
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/639b3d5b-1477-3efd-86ea-1a0bd36acaab.roa
File: 639b3d5b-1477-3efd-86ea-1a0bd36acaab.roa (raw, json)
Hash identifier: 1TROIpqOg+raGNZQ+PJ55dR+ZWQ12Lkulnx/Y8af6Q8=
Subject key identifier: 8A:38:2D:0B:91:3B:99:D1:D1:D8:4E:A2:70:79:B2:0A:99:AA:51:65
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584CBDB211D474575042F33C1500
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/639b3d5b-1477-3efd-86ea-1a0bd36acaab.roa
Signing time: Tue 03 Feb 2026 14:00:39 +0000
ROA not before: Tue 03 Feb 2026 14:00:39 +0000
ROA not after: Mon 04 May 2026 13:00:39 +0000
asID: 31898
IP address blocks: 204.152.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Feb 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:bd:b2:11:d4:74:57:50:42:f3:3c:15:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Feb 3 14:00:39 2026 GMT
Not After : May 4 13:00:39 2026 GMT
Subject: CN=3a9bdb70-c1ab-4688-b10b-e3258b4a9767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:90:a7:4b:87:8a:8b:d6:01:d4:cc:70:76:75:
c4:ae:77:cf:0f:f3:d8:a6:28:ee:1c:24:ad:0d:80:
bd:ef:b9:cc:bc:e2:52:85:0c:3b:67:4b:b3:20:e3:
49:1d:00:a6:85:90:0f:27:bf:e2:13:ae:72:f4:9f:
55:42:fe:e2:b7:23:be:a6:ce:24:30:ba:65:48:bc:
ac:35:ae:75:df:5b:3c:d1:42:af:77:4d:38:86:bc:
28:18:d1:7a:12:cc:56:71:17:9a:f3:84:c8:b7:7b:
05:34:04:00:a5:a7:eb:3a:92:6c:db:97:bb:f2:e1:
c9:4f:90:39:af:78:76:1f:b5:a8:4e:d9:59:e8:1c:
86:f9:21:0d:b7:c8:18:92:6c:af:ac:58:e5:f8:cd:
f2:89:ec:dc:50:10:e0:52:4d:e5:bc:b9:b1:eb:67:
8e:a4:83:61:d4:2e:86:ea:18:df:a7:58:1c:12:49:
bc:4f:e7:63:35:10:1a:77:b5:c5:2b:19:c1:d6:84:
16:6c:71:6e:57:c9:25:2f:bf:fc:52:0c:fb:4f:63:
1f:fc:a5:27:4b:bb:32:b3:8a:2f:dd:15:29:33:00:
d2:5e:1a:34:81:1b:b0:c7:64:d9:a9:45:97:e2:34:
d3:dd:c2:b3:b1:9b:f0:48:87:d4:58:39:30:c9:c0:
ff:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:38:2D:0B:91:3B:99:D1:D1:D8:4E:A2:70:79:B2:0A:99:AA:51:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/639b3d5b-1477-3efd-86ea-1a0bd36acaab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
204.152.64.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:2c:1c:ce:78:be:06:49:1f:0d:10:9c:4a:de:f1:a7:6d:c5:
16:4e:ad:1d:e0:a3:45:20:e0:ee:54:1c:68:bb:85:ac:11:59:
01:40:ea:c8:80:70:90:54:5a:c5:25:3a:f1:96:30:31:79:9c:
ba:dd:89:e9:5b:31:50:ab:b4:60:2d:dd:82:cc:33:54:97:c7:
42:be:cb:cb:32:ea:a3:81:1b:bf:2e:cc:08:97:7f:d4:0f:63:
5d:e5:ae:ce:b2:4e:57:d9:d1:0e:06:48:44:73:15:6c:55:5b:
cb:3e:26:bc:4a:83:17:fe:01:0f:53:24:d1:d7:9c:84:1d:88:
c9:9e:3f:0e:60:bf:b9:86:63:de:a2:a6:c8:7f:58:11:7c:60:
6c:a1:52:bd:14:50:fa:2f:bf:ac:ad:35:0c:4a:dc:35:5e:8e:
f7:b6:47:da:07:c0:e1:57:c1:f1:57:fd:0d:6d:87:5b:2f:3a:
c5:bd:c6:3a:46:80:50:07:55:c3:d4:e9:7b:c7:53:cf:d2:3c:
74:64:94:be:76:f4:2f:fd:65:2a:49:ff:6c:da:f0:b1:f3:83:
9a:87:e6:be:67:56:21:4d:d7:a5:df:37:c2:fb:12:5c:2e:10:
c8:3b:4c:d6:31:b4:b3:f9:06:b4:12:63:db:5b:d8:cc:ab:a7:
db:3b:65:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 03:29:07 2026 by rpki-client