
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/4ee038a2-ad69-3169-b6be-f55d0b936b24.roa
File: 4ee038a2-ad69-3169-b6be-f55d0b936b24.roa (raw, json)
Hash identifier: 0Cr0J+qN3TCQ1BDgibIAOj7NI44rOIhrGUHeDs6qzmU=
Subject key identifier: CA:00:CB:74:CF:A7:41:35:6A:FA:18:27:C4:86:F9:34:EA:69:52:C4
Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial: 010D0C9F4328584F7FE2FB1F85A6C3B1BA7057A0
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/4ee038a2-ad69-3169-b6be-f55d0b936b24.roa
Signing time: Wed 14 Oct 2026 13:00:12 +0000
ROA not before: Wed 14 Oct 2026 13:00:12 +0000
ROA not after: Tue 12 Jan 2027 14:00:12 +0000
asID: 62044
IP address blocks: 170.85.2.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 01 Nov 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:7f:e2:fb:1f:85:a6:c3:b1:ba:70:57:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Validity
Not Before: Oct 14 13:00:12 2026 GMT
Not After : Jan 12 14:00:12 2027 GMT
Subject: CN=14edec7e-bba1-4731-9b28-ad919317d888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:cc:1e:e4:fd:c9:85:ed:45:7e:a9:bc:c8:62:
9e:6c:ee:61:e1:e2:9f:93:2c:16:6e:18:c1:00:81:
6c:8c:1b:47:64:ba:e7:4d:41:e6:42:ba:98:f7:5c:
be:f5:62:ac:47:93:de:34:fd:2b:47:6a:3d:02:6a:
28:5f:70:2b:f9:3c:90:11:c8:6c:d4:3e:42:5e:f1:
f1:8b:8c:e9:cb:22:c7:91:b5:8c:d6:4b:ac:f9:fa:
9d:01:2c:d7:9b:93:eb:6d:92:1b:2f:e1:51:d6:e1:
b7:c0:08:cf:60:0e:b3:64:cc:ba:d0:17:55:87:8c:
02:58:09:93:87:d6:2b:3c:7c:c8:0c:f1:37:13:57:
14:99:68:87:82:3d:cb:f6:b4:68:6a:20:2f:8a:9b:
79:92:d4:31:11:3b:80:07:9f:1b:0e:60:3a:51:98:
f8:71:fc:a2:37:1a:2b:6e:0a:b6:e7:f2:60:f7:54:
2e:1a:2a:00:81:31:df:fa:86:a3:fc:31:4c:40:f2:
e6:c3:46:da:2f:1c:c3:cb:69:2c:d1:58:59:32:03:
ac:8b:de:1f:32:13:f4:ad:ae:05:7f:0c:b7:c2:f0:
0c:8c:f8:35:12:38:1d:34:4b:41:a5:18:68:41:7c:
97:e2:7b:d5:63:40:e5:58:8e:bf:f0:50:16:f0:4a:
86:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:00:CB:74:CF:A7:41:35:6A:FA:18:27:C4:86:F9:34:EA:69:52:C4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/4ee038a2-ad69-3169-b6be-f55d0b936b24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
X509v3 Authority Key Identifier:
keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
sbgp-ipAddrBlock: critical
IPv4:
170.85.2.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c4:80:37:32:d0:c4:f0:15:38:4c:84:03:39:4f:6e:1c:5c:10:
39:88:92:fd:54:7b:2e:98:d2:1a:e4:8e:da:65:5c:e2:1c:d4:
8e:a4:c8:75:65:c2:1b:36:a8:91:ea:a2:53:cb:22:b1:b5:31:
52:10:a6:7f:93:a0:c1:62:09:dd:f6:f7:bb:5a:e3:15:5e:53:
d4:d6:0b:4b:97:0d:dd:3c:1c:74:a2:b6:13:9d:03:fb:bf:54:
5b:12:44:ac:27:ec:b8:95:d0:78:95:9b:10:97:a8:b9:e9:37:
29:5f:e8:f1:e6:df:76:a2:36:0b:31:f2:cb:05:9c:95:d0:ae:
c0:5c:5e:38:7b:48:53:51:d0:27:82:a9:ad:46:cd:8e:60:97:
38:4e:8e:ce:13:4c:ac:33:35:7d:90:d5:52:36:59:2f:89:a8:
76:eb:e3:49:f6:de:7d:f2:c8:de:d5:c0:69:a6:16:53:c4:a8:
2f:df:5e:95:d2:6d:cb:10:11:ec:68:dd:bb:70:88:61:6e:27:
5d:91:c6:2d:7c:9c:60:98:84:7b:61:c4:82:6b:2c:24:e4:c2:
a4:a8:ff:34:b5:12:3b:7e:9b:b5:14:c2:94:8a:41:91:39:73:
85:93:12:f7:3c:1a:c7:57:e7:44:5a:5c:b3:8c:bd:98:39:93:
ed:ad:2b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 02:20:55 2026 by rpki-client