
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/11fa8e1a-35b7-354e-8b62-fd190bda6c98.roa
File: 11fa8e1a-35b7-354e-8b62-fd190bda6c98.roa (raw, json)
Hash identifier: /Vw2D9VHbWDHzByxhsu8Uhr76/oBV6uWzJhKuaV38Po=
Subject key identifier: 8E:AF:67:1D:35:CB:E4:D5:0A:98:4B:E5:5A:C6:B1:F7:B3:EF:82:A9
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584EF181FCB4FC1A3BCA45CAC580
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/11fa8e1a-35b7-354e-8b62-fd190bda6c98.roa
Signing time: Mon 24 Aug 2026 13:00:12 +0000
ROA not before: Mon 24 Aug 2026 13:00:12 +0000
ROA not after: Sun 22 Nov 2026 14:00:12 +0000
asID: 31898
IP address blocks: 152.67.128.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 29 Aug 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:f1:81:fc:b4:fc:1a:3b:ca:45:ca:c5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Aug 24 13:00:12 2026 GMT
Not After : Nov 22 14:00:12 2026 GMT
Subject: CN=7635ab30-b6b5-4bf7-af36-d3d66b9ad91b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:05:7b:df:97:7b:4e:58:ac:fe:20:3a:91:5d:
ec:30:bb:35:ad:4e:dc:51:42:31:7e:7a:18:2d:84:
95:86:01:e0:9b:b7:f1:7e:5c:1e:ab:ae:8a:8a:74:
7c:57:60:4c:56:d9:ae:dd:81:d9:92:67:60:15:d7:
1a:6f:99:79:dc:6d:ee:52:6f:3a:2f:57:03:d8:97:
31:33:80:14:06:f7:2f:bb:da:02:84:93:89:e7:a1:
2e:30:e1:f0:05:86:2e:14:32:6a:6e:0d:b6:4e:c0:
8a:95:bd:37:41:d2:c2:bf:b8:0c:3c:a5:70:c3:a4:
9e:b7:55:e3:4b:74:00:7a:95:17:39:46:a4:dc:db:
b3:83:07:74:d4:2b:41:41:92:c1:d4:6d:68:06:01:
1c:f8:b9:71:1c:67:b4:0f:e3:c5:95:2a:ca:db:c1:
7f:09:c2:7f:cd:1b:c8:a7:1f:f7:e3:2b:92:51:90:
64:d5:d9:46:f1:53:63:90:3d:11:63:dd:1e:56:04:
93:75:14:09:80:1e:00:d0:bb:b4:20:db:ca:0e:4c:
25:34:3b:3b:4c:ab:3a:f1:ac:bd:8a:62:0b:2c:9b:
99:3a:fb:6a:04:28:70:53:8c:c0:12:5c:aa:41:c2:
88:a6:97:e5:bb:4c:b4:43:c7:17:9b:92:8f:aa:29:
05:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:AF:67:1D:35:CB:E4:D5:0A:98:4B:E5:5A:C6:B1:F7:B3:EF:82:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/11fa8e1a-35b7-354e-8b62-fd190bda6c98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
152.67.128.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:61:04:dc:f7:f1:79:5b:65:f9:e7:f3:1b:8b:ac:11:70:86:
5b:43:b0:84:00:ad:29:12:75:a7:9b:ae:e9:73:28:5e:d2:ac:
57:b5:92:b2:cf:b2:5c:8e:84:bf:70:69:07:2f:da:ff:ef:77:
6f:8d:de:d0:64:4e:6f:26:c6:86:51:b0:ed:b1:a3:54:f9:a2:
4d:72:f0:63:75:6f:b9:66:c8:e8:db:d6:7e:bf:b5:f0:c1:43:
15:6f:4a:b6:0d:68:ff:44:83:35:42:61:5d:43:88:14:df:08:
53:ef:6c:40:fd:29:c1:48:5a:b1:61:60:6a:62:b7:b7:82:46:
92:66:e3:4d:81:ad:b6:f8:eb:d0:48:b0:5c:dc:0d:4b:d6:a2:
c3:49:5e:59:4f:33:03:e0:36:77:2b:61:78:20:57:bd:fb:de:
68:8e:1c:fd:09:84:da:50:f7:fd:c3:e2:45:8d:85:ad:2b:1b:
4a:db:4b:11:0f:52:d6:14:e7:a5:09:e3:17:c2:3b:f0:6a:29:
f7:c5:ec:b4:cd:37:c6:c2:08:3a:90:9c:d2:a7:37:91:f3:58:
f3:64:26:3e:82:17:31:4b:79:9e:f3:59:6f:ef:8e:1b:e8:74:
a3:7a:87:92:3e:b4:42:90:06:61:b7:21:7e:74:da:e9:70:3f:
38:7b:80:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 07:10:02 2026 by rpki-client