
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/39d654c8-0020-3957-b80a-8ed859b7e746.roa
File: 39d654c8-0020-3957-b80a-8ed859b7e746.roa (raw, json)
Hash identifier: B1h4OjLLO7chJy6YD9rFMkADFb7jJsHa35AKoAoQkRU=
Subject key identifier: 2D:28:9A:C9:14:D4:69:F8:E2:C2:9E:79:5E:53:34:B2:20:5C:01:A9
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584CAE5E6DFF2E58954FC56F5F80
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/39d654c8-0020-3957-b80a-8ed859b7e746.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 31898
IP address blocks: 158.101.160.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Feb 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:5e:6d:ff:2e:58:95:4f:c5:6f:5f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=9c5697b4-40f0-474f-815f-02ff3680a44e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:e1:e8:73:42:0e:be:b9:04:8b:b0:8f:b4:be:
f5:69:c6:3b:15:ac:9e:78:a2:a8:dc:c9:ea:74:5b:
84:48:14:24:7c:6a:92:06:95:87:6d:43:0e:5c:85:
6b:a5:05:4e:61:db:a9:50:b5:07:14:17:03:09:39:
38:19:f0:43:f4:ba:1a:85:54:f8:2c:5a:20:5b:18:
82:45:e6:2b:f6:e4:12:ba:16:f2:66:03:0c:df:3a:
96:7c:50:21:a8:e8:b6:71:9b:4e:50:27:06:1e:35:
cd:a1:94:f3:d2:00:60:37:58:f7:ff:13:a7:dc:6a:
0a:12:53:66:2b:70:f0:e9:09:28:b1:da:9a:72:c9:
cf:7a:76:83:5c:0a:2c:72:71:b2:b2:04:c7:fc:41:
96:1b:1e:7f:c4:be:10:56:e9:22:b5:84:8f:e9:5f:
02:50:b5:5e:2d:17:71:d6:ef:0d:78:1a:5e:44:ee:
62:d6:3f:58:22:61:26:d0:aa:00:ce:6f:64:4d:79:
e2:37:11:bc:c3:73:37:6d:e3:2c:70:a9:25:a3:dd:
9e:64:68:19:8f:07:bf:f3:1e:bc:ec:01:d9:82:bd:
7e:28:e7:e5:1b:bc:7b:2f:e4:86:78:44:8f:58:ce:
0e:97:cf:7d:6c:b5:f9:39:82:da:d8:cc:1a:80:ba:
f7:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:28:9A:C9:14:D4:69:F8:E2:C2:9E:79:5E:53:34:B2:20:5C:01:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/39d654c8-0020-3957-b80a-8ed859b7e746.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
158.101.160.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:69:70:25:15:4f:17:17:ca:43:fa:7e:90:16:f4:39:aa:c4:
50:0e:71:eb:f8:2f:87:b5:f5:7e:5f:e0:5f:8d:72:ab:05:e2:
df:46:dd:9b:b7:8e:d2:6f:09:4f:80:aa:4b:f9:e3:77:8f:29:
4f:48:34:cc:f8:06:be:d8:cf:7b:e3:53:bf:3d:75:6a:57:7b:
fb:90:a6:c3:7e:bb:e4:96:5a:52:b3:bf:59:1b:2e:28:87:0a:
21:af:a9:8d:fd:cb:a9:89:da:d0:ce:5d:fb:11:cc:0a:ae:dc:
26:9a:d7:6b:21:3f:d2:5f:87:40:08:c8:6c:6e:70:a4:64:a6:
ad:b8:9e:54:e7:a3:38:9a:4c:9a:fb:12:76:81:b1:b3:87:1a:
10:26:60:8b:38:39:b4:a8:8e:29:c1:f3:e7:ee:98:08:44:e3:
d1:93:93:8b:10:5b:05:c8:08:cd:a0:20:ef:ce:0f:07:0c:dd:
83:70:ea:6f:96:37:63:96:39:e4:58:fb:66:0c:ad:7d:21:b9:
50:32:00:f2:00:b0:08:7d:2b:5f:00:c4:d6:85:ee:65:d3:f6:
ae:a6:77:73:a0:1b:7b:4d:45:f4:49:72:36:5e:2f:9e:81:f1:
ed:8e:a5:32:8a:f8:a0:8f:5c:de:54:af:14:3a:1d:fd:25:1c:
bc:95:b5:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 03:29:14 2026 by rpki-client