
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ad67ab36-a827-3fe4-b540-333ff1735a82.roa
File: ad67ab36-a827-3fe4-b540-333ff1735a82.roa (raw, json)
Hash identifier: hMvywritELHeTfSEc+dzVt9O+QdgEdZD5o3wq2YCw3A=
Subject key identifier: 91:8A:33:02:56:07:CD:E3:96:44:B5:D1:10:C5:7D:DB:87:2D:A8:56
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584CAE5E70C88FDC7B73931A4240
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ad67ab36-a827-3fe4-b540-333ff1735a82.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 31898
IP address blocks: 165.1.96.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Feb 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:5e:70:c8:8f:dc:7b:73:93:1a:42:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=e0c59b5b-d061-42c8-9dc8-3ba23f8e5ca3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:47:22:50:3c:a8:49:e5:6d:51:8d:fa:ff:50:
39:4e:e8:30:6a:74:f8:7a:16:3a:0f:99:45:5e:ec:
c9:7f:4e:4c:45:a4:a1:78:8e:97:d0:1c:77:42:b6:
39:23:f3:33:d2:8d:44:73:21:9f:c2:aa:a9:a9:3d:
f8:09:c9:44:32:80:c0:04:15:47:c1:9c:e0:b3:0a:
2d:e3:91:cc:9c:19:d3:6f:1a:32:79:88:91:3d:8b:
d3:dc:1d:85:c6:09:40:10:d7:0b:52:1d:7b:3d:a5:
ae:08:5d:c7:70:9b:73:ba:fb:25:2a:0f:a8:ad:60:
89:c6:f4:f7:00:e5:e1:97:b0:1d:c7:38:23:09:1d:
e2:1e:8d:07:b5:66:eb:ab:03:73:b1:ad:e8:3e:a5:
8f:a5:81:25:f2:66:65:37:45:74:3d:2e:09:bd:20:
49:85:ab:0d:ba:a9:c1:0e:59:e0:cc:06:af:44:ae:
87:36:7f:68:53:d6:fa:bd:33:8c:fe:7a:5c:37:56:
b8:4a:88:05:4f:4a:1d:89:f8:5f:61:94:b9:9d:ff:
b9:34:2f:b3:24:3d:e5:5d:0b:f2:a8:60:a9:69:a7:
3f:4b:46:b0:dd:ae:c8:eb:08:a0:47:aa:95:54:df:
0b:5a:01:05:a9:3d:62:07:ac:6c:4f:97:a3:f0:a4:
ba:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:8A:33:02:56:07:CD:E3:96:44:B5:D1:10:C5:7D:DB:87:2D:A8:56
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ad67ab36-a827-3fe4-b540-333ff1735a82.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
165.1.96.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:76:47:05:a8:2d:84:6b:83:82:11:ab:ae:56:fd:ee:87:72:
d8:cc:42:fa:bc:c8:a6:75:2e:12:cd:30:4e:90:82:73:a6:22:
5a:65:5b:af:27:27:1e:74:7e:96:b1:35:41:ee:b2:8f:a1:cc:
23:03:14:53:97:e3:ed:6f:02:ca:1d:00:d0:25:36:be:79:08:
50:7a:18:3f:ed:dd:45:c6:ba:a8:fd:4c:09:d4:14:b8:a6:e1:
8f:b7:09:9a:24:92:33:ac:c9:bf:d6:d1:96:30:e4:59:62:b1:
38:45:04:6e:91:4c:2a:6c:10:8d:d5:b1:66:97:0a:9f:bb:e2:
c1:05:d1:aa:5c:22:29:04:19:da:8f:6d:8d:42:0f:ed:28:87:
c1:fc:2a:25:f6:24:54:21:f6:c6:cd:67:81:4c:fa:38:da:4d:
24:0f:ba:8d:7b:94:a9:e3:98:07:86:e3:35:b7:12:85:1a:4e:
e1:7e:8b:c5:9e:d4:2f:69:84:ec:99:8f:60:8e:09:d7:40:33:
54:05:51:fd:ae:e7:bd:34:66:b6:ca:ca:e1:a8:05:60:f4:2e:
53:89:e6:6c:e7:16:9b:70:c6:c9:eb:d3:df:a7:72:9a:c4:b8:
70:da:06:61:de:48:9b:2d:56:aa:5a:eb:ee:0f:4c:f6:e2:3e:
9f:35:d4:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 03:30:46 2026 by rpki-client