
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/924921be-6fc7-378c-bf9a-f678b9a5dd44.roa
File: 924921be-6fc7-378c-bf9a-f678b9a5dd44.roa (raw, json)
Hash identifier: fXz8zpZEwRqHDWY06LsX6pbMOayvrY1fAQ9dZZCz66s=
Subject key identifier: F3:B3:4A:11:CC:75:C7:71:E5:B6:76:ED:96:99:48:B4:E8:B0:A2:DF
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584EA7870E5A328ECB79CD8EBC00
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/924921be-6fc7-378c-bf9a-f678b9a5dd44.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 31898
IP address blocks: 147.224.64.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 29 Aug 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:87:0e:5a:32:8e:cb:79:cd:8e:bc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=54120cee-8eec-4278-a179-bc6f9e68277d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:79:ca:d3:6b:d6:a7:32:9d:e6:99:bd:38:81:
8c:4b:9f:0f:69:30:3b:2b:6e:a5:ac:2f:73:76:95:
9a:08:12:08:7a:a7:9d:c5:7f:a9:8b:25:b6:3c:f3:
f8:c7:35:93:9e:aa:90:4a:11:c8:5a:da:63:d0:24:
e2:d6:f7:0b:b5:db:b9:5d:c5:68:11:f6:0e:5a:37:
f7:37:18:18:96:d0:f4:33:d7:60:1a:3d:e5:c5:91:
44:29:35:a9:7f:d4:3e:36:84:70:76:e0:cd:5b:4b:
92:1b:d8:9a:e7:5e:03:79:eb:a4:9f:eb:24:70:02:
6b:97:d7:3b:93:00:c4:4c:1a:b6:2e:ee:9b:93:b4:
5b:eb:a4:85:3b:8d:a7:8f:9c:5d:61:ce:08:c4:66:
fa:8d:22:c1:14:3c:29:fe:36:c1:9d:e9:65:28:6e:
7e:39:82:ba:a5:a0:79:57:32:17:41:e3:2b:e4:f5:
34:36:95:b1:70:81:b1:86:bc:e5:3a:f8:25:34:b3:
fa:43:77:cc:4e:97:7d:00:14:ec:61:b7:c3:68:77:
51:1e:60:07:31:95:29:d6:a1:ad:60:13:d2:88:cb:
99:8a:e0:92:d0:f2:38:f0:73:36:f7:96:0e:15:44:
e2:47:b7:43:37:02:d7:7d:01:be:7e:e3:45:11:dc:
de:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:B3:4A:11:CC:75:C7:71:E5:B6:76:ED:96:99:48:B4:E8:B0:A2:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/924921be-6fc7-378c-bf9a-f678b9a5dd44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
147.224.64.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:ad:95:09:3e:e2:d0:3d:cf:2c:82:dc:2d:86:18:21:89:51:
71:53:3a:88:0c:af:80:fc:26:19:d1:df:db:bf:db:f5:87:f4:
f2:1d:49:57:73:1e:cf:2c:7b:6b:93:22:9c:17:db:b0:72:cd:
77:4d:45:c2:0c:0c:4a:59:90:16:b0:24:55:87:4e:16:ed:e8:
ad:6c:1a:f8:18:99:77:d3:0b:7c:ce:da:87:c5:bb:a7:ae:ff:
ec:e0:48:f5:ce:e3:72:de:08:96:a7:2c:c3:6e:94:4f:c2:67:
04:36:58:96:e5:75:74:7c:b3:0d:80:e4:e6:cb:6b:b0:97:f8:
38:35:e3:a7:21:ff:fb:0e:8f:f2:47:9b:f2:16:f5:8b:92:22:
a4:b8:32:82:b7:79:cb:cb:64:11:9c:49:5c:65:92:6e:14:c9:
d7:87:ea:ee:46:18:26:40:4a:16:4d:5e:47:6c:f6:e8:14:a4:
6a:68:bd:79:d4:6c:a3:2d:e5:93:cb:9c:89:a3:27:20:86:9d:
ca:0f:5e:56:96:f1:30:50:b8:ff:eb:c1:8e:e0:9d:57:5e:d4:
07:69:86:49:49:02:7e:16:81:dd:ab:ac:89:e3:3c:66:56:21:
3c:81:bd:82:fa:a3:52:83:b9:ee:44:b7:e0:b1:32:02:34:4f:
8e:29:02:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 07:13:07 2026 by rpki-client