
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/964ce429-2223-3996-9448-94ce1a137bf0.roa
File: 964ce429-2223-3996-9448-94ce1a137bf0.roa (raw, json)
Hash identifier: ukp5j5gzlG7eZ/dVwRKRASXchQJ6/PAkXbh/r194faw=
Subject key identifier: 7E:03:55:6D:9B:17:86:39:45:4E:B8:CC:97:E5:1A:38:CD:EC:87:25
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584CB81C81E967E14064E9ED85C0
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/964ce429-2223-3996-9448-94ce1a137bf0.roa
Signing time: Sun 01 Feb 2026 14:00:40 +0000
ROA not before: Sun 01 Feb 2026 14:00:40 +0000
ROA not after: Sat 02 May 2026 13:00:40 +0000
asID: 31898
IP address blocks: 157.151.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Feb 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:b8:1c:81:e9:67:e1:40:64:e9:ed:85:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Feb 1 14:00:40 2026 GMT
Not After : May 2 13:00:40 2026 GMT
Subject: CN=738f853d-c0f8-4dff-90b8-9dc566a20764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:60:3a:80:30:0d:41:10:1d:8e:5b:5b:b7:25:
a9:bc:0b:8d:bc:0d:ff:d4:d0:06:0a:da:3f:e1:52:
91:b3:78:f2:b3:23:11:ff:36:62:8f:3c:16:56:eb:
3b:48:dd:4f:2d:7f:2a:4e:78:92:40:58:72:27:7d:
76:cf:51:7d:da:86:59:43:97:3f:88:74:0a:5a:c8:
75:44:93:ba:6b:67:35:33:bd:c9:15:c2:be:68:4c:
9e:66:bd:9d:13:1a:3a:4a:2c:50:09:88:06:ee:b2:
6e:42:5d:5c:cd:80:da:72:c4:4d:cb:7d:15:de:09:
84:a8:b1:cf:89:05:4c:0e:93:02:e3:ff:a5:b0:99:
72:cb:84:82:46:a6:58:9f:ee:e7:9d:95:04:81:61:
08:49:ce:6a:85:3b:5f:57:3b:a8:7d:d2:8f:df:25:
d3:e7:dd:68:45:a8:90:73:97:ca:22:c7:3b:c4:a6:
0a:33:5f:a6:0d:8b:8e:d4:3b:f5:bc:a7:e8:42:00:
07:54:98:6e:38:8b:92:f5:d2:c0:b0:f6:78:5b:ca:
7a:1d:b4:90:30:76:56:67:a8:b2:57:94:c0:3a:16:
fc:1c:91:79:bb:7c:6c:ae:b9:a0:37:cc:79:a7:7c:
08:cc:d5:46:db:c5:ce:b5:62:2f:f6:b8:44:ac:6d:
bf:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:03:55:6D:9B:17:86:39:45:4E:B8:CC:97:E5:1A:38:CD:EC:87:25
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/964ce429-2223-3996-9448-94ce1a137bf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
157.151.64.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:f2:ad:89:84:8d:02:cf:45:82:d0:76:90:46:b5:dc:ba:fa:
8d:5d:88:c5:80:5d:d8:91:7a:c2:3e:5a:45:ed:74:b9:7c:70:
05:6f:da:24:41:91:bd:81:5c:9a:38:33:0f:5c:57:97:5b:99:
c6:c1:8b:e7:e0:7e:d0:45:c5:77:12:94:57:1e:02:29:66:17:
cc:e7:65:5d:42:a8:c0:a0:2f:07:8c:b7:90:e3:1d:b8:5f:da:
27:34:44:18:e8:4c:2d:50:ec:79:ee:02:0d:ab:b8:9c:08:23:
a9:19:0b:bc:1a:fc:d7:95:15:ee:5b:3d:60:1e:2f:d7:05:36:
1b:ef:8e:01:a4:dc:cf:b7:49:e2:c8:a3:4d:ad:d9:2c:8a:5c:
d0:44:85:7a:de:b1:c8:a2:46:c8:a0:74:c5:7c:99:8d:9f:d0:
f0:da:9a:91:ab:4f:d5:73:08:bb:ae:5f:f2:5d:f2:aa:14:de:
ca:67:46:98:db:45:a7:f8:23:d2:fa:de:ed:d5:5c:9a:fe:ee:
0d:51:78:a9:06:2e:d1:7c:32:8d:01:c4:35:a5:8a:46:14:f2:
bd:48:dc:73:28:4f:80:8e:ea:6f:52:8a:66:71:0c:31:7d:00:
2b:91:8e:ff:d0:9e:c6:1d:20:83:4f:8d:6c:f9:36:7e:06:70:
f2:5c:9f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 03:31:59 2026 by rpki-client