
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/6bf652f0-96db-31c2-820e-46026e39ff44.roa
File: 6bf652f0-96db-31c2-820e-46026e39ff44.roa (raw, json)
Hash identifier: 1Hb/8mjCwG9kt+Cw/aCrrWuNP71+5OLxlEQiB7DwgM4=
Subject key identifier: E0:A1:88:D6:8E:46:40:44:16:D8:08:3A:50:74:9B:99:E8:E4:05:0E
Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial: 010D0C9F4328584E8C8A475A5AD6F204752C6900
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/6bf652f0-96db-31c2-820e-46026e39ff44.roa
Signing time: Sun 19 Jul 2026 09:00:11 +0000
ROA not before: Sun 19 Jul 2026 09:00:11 +0000
ROA not after: Sat 17 Oct 2026 09:00:11 +0000
asID: 31898
IP address blocks: 158.120.28.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:8c:8a:47:5a:5a:d6:f2:04:75:2c:69:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
Validity
Not Before: Jul 19 09:00:11 2026 GMT
Not After : Oct 17 09:00:11 2026 GMT
Subject: CN=6b2e8986-ad0b-422d-839d-73e6699ec424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:64:dc:2f:b0:08:56:aa:1d:a5:76:2a:85:07:
34:27:56:84:c5:a4:3a:b8:03:33:f3:cd:03:61:dc:
9f:2e:5e:ce:48:3e:6a:01:c8:90:cd:f3:2e:df:2d:
7a:46:8b:00:51:84:5a:8e:5a:3a:9b:fd:a6:ce:46:
5c:df:25:3e:c4:d1:19:5b:65:d1:cf:82:97:29:90:
55:66:5f:5b:eb:37:4a:49:35:ed:3f:bd:49:78:49:
17:a4:23:c2:40:af:96:01:b4:5b:ff:1c:7b:d2:47:
cb:c2:1e:1e:c5:82:0f:73:34:1c:f7:fa:60:fa:70:
3c:fe:96:27:1c:9c:71:be:be:80:9c:6f:3c:3c:1e:
60:15:01:43:d9:a7:72:c1:6b:f0:0d:60:b2:87:b6:
84:68:75:17:6b:eb:ee:e2:86:97:18:bd:ef:4f:57:
13:3f:7f:7c:c3:70:a5:38:86:a2:9a:f0:f6:c7:a8:
f6:21:b4:55:0c:fc:f4:26:43:ab:cb:14:00:3a:da:
5d:71:d2:e1:16:a4:0f:78:fc:e2:12:40:c5:10:6f:
b6:81:55:8f:13:11:7c:b2:a5:bd:f7:92:7f:a2:68:
1d:9c:78:04:fe:19:30:77:dc:df:a5:6c:89:83:c3:
07:2f:a7:84:9a:b5:c1:4f:95:42:31:0f:bb:4d:6a:
91:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:A1:88:D6:8E:46:40:44:16:D8:08:3A:50:74:9B:99:E8:E4:05:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/6bf652f0-96db-31c2-820e-46026e39ff44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
X509v3 Authority Key Identifier:
keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
sbgp-ipAddrBlock: critical
IPv4:
158.120.28.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:bc:f1:a4:d5:8b:09:fa:e3:e6:ea:b8:e2:a3:a9:51:f7:96:
87:96:32:22:51:e3:ae:f2:5f:4b:ca:e5:c9:06:49:a5:78:a8:
9a:23:1e:c7:d1:2b:f1:f0:b3:c9:07:52:2f:9f:01:89:e4:6a:
53:00:ea:f9:ae:00:57:0f:9b:db:5c:48:62:b5:c4:69:3e:8d:
55:0f:7e:f0:af:be:57:69:86:e1:40:a6:bd:d7:a4:34:40:97:
67:dd:88:5c:fc:41:15:f6:67:83:b8:43:98:69:2d:d1:4e:b2:
b5:f4:9b:c1:f9:9a:c2:08:4c:6f:15:cf:34:b2:63:b8:6a:6d:
93:fa:fd:f0:5f:71:c9:2e:78:f3:24:a6:fb:b5:34:d0:cf:cb:
77:48:9b:eb:d6:47:e6:30:ab:d0:2e:fc:7f:2c:8b:70:af:13:
f5:29:b4:3d:f1:f6:0c:b2:ac:3f:c9:6c:d7:7f:bf:86:99:9a:
fc:49:5e:7b:62:3a:04:2c:86:21:cb:e4:8f:e0:2c:d2:ac:17:
3c:73:90:eb:10:47:19:46:d9:dd:b9:ac:14:6b:f0:17:4b:af:
f6:57:3e:23:75:e3:4c:b3:6f:ba:fc:4a:ec:15:e1:dd:1b:3a:
50:89:a6:0a:89:85:df:e4:0c:44:a2:de:dd:04:f8:e0:ac:32:
b6:2d:6d:bf
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6MikdaWtbyBHUsaQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy
OWJmMB4XDTI2MDcxOTA5MDAxMVoXDTI2MTAxNzA5MDAxMVowLzEtMCsGA1UEAxMk
NmIyZTg5ODYtYWQwYi00MjJkLTgzOWQtNzNlNjY5OWVjNDI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3GTcL7AIVqodpXYqhQc0J1aExaQ6uAMz880D
YdyfLl7OSD5qAciQzfMu3y16RosAUYRajlo6m/2mzkZc3yU+xNEZW2XRz4KXKZBV
Zl9b6zdKSTXtP71JeEkXpCPCQK+WAbRb/xx70kfLwh4exYIPczQc9/pg+nA8/pYn
HJxxvr6AnG88PB5gFQFD2adywWvwDWCyh7aEaHUXa+vu4oaXGL3vT1cTP398w3Cl
OIaimvD2x6j2IbRVDPz0JkOryxQAOtpdcdLhFqQPePziEkDFEG+2gVWPExF8sqW9
95J/omgdnHgE/hkwd9zfpWyJg8MHL6eEmrXBT5VCMQ+7TWqRzQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOChiNaORkBEFtgIOlB0m5no5AUOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2
ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvNmJmNjUyZjAtOTZkYi0z
MWMyLTgyMGUtNDYwMjZlMzlmZjQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx
NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4
MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx
YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnngcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIa88aTViwn64+bquOKjqVH3loeWMiJR467yX0vK5ckGSaV4qJojHsfR
K/Hws8kHUi+fAYnkalMA6vmuAFcPm9tcSGK1xGk+jVUPfvCvvldphuFApr3XpDRA
l2fdiFz8QRX2Z4O4Q5hpLdFOsrX0m8H5msIITG8VzzSyY7hqbZP6/fBfcckuePMk
pvu1NNDPy3dIm+vWR+Ywq9Au/H8si3CvE/UptD3x9gyyrD/JbNd/v4aZmvxJXnti
OgQshiHL5I/gLNKsFzxzkOsQRxlG2d25rBRr8BdLr/ZXPiN140yzb7r8SuwV4d0b
OlCJpgqJhd/kDESi3t0E+OCsMrYtbb8=
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:01:36 2026 by rpki-client