
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/ecc2f70e-67af-3a14-9035-096418ec8b92.roa
File: ecc2f70e-67af-3a14-9035-096418ec8b92.roa (raw, json)
Hash identifier: Oa4gVJplj5nCMFurUDDT0HR4CTjKl1GgAOiGG/5Jg9Q=
Subject key identifier: 0F:A9:02:EC:38:AF:EC:35:EB:3B:BC:8A:62:82:D8:A8:D0:D8:47:95
Certificate issuer: /CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Certificate serial: 010D0C9F4328584EA79149D78788223E69E2E880
Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/ecc2f70e-67af-3a14-9035-096418ec8b92.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 15164
IP address blocks: 138.199.96.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 23:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:91:49:d7:87:88:22:3e:69:e2:e8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=9db6673d-4050-4321-b661-ccf81752ea8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:12:d4:de:cf:f4:00:8d:f2:62:d0:85:45:58:
49:76:f2:a0:d7:00:a9:fe:e9:5d:97:d4:e8:7a:08:
ef:40:b8:da:81:33:7d:57:45:33:a0:3f:5b:e7:f8:
81:a3:2c:89:80:00:f1:a8:d1:d2:62:9b:cb:6a:0d:
99:c7:cc:66:4f:7d:41:85:4b:24:45:27:c4:a8:09:
36:3a:ec:20:c4:31:76:cf:ad:59:9d:2c:a8:74:56:
d7:be:e2:5a:62:c4:76:8a:fb:c1:6c:b6:24:05:34:
cf:24:02:31:a0:f8:3d:8e:7b:e8:42:2e:89:cb:e9:
4f:68:ba:13:a9:ae:ef:43:5b:73:71:19:5f:e9:eb:
06:42:02:7e:df:15:93:54:f6:12:b0:af:64:d9:51:
58:ba:4e:2d:68:15:26:a8:d6:53:99:04:e7:2d:43:
bf:1a:d8:29:48:6f:14:07:af:d3:59:e2:f2:c0:67:
73:9f:7d:1b:c8:55:98:4d:8b:49:34:6e:f2:95:9d:
1b:1b:dd:e4:3c:72:22:7f:d1:f3:bb:69:c4:1a:24:
4f:71:a7:48:61:b7:82:dc:92:0f:a7:31:6c:46:4e:
a0:dc:03:23:1a:39:14:50:3c:2c:dd:25:76:02:d1:
e0:8e:75:18:10:14:f5:99:ee:e5:ac:e7:86:18:17:
40:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:A9:02:EC:38:AF:EC:35:EB:3B:BC:8A:62:82:D8:A8:D0:D8:47:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/ecc2f70e-67af-3a14-9035-096418ec8b92.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl
X509v3 Authority Key Identifier:
keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
sbgp-ipAddrBlock: critical
IPv4:
138.199.96.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:d0:d1:00:43:5c:ac:cd:d2:44:a0:18:a8:31:a7:e8:04:8b:
99:a8:27:1f:53:56:73:7f:ea:88:e3:d9:65:87:e9:c6:91:74:
48:85:f5:25:1d:c3:be:14:84:7f:42:2b:9d:be:8c:ea:05:0b:
f1:e4:54:9e:ee:17:07:d4:64:67:ce:cb:ac:10:d0:e6:fe:e3:
d8:8f:75:f5:02:0f:28:3d:8a:dd:c8:75:c6:dc:23:0d:9d:f8:
8a:da:1c:b4:fe:b0:09:9b:fd:14:53:2b:35:76:44:7c:16:fc:
49:69:29:b1:f3:e2:6e:54:a1:cf:73:0f:0b:e5:36:a4:27:55:
5a:8d:d2:18:17:9b:a5:0f:9b:15:73:b5:9d:87:4d:0b:c3:fd:
64:51:b3:88:e2:b9:ff:f2:7e:ca:95:5f:23:87:36:63:ca:14:
fd:46:5d:72:97:66:15:04:03:93:67:01:6d:d1:64:b8:07:11:
b7:f7:50:7e:a7:6a:3f:60:9e:ab:2c:ae:b7:59:df:a9:25:db:
f5:6c:b6:e6:d3:56:52:7f:36:f3:81:10:ef:c9:61:ec:fd:f7:
ec:e6:83:a9:30:f0:da:50:7e:8c:b4:09:27:40:1c:f8:44:3c:
c5:c2:b9:20:94:66:16:81:c2:63:34:d7:8d:27:cc:04:bc:ed:
66:a4:4d:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 22:45:25 2026 by rpki-client