
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d/9c7dbc93-7a06-3089-8f84-f5e072ffaaef.roa
File: 9c7dbc93-7a06-3089-8f84-f5e072ffaaef.roa (raw, json)
Hash identifier: tPqnJkO2p3Si6qH53zcesYNN4u9VsZyrsXnFTqktG7k=
Subject key identifier: 0D:8A:1E:CE:2F:53:67:B3:30:5B:60:00:94:C0:F5:6E:53:EB:D9:1A
Certificate issuer: /CN=dd70c3a1-6ad0-4cdd-aad7-613381f0e60d
Certificate serial: 010D0C9F4328584DA6B00AD4F261131CAD06B4C0
Authority key identifier: 33:1B:5C:1A:CE:D6:7A:D6:BF:82:2F:90:2E:FA:46:1C:C1:51:5B:6A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d/9c7dbc93-7a06-3089-8f84-f5e072ffaaef.roa
Signing time: Tue 28 Apr 2026 01:00:24 +0000
ROA not before: Tue 28 Apr 2026 01:00:24 +0000
ROA not after: Mon 27 Jul 2026 01:00:24 +0000
asID: 8070
IP address blocks: 97.107.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Apr 2026 23:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:a6:b0:0a:d4:f2:61:13:1c:ad:06:b4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd70c3a1-6ad0-4cdd-aad7-613381f0e60d
Validity
Not Before: Apr 28 01:00:24 2026 GMT
Not After : Jul 27 01:00:24 2026 GMT
Subject: CN=f58d1863-706e-42fd-b907-543e687a621a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:40:b4:34:a5:47:24:0d:23:2d:98:5c:b5:21:
ad:f6:c9:a5:31:8e:fb:34:00:45:44:70:44:bf:20:
a2:09:66:1e:72:b7:2a:b0:f5:b4:83:a3:61:f7:fd:
80:31:cd:d2:42:97:3f:91:9d:99:62:95:88:58:46:
df:9f:fd:eb:37:3c:b1:c5:b7:f2:f7:3e:78:3d:3c:
b1:a0:31:ac:b1:2e:b0:0f:27:97:14:a1:9a:9d:13:
25:ea:7c:bb:05:42:53:73:98:d7:0b:94:c5:24:a0:
50:b1:1a:ed:ea:12:32:f8:42:28:ad:f9:78:1c:0e:
60:1b:b0:9a:32:9a:0b:ed:94:c4:45:6e:d6:7b:90:
6d:d2:72:e5:0f:f4:56:aa:b5:96:10:34:93:4b:e8:
0f:02:68:53:21:eb:fb:47:1c:49:f5:fc:6a:ba:8b:
9c:80:fc:a4:30:8c:3d:24:3a:b7:41:5a:bc:c2:14:
08:de:22:9d:4c:bb:28:2f:85:91:c0:04:f2:d4:68:
1a:20:e9:17:1b:f5:ce:d8:5f:96:1b:54:e6:4f:1d:
aa:98:5a:37:3b:2b:0c:84:e0:bd:77:23:51:b5:e4:
35:44:74:fb:e3:be:08:81:de:61:79:15:fe:2b:fa:
9d:52:a9:9c:87:61:b2:da:15:71:a7:37:a4:10:af:
6a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:8A:1E:CE:2F:53:67:B3:30:5B:60:00:94:C0:F5:6E:53:EB:D9:1A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d/9c7dbc93-7a06-3089-8f84-f5e072ffaaef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d.crl
X509v3 Authority Key Identifier:
keyid:33:1B:5C:1A:CE:D6:7A:D6:BF:82:2F:90:2E:FA:46:1C:C1:51:5B:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/dd70c3a1-6ad0-4cdd-aad7-613381f0e60d.cer
sbgp-ipAddrBlock: critical
IPv4:
97.107.239.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d0:b9:4d:24:33:3f:e1:9a:93:3d:68:c1:e7:87:3f:17:c7:c7:
69:dc:3c:6b:54:75:82:24:70:25:9d:80:c5:be:35:50:38:42:
df:fe:91:96:01:1d:bf:46:cb:6f:b6:de:a1:ea:88:35:32:9b:
8b:98:a3:62:8b:7c:0d:f5:e1:ae:c1:83:bf:e8:48:d3:46:0a:
ba:b1:1b:93:39:3e:53:68:6d:6c:45:c8:71:86:88:1a:65:e2:
82:16:84:9b:a9:c0:39:f9:f4:1e:be:1f:c4:18:82:80:9c:25:
f0:99:58:18:3d:ab:d7:ec:3b:44:41:51:d9:91:d6:24:89:b6:
86:2f:ec:d8:2b:3b:1f:f7:33:b3:62:02:c7:92:4b:3c:7d:b5:
4d:e3:43:4d:e4:f2:80:82:77:40:61:2b:db:d7:99:fb:0d:8b:
73:40:08:7d:d0:d8:3c:de:5a:fb:30:73:4c:a3:d0:69:a2:9d:
72:f0:44:c5:70:3d:03:96:72:d0:41:db:9f:81:7f:bf:17:fa:
52:0b:38:d3:ad:78:33:11:48:c2:d1:0e:af:84:49:12:2e:11:
71:35:7d:51:8f:d7:ce:42:1c:65:a6:ee:da:ee:d8:8b:1f:f7:
1c:d8:a8:3e:f1:f2:81:d6:71:40:77:fb:ed:3d:dc:08:ee:a2:
91:b6:b6:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 12:55:55 2026 by rpki-client