
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/970fb05c-2346-393b-a7b7-10ed7f9bd285.roa
File: 970fb05c-2346-393b-a7b7-10ed7f9bd285.roa (raw, json)
Hash identifier: /yQb+B7MG39iTrqNTS2ztCcyeXrYCZyt7IhL/3/Twbw=
Subject key identifier: DB:E0:C4:93:5B:B0:9B:F3:C0:15:B6:E2:48:8D:D1:70:22:04:14:DD
Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial: 010D0C9F4328584EB6E1A9F9B312EE0926BAB600
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/970fb05c-2346-393b-a7b7-10ed7f9bd285.roa
Signing time: Mon 03 Aug 2026 13:00:12 +0000
ROA not before: Mon 03 Aug 2026 13:00:12 +0000
ROA not after: Sun 01 Nov 2026 14:00:12 +0000
asID: 16509
IP address blocks: 170.85.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 16 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:b6:e1:a9:f9:b3:12:ee:09:26:ba:b6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Validity
Not Before: Aug 3 13:00:12 2026 GMT
Not After : Nov 1 14:00:12 2026 GMT
Subject: CN=86494a27-0de8-4ec3-b605-338cd3614f14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:c7:d6:9a:e7:2e:5d:13:31:9c:b4:11:f5:eb:
3e:ff:5f:91:17:31:bc:cd:f2:f7:4d:64:53:b3:2a:
a5:67:48:86:49:81:f7:ee:54:d6:de:8d:8f:2e:96:
73:fc:9c:07:ec:ac:0f:d5:8d:da:20:18:f3:26:13:
12:b9:74:7e:7f:22:b6:eb:a1:2a:f6:31:9c:df:f7:
8a:d8:1e:53:b4:44:56:55:7b:72:79:79:e4:e9:59:
7e:cd:e9:ee:cc:2f:7c:7f:7f:f5:cb:79:3f:ae:6b:
4c:53:57:83:cf:b1:bb:a5:8f:3a:9d:69:d4:1b:bf:
92:55:42:8e:f5:af:c9:83:84:03:6d:cb:c2:24:28:
a9:d7:c9:97:58:63:e9:41:4c:41:07:a4:2d:08:2d:
5c:99:d6:37:40:01:a4:73:3d:dc:3a:d7:d0:9e:b9:
e1:06:ec:8e:ec:a1:5e:58:b4:72:bc:97:47:fd:09:
f9:e8:25:7d:4d:c4:c9:58:25:fc:99:5a:78:47:f2:
75:d9:8a:ae:68:d0:e5:26:5a:c1:17:f4:a1:d9:60:
4b:e6:7c:07:59:40:74:b2:77:bc:c7:aa:a5:7d:38:
25:bc:a6:3e:9f:cb:41:1c:e2:a7:7b:33:88:c8:18:
03:92:a9:b3:e9:aa:5f:a1:38:c8:06:1a:d3:cd:18:
d4:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:E0:C4:93:5B:B0:9B:F3:C0:15:B6:E2:48:8D:D1:70:22:04:14:DD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/970fb05c-2346-393b-a7b7-10ed7f9bd285.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
X509v3 Authority Key Identifier:
keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
sbgp-ipAddrBlock: critical
IPv4:
170.85.120.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bc:43:da:3a:aa:60:73:45:3a:7b:65:eb:a1:81:83:2b:4f:9e:
3c:9a:f3:6e:0f:1d:17:ef:50:f9:fe:a3:af:8d:64:34:18:29:
19:c8:51:c4:3b:22:62:42:26:90:97:03:af:88:c3:e0:4b:1e:
d4:7f:fd:78:ff:49:80:d9:66:9d:8c:8f:57:6a:66:ec:37:16:
e5:0d:70:c7:c2:f4:28:98:35:7f:df:f4:72:13:be:b1:6e:74:
ed:f6:46:4b:8f:f9:33:9d:f0:78:fe:da:d4:66:04:a1:7b:5c:
5c:ee:54:4e:f1:a0:52:94:76:22:c8:58:65:24:26:88:80:4d:
be:d1:d1:06:d6:51:04:78:e2:ad:e5:f8:fe:d0:a7:f7:94:c8:
3d:2b:eb:a9:88:03:7f:41:67:7a:38:dc:0d:1d:81:a1:19:e0:
8b:eb:d4:34:fb:ad:3e:27:d4:e6:75:82:e2:4e:cf:43:d5:12:
db:84:74:92:45:f8:43:90:f9:ee:05:96:60:26:a1:f4:a5:07:
bb:a7:4f:c0:8e:5c:e1:99:84:8a:02:27:5d:e7:a6:8d:29:ab:
ed:dd:56:da:b7:30:ca:3d:03:90:b8:34:ab:bb:9b:44:3a:82:
b9:04:ca:c9:4d:28:13:46:c8:71:23:0a:5d:c6:b6:fc:e7:79:
49:c2:47:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 16:39:42 2026 by rpki-client