
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/2b70cd1b-681d-3341-8277-ce21a1801227.roa
File: 2b70cd1b-681d-3341-8277-ce21a1801227.roa (raw, json)
Hash identifier: r7o2GvqTYvj2elIO3MDvqlLHVHvMH5emtgGJnmrtueU=
Subject key identifier: D4:34:09:12:0A:84:90:1A:E5:CD:12:EB:BB:92:B4:CB:77:8A:11:26
Certificate issuer: /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523
Certificate serial: 010D0C9F4328584E2D9EFF13ED73458CF021AA80
Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/2b70cd1b-681d-3341-8277-ce21a1801227.roa
Signing time: Mon 15 Jun 2026 09:00:12 +0000
ROA not before: Mon 15 Jun 2026 09:00:12 +0000
ROA not after: Sun 13 Sep 2026 09:00:12 +0000
asID: 2615
IP address blocks: 147.1.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 11 Jul 2026 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:2d:9e:ff:13:ed:73:45:8c:f0:21:aa:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523
Validity
Not Before: Jun 15 09:00:12 2026 GMT
Not After : Sep 13 09:00:12 2026 GMT
Subject: CN=b3f41a16-7767-40bc-9b88-f04bb340aa69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:00:77:e8:e1:9c:b6:92:82:2a:96:e8:d7:9a:
0c:32:db:aa:1f:2c:30:78:2f:cf:5a:45:3f:b0:ac:
aa:6e:d5:b3:0c:5f:c1:97:1f:0f:5e:c7:10:ad:a9:
9f:83:72:18:cf:4b:3a:97:20:a2:35:bc:48:48:a5:
52:05:88:16:31:d2:f2:cd:81:d1:71:c4:b9:fe:88:
f5:2a:6e:8c:de:bd:bd:eb:70:db:58:ea:d2:87:4d:
ad:01:66:09:38:f7:29:ec:5d:b2:bb:b7:04:f9:bd:
4c:4a:19:a2:4e:99:39:e1:af:28:0e:27:98:28:fb:
8e:84:e3:a4:aa:93:f4:cd:07:b7:11:3a:14:99:22:
e3:61:eb:63:88:fc:e0:da:41:20:2e:89:01:12:2a:
0e:20:df:e3:b1:23:6f:cb:ec:61:87:07:08:a1:6e:
72:20:69:49:db:1e:15:23:83:43:10:84:93:9f:4a:
d7:18:e4:29:6b:22:f7:89:1d:b7:ae:f1:88:5b:44:
3c:82:e9:77:a8:60:62:b6:ce:18:17:23:60:30:9f:
01:61:c2:50:37:22:a5:3a:99:eb:b2:81:fe:6f:44:
a8:53:99:61:a6:db:06:0b:7c:d7:73:13:bd:49:a6:
a8:53:71:4f:25:f6:00:78:b3:c3:c1:3d:29:74:83:
e3:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:34:09:12:0A:84:90:1A:E5:CD:12:EB:BB:92:B4:CB:77:8A:11:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/2b70cd1b-681d-3341-8277-ce21a1801227.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl
X509v3 Authority Key Identifier:
keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer
sbgp-ipAddrBlock: critical
IPv4:
147.1.10.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:0b:88:e9:27:14:a8:01:66:04:6b:71:14:dd:f9:b5:8d:18:
f0:d6:60:f4:dc:f5:6b:55:31:83:d3:a7:aa:46:ea:8e:a0:d7:
db:99:c0:d4:db:d3:f2:7c:05:3a:bf:24:00:06:f4:4e:64:95:
75:0b:a5:d3:fa:00:57:6f:f3:f8:31:ee:37:89:9a:13:ff:03:
fe:b1:36:a3:73:12:d7:55:42:12:b1:69:76:38:6c:16:76:9a:
84:62:6b:63:70:d1:85:66:15:db:91:01:d9:85:d5:ed:1e:8b:
6e:52:84:bb:19:f5:f6:c4:70:e6:3b:4b:08:1e:0f:d7:a0:76:
23:b2:58:14:87:7a:d6:2f:ae:06:54:a3:48:c8:34:42:ee:ce:
d2:ca:50:48:5c:e8:68:70:74:17:d6:7e:1e:21:61:77:f4:86:
92:35:3b:b5:68:b1:fc:5d:c4:02:f5:0e:4a:ba:d9:1d:df:43:
5e:c8:09:78:73:42:5d:47:bf:76:3e:94:d3:5a:08:2e:40:a3:
60:16:f8:cf:cd:2f:40:ad:57:d0:2c:7b:c4:b4:10:32:85:bc:
3e:1f:9c:86:10:eb:13:9b:f0:13:49:f4:22:3c:39:f3:7c:a7:
93:90:93:b4:72:aa:25:44:e4:46:ca:a9:13:f9:e6:f1:b9:1f:
74:87:0b:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 9 21:06:01 2026 by rpki-client