
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1b7766c9-4379-37b8-b743-c0485769d883.roa
File: 1b7766c9-4379-37b8-b743-c0485769d883.roa (raw, json)
Hash identifier: a0Li2CShifR+XW0Gse2QmJ9cDudGcfKL9Dn+kSg2aNQ=
Subject key identifier: 4E:F6:67:06:FE:B0:D7:44:AE:90:A9:04:74:5F:17:26:58:34:E5:60
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584E5FDF767CD5AAB4788642DB00
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1b7766c9-4379-37b8-b743-c0485769d883.roa
Signing time: Fri 03 Jul 2026 09:00:12 +0000
ROA not before: Fri 03 Jul 2026 09:00:12 +0000
ROA not after: Thu 01 Oct 2026 09:00:12 +0000
asID: 31898
IP address blocks: 161.33.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 14 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:5f:df:76:7c:d5:aa:b4:78:86:42:db:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Jul 3 09:00:12 2026 GMT
Not After : Oct 1 09:00:12 2026 GMT
Subject: CN=b8987379-8072-43d7-9b4a-95131359ef90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:75:e1:92:e1:f6:1a:35:0c:8f:f9:0b:aa:13:
db:96:1a:6b:6c:a4:5b:42:53:29:42:54:78:d7:fa:
bc:2f:8b:f5:69:eb:09:29:4d:7f:07:01:6b:1c:6c:
d5:91:cd:72:f6:da:82:51:93:03:d1:0f:73:91:a8:
d0:e0:a7:c2:9b:0a:c9:88:ba:3c:44:69:fa:75:57:
44:8c:54:d4:92:74:97:e1:94:65:df:d9:43:f3:dd:
c5:41:73:4d:f9:a7:b4:7b:5b:47:39:b5:1a:72:b0:
27:c8:66:f1:2b:6a:15:e9:5c:dd:5a:f1:b9:2b:15:
99:3a:8d:86:1e:00:de:39:b6:82:99:07:c3:30:3e:
0d:fa:37:0a:7c:f4:87:70:c8:72:07:4f:a1:42:d0:
92:4e:37:7d:d7:68:2b:13:b1:d8:82:20:90:02:e3:
4f:91:46:24:ed:da:51:c6:70:7b:c1:3c:f5:c1:9a:
67:bd:96:d5:da:67:cb:89:ad:8c:7a:d0:ba:3d:dd:
5c:ab:d2:cb:59:d5:2e:d1:ca:3d:cc:32:0d:d9:37:
68:0c:8a:f0:8d:9a:91:9a:81:42:6a:34:9e:12:35:
ed:48:cf:f8:af:d2:82:5e:b2:8f:d7:37:f9:45:51:
8b:40:da:87:8a:34:ba:74:2e:2c:ad:c6:0a:82:9a:
9b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:F6:67:06:FE:B0:D7:44:AE:90:A9:04:74:5F:17:26:58:34:E5:60
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1b7766c9-4379-37b8-b743-c0485769d883.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
161.33.254.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:90:b4:ed:d9:13:1b:67:55:28:2c:91:77:dc:2d:60:4c:61:
94:7c:59:87:79:e6:4c:48:f0:50:de:a6:95:09:70:fe:72:39:
1a:3b:9c:e5:79:24:25:c6:13:fd:3a:de:b8:57:cb:5a:20:e3:
ac:29:e6:70:72:3a:e2:82:d4:89:1e:71:24:03:a5:31:ca:5f:
fa:9f:48:3c:c2:8a:b4:90:7b:6b:b4:10:5f:f2:95:37:60:2f:
0a:f8:21:79:15:4c:36:b5:06:45:51:8d:82:17:86:a2:d2:ce:
77:5f:ab:92:9a:ab:e8:69:f8:f7:dd:84:93:7a:b0:e4:0f:4f:
fe:9b:3c:ec:73:3f:3c:90:e7:c9:d2:78:ec:27:ab:8a:2b:07:
c1:52:8e:7d:09:cd:05:d8:72:bc:6a:30:f2:b8:cf:e0:6f:5c:
a3:eb:9f:9b:4a:db:33:a1:aa:2c:c2:ec:81:4b:cf:c1:17:f7:
d0:ff:9e:e9:d5:07:52:58:a0:d9:c3:d4:60:23:e9:ff:9c:1a:
b0:03:8d:fe:15:17:79:a5:1c:aa:b9:de:0d:e4:c3:e3:7a:92:
2f:e4:ba:09:37:dc:90:d9:dd:b3:88:64:3f:b3:5d:eb:11:b4:
a7:2e:6b:1b:e8:67:d7:83:49:f5:6f:c1:15:a1:0a:85:53:12:
55:ee:fe:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 02:51:31 2026 by rpki-client