
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4ef7f997-54f7-343d-8405-0a1c2d65bada.roa
File: 4ef7f997-54f7-343d-8405-0a1c2d65bada.roa (raw, json)
Hash identifier: VqiGU0gGrkjnR/a/qjuoNp8I0cUMKKNp4dY/flD3YCc=
Subject key identifier: C5:07:4B:1E:48:9F:B3:39:28:2B:F4:9E:65:DB:6E:9F:E7:89:27:0C
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584E66D9FF7D700C64E87D3C1256
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4ef7f997-54f7-343d-8405-0a1c2d65bada.roa
Signing time: Sun 05 Jul 2026 21:00:11 +0000
ROA not before: Sun 05 Jul 2026 21:00:11 +0000
ROA not after: Sat 03 Oct 2026 21:00:11 +0000
asID: 2763
IP address blocks: 156.151.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 24 Jul 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:66:d9:ff:7d:70:0c:64:e8:7d:3c:12:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Jul 5 21:00:11 2026 GMT
Not After : Oct 3 21:00:11 2026 GMT
Subject: CN=7d2a8142-c7ab-47a2-9048-4adbfc24e282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:22:20:a5:fa:f5:3a:bb:56:d2:46:c1:54:b5:
d0:5f:d3:78:78:62:dd:42:62:aa:1b:2f:e4:49:f7:
6a:38:db:20:e4:39:11:37:35:06:43:63:45:f5:29:
ca:59:3f:d1:bb:8d:a9:9d:8c:47:92:46:38:0f:73:
c6:21:72:f1:eb:5a:09:79:83:65:27:c3:42:f9:55:
17:7f:24:ef:53:a0:f8:da:0c:36:63:95:b9:fe:1b:
d9:b2:ff:7d:1e:04:bd:88:f1:20:f0:10:28:e8:87:
16:48:6e:6a:e3:2c:cb:cf:f2:ae:ae:2f:ad:df:0d:
52:99:63:35:ea:37:9c:24:d7:eb:a1:48:3e:f8:cf:
88:5f:ad:28:a4:e8:51:b7:f8:10:b0:3d:7e:cb:58:
0f:7f:53:d1:06:68:f3:30:32:02:38:4f:0f:88:3b:
7f:b4:9d:8c:df:19:0d:8a:18:ce:db:92:15:62:38:
70:a6:ac:41:1d:df:07:24:df:18:ac:b9:29:c2:98:
93:41:d0:63:eb:8f:23:29:90:a6:d9:83:fe:d6:68:
7c:11:d3:8b:75:bf:55:d0:7a:32:7f:5e:df:3c:80:
d6:1a:f3:dd:c8:c5:64:62:f6:82:55:70:03:f7:60:
fa:81:6e:6e:03:1d:d0:d7:6a:e5:16:9e:1b:71:6b:
e8:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:07:4B:1E:48:9F:B3:39:28:2B:F4:9E:65:DB:6E:9F:E7:89:27:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4ef7f997-54f7-343d-8405-0a1c2d65bada.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
156.151.197.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:0b:5a:70:f5:a8:bc:4e:3f:ac:f9:11:65:61:a1:8f:1e:98:
1c:35:9e:9d:5c:a2:c1:c1:a5:2e:8c:dd:20:70:18:e4:eb:67:
f4:e9:05:92:6b:35:bd:81:6c:43:68:c7:a8:fa:fc:ed:f7:fe:
9e:3c:58:77:f7:b7:0d:44:4a:0f:27:a4:bc:ee:8c:19:f7:97:
59:fe:0d:9f:14:17:9a:bf:53:28:f2:16:be:0d:84:cb:8d:fa:
ae:6e:09:e3:b0:5a:5f:b1:1d:d8:a5:1a:7a:35:8c:18:2b:d4:
62:58:28:85:d6:a2:8c:d9:e2:9c:44:57:77:1f:c1:c2:39:e5:
24:e4:ab:2d:30:4f:22:4b:e2:a1:09:2b:77:a6:0b:37:96:65:
fa:37:dd:09:0b:0c:49:c8:f3:e9:31:31:27:ff:fe:bd:02:8f:
a9:a8:82:27:c1:18:7f:ee:da:35:37:31:d7:9e:1f:f4:30:ea:
c4:9d:c9:e2:3b:cd:ba:95:73:c9:10:2c:4c:f9:f7:50:0d:30:
27:32:2f:a0:21:19:e3:79:04:43:8f:80:3f:82:f5:d1:dd:33:
6f:22:40:db:54:77:48:0f:4f:aa:70:cd:d1:e3:2b:5b:ec:fc:
ad:dc:f6:79:5a:e6:5f:14:88:0f:a0:0b:ca:17:e6:b8:96:8f:
4d:9c:f6:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 02:37:25 2026 by rpki-client