
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/cbf96851-ba9e-38bf-a963-da65f7f37210.roa
File: cbf96851-ba9e-38bf-a963-da65f7f37210.roa (raw, json)
Hash identifier: hUEqTvORKBHq5xuFNcqwJ/QXM6niDuO5sKN7qI5io/U=
Subject key identifier: B7:23:A4:12:8B:77:E0:95:DC:BC:F4:06:0A:11:49:76:0B:32:2F:2E
Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial: 010D0C9F4328584E8B24F9454D9D426C69E704C0
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/cbf96851-ba9e-38bf-a963-da65f7f37210.roa
Signing time: Sat 18 Jul 2026 21:00:11 +0000
ROA not before: Sat 18 Jul 2026 21:00:11 +0000
ROA not after: Fri 16 Oct 2026 21:00:11 +0000
asID: 16509
IP address blocks: 67.217.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:8b:24:f9:45:4d:9d:42:6c:69:e7:04:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
Validity
Not Before: Jul 18 21:00:11 2026 GMT
Not After : Oct 16 21:00:11 2026 GMT
Subject: CN=2b53c1a4-7075-4073-8822-d9f6bd5bb620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5e:12:71:53:ee:84:7a:fd:75:bf:d3:b5:24:
82:f5:2d:8e:73:3d:88:02:db:12:ea:c9:9e:80:34:
46:de:dd:b8:46:d5:70:2f:06:cf:4f:c9:92:6e:31:
25:fe:0e:04:ac:be:b6:68:14:6d:ec:0e:ab:7c:88:
ef:9d:94:45:c0:f5:17:97:f4:bb:32:82:82:6b:b9:
9b:b8:66:55:4e:e9:0b:2f:5e:be:a6:43:ee:5a:e4:
25:28:b4:2a:da:64:6f:00:81:33:47:7d:7e:fd:6a:
12:9b:e1:ae:e2:50:7a:dc:03:be:c8:8c:22:42:1f:
69:62:4e:21:fa:d4:de:b8:e2:bf:e4:de:39:0e:25:
a6:4c:71:39:40:63:c4:e7:38:b9:29:30:4c:e8:0f:
65:32:b1:ef:48:6e:82:d8:40:85:fb:17:d9:42:ef:
e0:a2:b6:54:3e:a5:b7:ce:21:fe:8a:4c:8f:e4:f6:
7f:a2:b3:41:a8:20:34:e1:e1:fb:d9:27:ae:2a:73:
38:04:fd:89:16:2f:b2:66:29:30:23:8a:f4:29:b8:
b0:25:fb:ed:24:be:34:88:fd:cf:1f:3b:01:3d:cb:
57:a3:9a:40:26:3a:d0:1c:2e:b7:c0:78:57:bc:d4:
03:a8:da:a3:68:0c:62:bc:27:dc:25:25:0a:20:4f:
f8:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:23:A4:12:8B:77:E0:95:DC:BC:F4:06:0A:11:49:76:0B:32:2F:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/cbf96851-ba9e-38bf-a963-da65f7f37210.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
X509v3 Authority Key Identifier:
keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
sbgp-ipAddrBlock: critical
IPv4:
67.217.95.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:39:94:37:3a:72:3a:e5:69:84:98:d9:fa:f3:57:2e:0e:a3:
dd:ba:5a:e3:f0:7b:c2:65:97:61:d4:28:31:bf:89:dc:d0:57:
59:d8:bf:9d:df:13:bc:9c:83:57:16:bc:e7:4a:df:ca:52:66:
2e:65:a9:3b:df:d7:af:61:8a:71:bc:6b:9d:8a:5e:b8:02:a3:
e9:03:07:a1:83:5f:dd:ed:bb:c3:be:0d:7e:16:b9:ca:3c:45:
eb:37:77:22:c3:40:df:a6:88:5a:94:70:b0:15:fc:35:88:c5:
a1:46:54:08:ae:82:b7:3e:47:4f:cf:df:39:cb:65:cc:87:26:
9c:13:c4:8e:22:aa:51:13:ed:8c:2e:ac:58:5e:bf:7a:f9:40:
7b:be:64:98:79:4d:7c:e2:fe:ef:24:77:68:4f:4b:d3:49:f8:
72:0e:b4:fe:e6:bc:88:89:17:85:41:f0:aa:fe:e4:21:0c:e5:
1a:07:75:ec:2f:29:59:62:3e:c6:e8:72:20:a9:c2:36:03:f2:
76:85:4a:ac:ad:25:58:00:f5:2e:c2:4d:83:19:78:c5:14:e8:
6c:fc:dd:2a:aa:82:85:57:b0:e7:9e:d6:88:ea:eb:a5:4c:45:
bf:dc:9b:28:7d:42:17:56:f4:cb:55:9d:dc:a4:2f:a6:4f:a0:
0c:6e:ff:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:23:23 2026 by rpki-client