
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a7aa98c8-5315-3116-a00d-5e1f1b63dcf2.roa
File: a7aa98c8-5315-3116-a00d-5e1f1b63dcf2.roa (raw, json)
Hash identifier: KDBZzbdFDDPJYRXshdi4kj5rw8rDCW2JToMl0g0Vj74=
Subject key identifier: CF:53:FD:F2:2E:54:10:6D:30:F6:B4:50:A2:EC:39:AB:D3:7D:8C:AE
Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial: 010D0C9F4328584E9A7FD000FCF2D9399104D980
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a7aa98c8-5315-3116-a00d-5e1f1b63dcf2.roa
Signing time: Fri 24 Jul 2026 09:00:12 +0000
ROA not before: Fri 24 Jul 2026 09:00:12 +0000
ROA not after: Thu 22 Oct 2026 09:00:12 +0000
asID: 31898
IP address blocks: 173.199.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:9a:7f:d0:00:fc:f2:d9:39:91:04:d9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
Validity
Not Before: Jul 24 09:00:12 2026 GMT
Not After : Oct 22 09:00:12 2026 GMT
Subject: CN=b4fdb0c4-7393-4b6b-861a-78b460bd133f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:30:99:c1:25:0b:76:af:f0:fd:6f:38:59:50:
bd:a0:35:33:98:3f:c6:d5:43:18:fb:b0:05:fa:5f:
a8:85:6d:96:e9:ca:46:df:88:23:a6:9b:c5:24:d5:
c8:86:5d:12:9e:55:24:11:c2:65:26:44:4a:33:fe:
70:49:47:32:c6:89:bb:75:47:0f:78:79:ec:9c:bb:
b5:de:fa:80:6d:1e:48:a7:b8:1e:6e:bb:49:53:e6:
f4:0e:28:50:a8:8d:33:1e:cc:4f:a9:47:4a:78:f8:
2e:b6:15:11:cf:3a:c4:d5:a3:0a:a2:80:e8:f1:2d:
59:dc:a0:e1:55:b7:43:12:6e:ad:8e:02:ba:ac:e9:
43:86:25:42:31:08:7c:05:2c:ac:1c:d8:2e:50:04:
c6:53:63:35:bf:f0:9b:bc:9c:6a:56:ac:f2:a3:9b:
9d:03:61:04:dd:b2:b8:02:5b:d6:a7:be:a4:1f:37:
85:e7:4d:99:84:15:de:2a:42:28:30:1c:51:6b:6a:
08:55:f5:a3:03:6a:60:1b:ef:fa:8c:36:9c:24:f8:
6f:d7:de:05:6c:84:95:65:40:dd:66:ae:84:13:f8:
3e:bb:7a:2c:99:68:70:8f:10:a1:e3:69:6f:e1:99:
41:cf:5b:75:fe:e5:10:35:dc:cc:31:a3:98:a3:09:
39:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:53:FD:F2:2E:54:10:6D:30:F6:B4:50:A2:EC:39:AB:D3:7D:8C:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a7aa98c8-5315-3116-a00d-5e1f1b63dcf2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
X509v3 Authority Key Identifier:
keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
sbgp-ipAddrBlock: critical
IPv4:
173.199.14.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:0f:1c:2d:95:93:1d:1c:01:5a:6f:99:37:06:96:f1:33:fa:
b3:60:88:ef:04:6c:5b:0f:b9:53:2c:12:a0:a7:0a:17:de:5a:
b9:84:8c:a6:31:39:53:c9:09:fb:11:8f:c5:bb:b0:2f:79:8e:
ff:59:49:55:32:03:ad:05:5e:d2:f0:6e:0b:e9:8b:3c:ac:72:
14:b5:e8:ae:2f:50:7b:d2:85:37:3c:70:15:ee:84:a8:81:70:
74:26:31:54:05:41:4d:b1:d0:e3:a8:6c:1b:a7:c8:a6:a2:29:
eb:8c:12:9e:63:54:a8:28:3a:29:38:0f:98:04:bf:02:9a:b0:
46:6d:80:30:86:90:f0:be:e2:5a:39:f7:54:de:7a:94:24:a0:
7e:65:13:6a:d1:d2:a5:fc:78:4b:fa:4e:56:e8:44:9b:06:ec:
e9:cb:a1:49:c6:7f:9a:7c:a0:a6:f6:42:1e:07:73:97:bb:8a:
c7:69:37:d0:35:89:e0:53:e3:7c:49:c7:57:dd:0e:b8:5f:98:
c3:73:fb:f8:43:f5:97:15:76:5b:ae:ee:11:4e:36:ea:a8:43:
80:2c:c2:22:b4:41:8f:f8:1d:70:4d:b4:ac:62:96:45:71:4d:
c8:8c:0f:b4:4a:84:c7:84:6d:6c:85:85:75:18:99:90:58:78:
f8:a4:b7:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:20:53 2026 by rpki-client