
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0e24e24b-ee77-39da-870b-5238e40967ff.roa
File: 0e24e24b-ee77-39da-870b-5238e40967ff.roa (raw, json)
Hash identifier: +PNTUT66np52vr4W8z9zClhxJcggeK67xhrPohD7bDQ=
Subject key identifier: DE:87:CA:00:D7:B9:33:02:30:21:01:D8:11:72:CC:11:7D:3B:53:E3
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584EAA518C35AE36F6DFAEAB3C00
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0e24e24b-ee77-39da-870b-5238e40967ff.roa
Signing time: Thu 30 Jul 2026 01:00:12 +0000
ROA not before: Thu 30 Jul 2026 01:00:12 +0000
ROA not after: Wed 28 Oct 2026 01:00:12 +0000
asID: 31898
IP address blocks: 148.116.32.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 29 Aug 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:aa:51:8c:35:ae:36:f6:df:ae:ab:3c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Jul 30 01:00:12 2026 GMT
Not After : Oct 28 01:00:12 2026 GMT
Subject: CN=bf19a17a-0001-4008-a4fe-e8c438affa47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:24:e7:2c:3e:c7:2d:04:09:8c:b4:b9:92:9f:
33:89:f9:ad:8c:32:62:8d:85:c1:61:b5:4c:98:12:
a7:98:c8:49:a4:05:bf:e1:2d:27:b3:7e:8d:c9:03:
08:ea:6e:43:ae:77:d1:dc:2f:c2:8b:38:98:af:af:
1e:a0:e5:b6:0a:f6:d7:8c:96:aa:57:3b:91:42:49:
84:d8:de:76:08:4c:54:fd:a2:4a:76:bb:bf:73:ab:
da:22:90:18:8c:10:7a:5a:37:7a:f1:02:36:db:33:
6f:b4:f1:69:28:5b:42:8b:75:eb:58:f3:9d:05:7b:
60:47:b8:eb:02:25:c2:23:3f:59:95:16:50:4c:97:
03:16:5d:bd:ec:c5:7f:79:0e:74:1d:15:0f:5e:ee:
14:56:fc:f1:9d:67:36:52:f0:df:c8:1d:6c:b1:3d:
91:7c:73:f1:5c:33:a9:af:de:25:65:3c:69:38:be:
0d:0e:9a:06:de:b6:03:bc:e2:40:a7:11:f1:01:02:
ce:ae:38:99:0d:59:70:6c:e6:b5:68:08:ab:b8:2c:
71:71:c2:0a:60:ae:9b:1e:7a:a6:64:13:77:b8:96:
74:92:d5:ca:57:73:38:87:6e:0b:ea:e7:a7:b7:25:
42:d5:d2:59:a6:29:9c:89:50:45:29:fc:ca:46:b9:
b7:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:87:CA:00:D7:B9:33:02:30:21:01:D8:11:72:CC:11:7D:3B:53:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0e24e24b-ee77-39da-870b-5238e40967ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
148.116.32.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:33:a0:e7:76:67:f7:72:87:98:0b:8a:32:82:a9:20:b2:90:
cf:a1:fa:4c:27:5b:ba:b0:f1:75:56:b8:d5:24:26:af:f3:ce:
4f:fb:ab:49:de:1e:d9:65:d6:51:f2:33:76:23:a6:61:76:47:
b0:b9:15:8e:0d:5e:02:53:b1:6a:ab:e5:bb:10:7d:d9:e3:e6:
97:22:f8:4a:41:97:0c:64:d4:3f:da:76:ca:3b:97:64:6d:02:
3b:9b:8e:83:be:76:ba:92:bc:7a:fa:c6:0f:8e:7b:57:e7:e3:
8f:0d:1a:71:e1:10:62:0d:9e:97:35:51:08:3b:db:d4:57:2f:
17:b5:48:b9:07:d4:15:9c:7f:ce:6c:42:c7:08:73:0e:73:cc:
5e:4e:ba:b1:40:d3:eb:b1:ba:c1:10:9c:c5:16:6e:96:50:07:
22:ba:3f:fc:24:5a:27:c0:a4:72:c9:dc:97:0d:7c:94:91:1d:
5f:50:67:9e:d3:25:3c:fa:9d:f1:7b:12:8c:4b:19:c0:fd:0f:
43:33:c5:ef:2a:87:c2:50:ee:97:1c:41:4f:26:45:ff:2b:ad:
d7:8d:a1:55:6c:34:58:b9:30:98:f4:f3:fd:57:27:83:73:9d:
ef:be:dc:02:3d:f5:16:73:b3:fb:b3:1f:d5:e0:e5:e6:57:ed:
bb:30:e3:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 07:09:49 2026 by rpki-client