
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/35e78829-4e9b-3be5-81ec-99333ad38297.roa
File: 35e78829-4e9b-3be5-81ec-99333ad38297.roa (raw, json)
Hash identifier: bea1P7zIuDid0sDvKgsUQYuDqEG6o/pv1qFldL+94CU=
Subject key identifier: D9:72:2A:7D:86:35:BA:D6:53:86:42:90:D8:D3:35:BC:69:06:98:15
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584EEA9F6998E6AA8B6DD1020A00
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/35e78829-4e9b-3be5-81ec-99333ad38297.roa
Signing time: Sat 22 Aug 2026 01:48:52 +0000
ROA not before: Sat 22 Aug 2026 01:48:52 +0000
ROA not after: Fri 20 Nov 2026 02:48:52 +0000
asID: 31898
IP address blocks: 147.5.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 29 Aug 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:ea:9f:69:98:e6:aa:8b:6d:d1:02:0a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Aug 22 01:48:52 2026 GMT
Not After : Nov 20 02:48:52 2026 GMT
Subject: CN=11dd25c2-bba0-4d26-bfe6-329d3181d81a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:67:33:01:a2:8e:ee:b4:86:6a:fa:97:6c:49:
47:ad:4f:6d:52:dd:39:21:c6:d2:7e:01:b0:0e:30:
16:11:83:b2:b9:ea:7d:b9:26:0f:ea:be:81:bc:83:
c3:bc:b1:4f:8b:22:02:74:8f:54:99:6b:d2:6e:eb:
45:35:b1:c0:45:4a:d4:a2:c3:97:af:9f:a1:78:bc:
67:7f:bc:c1:da:cc:bd:45:a6:fd:47:9d:ee:60:71:
68:ef:01:3f:b8:b7:1f:cd:c1:38:41:a9:63:b2:7b:
7c:6f:ce:02:ed:94:06:80:fa:01:b2:d2:02:99:7f:
07:bf:c7:7e:d1:12:42:16:ab:96:ed:22:94:af:94:
5b:b5:f0:14:16:b2:65:a2:26:ca:2c:df:83:84:dd:
44:de:28:82:79:10:91:95:28:90:6b:76:ab:70:fe:
89:ec:89:05:9d:ea:bb:1a:a1:25:7b:27:6c:68:f8:
56:7d:5f:e9:27:89:df:17:e0:17:5c:b3:b1:c8:e1:
1b:54:fa:35:51:4c:85:3f:6d:ec:96:73:88:d4:d1:
d6:79:47:96:4a:05:41:08:3d:c7:a4:77:d7:2f:29:
6b:12:4f:ce:8d:22:3a:c7:9e:91:f2:a3:5e:58:41:
10:4d:ef:6d:3b:19:8f:46:c9:8a:a1:e1:17:b5:8b:
80:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:72:2A:7D:86:35:BA:D6:53:86:42:90:D8:D3:35:BC:69:06:98:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/35e78829-4e9b-3be5-81ec-99333ad38297.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
147.5.58.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:99:50:9f:9e:3f:3d:ea:f2:64:2b:10:17:9c:7b:5b:b1:b4:
8d:bc:06:7e:6f:e4:d0:fa:e3:d8:a9:75:b5:b9:cf:94:b2:a6:
8d:f4:14:7b:cb:f7:e8:42:c0:23:2c:6c:f5:2c:fa:7a:47:f5:
22:c5:fd:1d:ac:17:26:41:a4:dc:4d:90:19:ab:2c:87:bb:d5:
5a:89:8e:08:bb:0e:73:51:08:13:8b:ca:55:67:1b:48:f0:f9:
94:ce:7d:4a:37:bd:50:e9:88:b4:c7:f5:37:d8:46:ff:72:22:
d7:e0:84:97:6d:f3:ac:b1:33:f2:6d:d7:fd:7d:c5:e9:aa:a8:
1a:96:77:bf:a9:22:58:5e:90:aa:4c:07:c5:dd:0d:cd:6a:82:
91:32:f9:a2:e7:10:37:d2:c1:ea:a0:6a:df:ee:5b:d8:b9:ff:
4a:06:90:8e:65:5a:3b:7b:56:86:c5:c8:54:54:a3:0c:7f:00:
2d:0b:77:da:1b:59:6a:6e:86:dc:b1:52:ac:82:e5:10:6d:97:
e9:4d:cc:07:84:91:6d:e9:ce:c3:6b:67:fd:ba:07:9f:6a:88:
2a:30:e8:1b:fd:82:81:2e:66:67:d0:5b:32:c4:05:6d:b1:4c:
39:5b:fd:c0:ac:5a:2d:07:a1:88:ec:10:fb:35:5e:53:23:b2:
92:07:49:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:16:37 2026 by rpki-client