
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4ea28e87-a5d3-3935-b45b-5f9c92f2d0bc.roa
File: 4ea28e87-a5d3-3935-b45b-5f9c92f2d0bc.roa (raw, json)
Hash identifier: eRkAHvk9mGMgZrodwInQcsZLHhg4h+WgZWkW2F3oorw=
Subject key identifier: 9F:3B:B2:79:D9:62:9B:75:82:36:63:58:8F:EE:8D:E0:EE:8A:FF:E8
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584E6B0A2A3FA74711D09F652080
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4ea28e87-a5d3-3935-b45b-5f9c92f2d0bc.roa
Signing time: Tue 07 Jul 2026 09:00:12 +0000
ROA not before: Tue 07 Jul 2026 09:00:12 +0000
ROA not after: Mon 05 Oct 2026 09:00:12 +0000
asID: 31898
IP address blocks: 159.54.128.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 14 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:6b:0a:2a:3f:a7:47:11:d0:9f:65:20:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Jul 7 09:00:12 2026 GMT
Not After : Oct 5 09:00:12 2026 GMT
Subject: CN=0e6644c3-6aef-48df-9b61-005423b9e659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:46:60:3c:bd:08:5c:78:70:43:0d:03:32:de:
88:0d:70:85:2c:70:8d:d9:7f:6c:ef:6d:a8:b1:73:
09:77:ed:9d:5e:84:99:a5:8e:22:5c:22:5e:b3:ab:
5d:ba:90:4f:76:7b:34:1e:c9:fe:4d:06:9c:d1:43:
2f:cf:87:c2:da:ec:96:f1:70:a5:33:53:ec:d1:17:
f9:32:e9:40:4f:21:23:c8:08:f2:59:9c:f8:48:ee:
45:44:ad:50:77:3c:c4:5f:8b:ef:7e:65:97:41:88:
25:5e:c9:af:47:1e:8b:4d:03:54:ff:28:7b:bc:7e:
6d:58:fa:f5:bb:44:c4:68:ee:3c:c1:c3:ec:f2:63:
58:e3:10:ca:8b:74:77:26:21:e2:9b:99:60:ac:f2:
74:81:55:fe:cf:d9:5d:3f:4a:b5:54:18:28:d0:fe:
83:90:82:9d:8f:7b:04:5b:89:d4:1f:2e:a2:0c:db:
81:9c:4a:5e:df:6b:bd:ce:d0:03:48:9f:1f:a3:06:
10:01:9a:b5:e3:2e:59:bc:26:d3:e1:8b:3c:af:94:
b9:f8:7e:83:1f:36:ad:d4:93:8c:c4:3f:bb:32:05:
fc:f3:b4:43:bf:60:c0:85:da:f9:74:d6:bb:7c:ac:
86:e9:a7:18:64:db:8f:5c:b4:02:02:34:51:3d:6d:
3a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:3B:B2:79:D9:62:9B:75:82:36:63:58:8F:EE:8D:E0:EE:8A:FF:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4ea28e87-a5d3-3935-b45b-5f9c92f2d0bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
159.54.128.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:42:5b:48:9e:51:bf:26:b8:be:f2:00:18:8f:bf:0a:40:4c:
7e:7c:a1:61:9e:93:1d:ef:c1:e8:b6:be:7b:6f:aa:d3:37:d9:
be:93:94:79:97:77:06:6c:a1:0d:d6:7c:4c:5e:47:c5:94:b0:
95:bd:2e:75:ae:65:5c:a0:a6:25:54:28:55:41:87:39:82:10:
61:eb:93:23:9d:4a:ec:62:1d:b2:4f:7a:d2:46:a4:7c:4d:cd:
6a:03:24:9e:3e:ce:60:41:76:b1:e0:10:46:1d:6c:e0:a5:e2:
87:c5:1a:2f:c5:d3:07:20:02:2f:a1:1a:d9:93:f2:9a:e7:e6:
ce:fc:20:a8:2e:a4:d3:4f:aa:55:9b:b2:1b:6c:a3:37:43:30:
01:40:2d:f7:7f:13:d1:9e:b9:8c:ca:58:b1:74:3a:a2:10:7d:
15:64:50:ab:fa:79:c5:d7:25:18:f2:7e:a9:31:0e:8c:88:9c:
19:68:b2:b4:f8:1a:be:0b:24:11:f2:61:15:21:bb:84:da:a6:
63:a3:d8:fd:b2:5d:2b:e5:9f:1d:0e:b9:1a:20:1c:a3:12:ae:
fb:b7:ec:da:dd:10:72:0a:eb:49:3c:09:6a:98:bb:1d:04:04:
f0:08:ea:a5:e6:ec:f5:76:d5:14:01:bd:5d:e3:85:f3:ef:e6:
d8:91:2a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 02:46:37 2026 by rpki-client