01:2f:ed:24:76:72:a0:e4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
Validity
Not Before: Apr 30 01:00:26 2026 GMT
Not After : Jul 29 01:00:26 2026 GMT
Subject: CN=c8c1a097-7ae0-45f2-b90f-623d288f47cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:9f:ae:a7:13:56:2e:b3:b0:85:e9:ca:f5:a1:
15:f6:74:f4:3a:7e:a7:98:78:4f:e4:42:73:4b:de:
30:3d:cb:cf:72:e4:a2:e9:60:36:0a:93:32:b0:3f:
98:49:52:44:85:14:39:f4:fc:33:fe:41:ec:b3:e3:
6d:1f:2a:53:9b:55:b5:98:dd:b3:a3:c9:d2:23:5c:
42:a4:93:47:2c:ca:02:40:8d:41:13:1b:ff:6e:72:
1d:67:50:44:93:89:a6:fe:71:2f:02:06:d6:3f:41:
4f:d6:aa:8d:74:dd:eb:36:e2:b9:40:0e:46:3f:71:
21:f5:5b:ff:ad:7d:73:be:ea:1b:ea:6a:fc:60:f6:
24:a0:60:89:2c:51:74:8e:f6:bb:72:bc:9c:0f:8f:
dd:78:53:58:8d:bd:e7:57:2b:69:24:c1:b5:43:bb:
72:75:76:d3:fc:bb:c0:73:c3:5f:b3:ac:29:21:dc:
3b:81:22:93:03:ea:42:72:c6:31:de:a2:16:d7:a5:
13:92:a0:3f:fa:85:af:ac:e1:c6:1f:54:8f:4c:82:
ea:82:ea:96:77:89:59:99:62:db:6d:cd:46:f9:46:
5c:6c:86:e5:fd:c3:84:b2:ea:aa:9a:0e:78:83:da:
61:97:cf:45:4a:67:07:58:ea:7f:5b:86:05:57:d0:
80:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:78:45:8C:B9:5C:22:6E:F3:78:A5:08:35:9E:19:0B:F1:A9:83:17
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/6bf652f0-96db-31c2-820e-46026e39ff44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
X509v3 Authority Key Identifier:
keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
sbgp-ipAddrBlock: critical
IPv4:
158.120.28.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d5:b8:18:15:5d:6a:90:50:f1:2d:65:28:8b:6b:ec:d6:a7:3e:
73:06:09:09:ad:74:91:88:a3:8e:6a:a5:dc:a8:14:67:f3:24:
56:a4:03:fb:90:a8:c6:0b:08:a4:f2:89:55:ae:c8:60:03:f0:
72:52:ef:de:12:db:f3:79:c2:88:0e:52:4a:8a:20:f0:0c:ce:
ea:b2:89:04:21:a2:8a:82:1e:60:1b:d1:82:a5:2e:b5:e0:a7:
24:09:07:80:42:ef:93:02:ab:c6:5f:84:ac:c6:bd:a8:03:b5:
20:de:4d:c6:70:3d:6f:0c:6a:41:4e:2c:fb:f0:84:82:c0:5e:
d4:5c:55:72:6c:52:42:62:b5:10:6e:3f:b9:a6:38:d5:56:f5:
ab:50:26:58:f7:c2:ce:5d:35:09:20:76:f0:1c:95:45:29:82:
a8:30:7f:77:5c:54:20:b6:87:3f:5d:7e:ab:ba:d9:49:57:fe:
69:89:4b:a3:b2:69:24:12:06:7a:5a:0c:cb:fe:57:33:ba:40:
f0:e6:aa:19:1b:09:bb:a7:0a:40:73:0b:c0:6b:10:49:97:29:
8c:71:b3:f2:ef:be:46:b7:d9:48:ed:04:6c:fa:bb:ab:61:40:
d2:e5:df:e4:68:85:06:11:55:53:60:5a:78:b6:d2:b8:c0:78:
ca:1a:cc:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:02:05 2026 by rpki-client