
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/25b948e6-d394-3ff3-9bd4-7a07a8272572.roa
File: 25b948e6-d394-3ff3-9bd4-7a07a8272572.roa (raw, json)
Hash identifier: Ycf+f4SYZKlMRb00p2ONrc8a0GJwOwaKcSwmJkVseAc=
Subject key identifier: 9A:98:E4:6C:DA:0F:9D:C6:03:F8:77:18:DC:EF:9A:B7:FC:C9:37:E0
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584E6DD4C8A84D1F6910EAE128E0
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/25b948e6-d394-3ff3-9bd4-7a07a8272572.roa
Signing time: Wed 08 Jul 2026 09:00:12 +0000
ROA not before: Wed 08 Jul 2026 09:00:12 +0000
ROA not after: Tue 06 Oct 2026 09:00:12 +0000
asID: 31898
IP address blocks: 159.13.0.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 14 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:6d:d4:c8:a8:4d:1f:69:10:ea:e1:28:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Jul 8 09:00:12 2026 GMT
Not After : Oct 6 09:00:12 2026 GMT
Subject: CN=736e3e26-d004-4bc6-a84d-54a205650b25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8a:00:4c:d2:6a:fc:d9:71:fe:51:44:65:8b:
36:38:59:d2:5f:36:f1:e4:a0:17:86:dc:15:31:43:
9e:c6:fe:65:0d:c3:24:c5:42:7f:76:29:e4:59:fa:
57:0b:84:13:57:98:53:f2:4f:b5:4d:02:e5:87:cc:
c1:da:69:4c:30:40:ea:44:f7:01:4c:a1:90:8c:e6:
4b:3f:11:d9:d0:ed:3b:85:f0:50:18:d0:0f:80:40:
e3:86:1b:ed:23:2b:cb:9f:d8:5f:12:0b:47:ea:42:
cc:2b:f6:7f:53:d0:5d:1d:d7:8e:81:8a:71:1d:33:
a8:40:0c:29:88:05:d4:d8:eb:cb:38:a5:f2:6d:3e:
c3:d7:9e:63:fe:3c:9e:96:1c:03:2e:18:7b:ea:ad:
97:4a:3c:94:60:9a:81:1d:aa:da:c8:35:51:b3:c4:
69:86:de:d5:83:c6:10:0c:14:78:15:84:b1:d9:47:
32:33:88:42:0d:ab:3b:54:88:7b:a8:47:84:7c:8e:
e2:87:6b:fc:d9:01:0c:6f:25:69:20:4d:3c:4e:69:
05:a5:45:3b:03:58:df:81:b8:83:2d:75:db:c9:38:
99:52:5b:75:e2:ea:3b:0d:7f:ff:db:98:31:6e:88:
72:ae:28:6e:71:df:e3:4c:b5:53:41:01:99:59:10:
3b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:98:E4:6C:DA:0F:9D:C6:03:F8:77:18:DC:EF:9A:B7:FC:C9:37:E0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/25b948e6-d394-3ff3-9bd4-7a07a8272572.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
159.13.0.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:33:c8:bb:b9:13:66:27:d5:dc:fb:87:de:6e:93:97:5b:15:
3f:7d:46:2c:62:ec:6e:49:0f:95:40:76:d0:15:c7:2d:4e:1b:
7d:fc:ff:f5:85:68:8b:77:1e:14:c6:2e:bf:a0:5e:df:56:7d:
4c:09:64:8b:53:81:1b:e1:70:9d:f1:aa:4f:a2:31:d3:3d:8c:
b9:11:7e:ec:e1:b0:4f:3b:7f:02:cd:46:72:d6:8a:6d:1a:1e:
50:bd:00:56:e8:f9:dc:fd:3b:86:a8:6b:dd:b6:f0:af:c8:16:
e4:fb:4f:5b:ee:1a:98:d8:18:54:c1:10:27:fd:be:fd:21:4b:
ac:ad:13:55:af:78:f1:db:16:cb:1d:45:1d:c0:dd:35:15:55:
c9:19:e1:6c:44:64:b3:23:78:33:bb:43:c7:9b:c1:6d:35:05:
b5:43:a7:2b:a7:72:1e:20:ac:fb:cf:c9:b7:e8:f6:c6:fd:76:
2d:01:6c:a2:fa:fd:b4:9d:e8:18:c4:c3:e4:c0:28:e1:c1:ec:
55:a9:9b:2c:45:c5:80:14:7a:87:fc:cd:51:00:35:5f:d1:08:
b8:ca:13:21:33:55:53:c2:09:59:04:58:7b:df:5d:42:fc:bd:
19:74:5c:35:49:ba:03:c9:42:51:d8:07:69:22:09:b1:5c:93:
94:35:10:f4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5t1MioTR9pEOrhKOAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI2MDcwODA5MDAxMloXDTI2MTAwNjA5MDAxMlowLzEtMCsGA1UEAxMk
NzM2ZTNlMjYtZDAwNC00YmM2LWE4NGQtNTRhMjA1NjUwYjI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYoATNJq/Nlx/lFEZYs2OFnSXzbx5KAXhtwV
MUOexv5lDcMkxUJ/dinkWfpXC4QTV5hT8k+1TQLlh8zB2mlMMEDqRPcBTKGQjOZL
PxHZ0O07hfBQGNAPgEDjhhvtIyvLn9hfEgtH6kLMK/Z/U9BdHdeOgYpxHTOoQAwp
iAXU2OvLOKXybT7D155j/jyelhwDLhh76q2XSjyUYJqBHarayDVRs8Rpht7Vg8YQ
DBR4FYSx2UcyM4hCDas7VIh7qEeEfI7ih2v82QEMbyVpIE08TmkFpUU7A1jfgbiD
LXXbyTiZUlt14uo7DX//25gxbohyrihucd/jTLVTQQGZWRA7uQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJqY5GzaD53GA/h3GNzvmrf8yTfgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMjViOTQ4ZTYtZDM5NC0z
ZmYzLTliZDQtN2EwN2E4MjcyNTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnw0AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG0zyLu5E2Yn1dz7h95uk5dbFT99Rixi7G5JD5VAdtAVxy1OG338//WF
aIt3HhTGLr+gXt9WfUwJZItTgRvhcJ3xqk+iMdM9jLkRfuzhsE87fwLNRnLWim0a
HlC9AFbo+dz9O4aoa9228K/IFuT7T1vuGpjYGFTBECf9vv0hS6ytE1WvePHbFssd
RR3A3TUVVckZ4WxEZLMjeDO7Q8ebwW01BbVDpyunch4grPvPybfo9sb9di0BbKL6
/bSd6BjEw+TAKOHB7FWpmyxFxYAUeof8zVEANV/RCLjKEyEzVVPCCVkEWHvfXUL8
vRl0XDVJugPJQlHYB2kiCbFck5Q1EPQ=
-----END CERTIFICATE-----
Generated at Mon Jul 13 02:49:26 2026 by rpki-client