
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/ed892fc0-259a-350e-883a-4579f8f9fddc.roa
File: ed892fc0-259a-350e-883a-4579f8f9fddc.roa (raw, json)
Hash identifier: 8oH+1P42kx69munQ9UOHijRbCIFbfFr1DNZWbsDgye8=
Subject key identifier: 21:96:52:90:E6:5B:9C:CC:85:B5:B9:56:F0:35:38:C6:33:A9:23:C0
Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
Certificate serial: 010D0C9F4328584E78FF864951CD60F098E8F3E0
Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/ed892fc0-259a-350e-883a-4579f8f9fddc.roa
Signing time: Sun 12 Jul 2026 09:00:11 +0000
ROA not before: Sun 12 Jul 2026 09:00:11 +0000
ROA not after: Sat 10 Oct 2026 09:00:11 +0000
asID: 31898
IP address blocks: 144.25.32.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:78:ff:86:49:51:cd:60:f0:98:e8:f3:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
Validity
Not Before: Jul 12 09:00:11 2026 GMT
Not After : Oct 10 09:00:11 2026 GMT
Subject: CN=4e3c3e69-0fa1-46ba-8c3b-21b914afe70f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ff:1b:1c:24:6a:7a:3c:c5:90:d1:24:95:2c:
5e:62:fb:c0:6d:f3:10:7e:c1:cc:69:f4:6d:04:1c:
57:6f:38:e8:79:cc:39:27:01:77:8a:11:ee:76:8e:
bb:2e:20:72:7b:36:85:96:27:de:b6:b4:4c:ee:97:
84:f5:76:97:cb:ad:a9:f2:c6:38:55:3f:17:9b:ec:
4e:76:10:b9:d3:ec:f3:94:89:ac:be:5b:cc:53:b0:
c3:aa:c1:08:49:92:80:63:19:74:96:17:5e:68:ed:
a7:0c:5d:4e:96:4b:02:ca:7e:b2:3e:5f:2b:b0:3d:
ec:77:f2:7b:40:51:7d:0c:2a:1f:6d:ae:40:32:cd:
c8:d4:ac:5a:c6:b5:06:c6:0a:13:91:80:60:b1:70:
7d:7e:a4:f6:e0:41:79:16:66:07:5c:6d:f4:e6:f0:
ec:9a:fb:64:62:fd:ef:31:22:79:f4:bf:b5:86:b7:
98:b6:81:8d:87:bc:93:cc:3f:30:8c:1e:1c:3a:e5:
d0:2b:e0:45:2f:a7:2d:ed:11:f3:c2:b6:36:82:e9:
99:99:66:44:4d:72:0e:3a:00:65:8a:9e:57:72:d5:
f1:d5:06:f4:8e:eb:a8:33:2c:2f:fa:bb:63:51:96:
cc:61:3b:71:9c:4b:43:d2:ce:04:3f:d1:91:7f:4a:
58:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:96:52:90:E6:5B:9C:CC:85:B5:B9:56:F0:35:38:C6:33:A9:23:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/ed892fc0-259a-350e-883a-4579f8f9fddc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl
X509v3 Authority Key Identifier:
keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
sbgp-ipAddrBlock: critical
IPv4:
144.25.32.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:f7:7c:4c:e2:cf:4f:6f:a9:c1:5f:43:9c:56:b3:25:ab:de:
49:fd:af:d5:22:65:0d:f6:ba:cf:fa:c9:99:58:df:0d:62:35:
7c:86:19:e5:f5:0d:cc:0a:2d:22:86:a8:c3:e7:6a:32:41:38:
f9:8b:0c:a0:24:61:1a:4c:58:b4:8f:10:df:ff:39:b6:f2:d5:
85:ae:09:32:0b:f6:96:b8:05:e4:30:f7:68:0f:b8:70:55:e7:
7e:0c:04:6b:8b:6e:86:be:23:b7:02:a0:6b:2c:78:26:41:d5:
c4:39:d6:41:e3:59:c5:32:9a:17:b3:bd:a3:6a:6a:38:f3:d3:
cc:03:7d:14:79:b8:40:1e:fa:e3:48:f1:4f:e7:e4:73:47:92:
64:f3:1b:a4:6c:30:9b:96:9a:86:16:b6:8d:8b:9f:b6:ad:62:
c2:97:b4:c5:e1:59:b7:9e:07:b5:f2:75:33:5a:b3:26:c2:d6:
68:d6:3f:30:9a:c0:01:10:d7:98:6d:86:33:f6:95:09:95:cd:
ab:4e:8f:3a:a2:dd:46:60:63:25:d1:a0:f9:12:e9:89:c6:2f:
f7:13:69:3b:85:9b:54:cf:03:a8:c6:1d:60:44:57:1c:af:98:
8f:51:f4:22:c6:13:f6:8f:2c:d8:ae:8c:af:06:4d:f6:78:8e:
7e:d2:91:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:09:59 2026 by rpki-client