
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c0bacfaf-e82b-3328-961c-9001007438cd.roa
File: c0bacfaf-e82b-3328-961c-9001007438cd.roa (raw, json)
Hash identifier: DXQeRqszJXnZblm6aDOU2G3/EJ+gCehCAM48wGwItlI=
Subject key identifier: 64:4B:CD:F3:89:B1:6B:6A:BF:90:C9:DD:02:B4:A5:11:BA:27:D2:70
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584DDE8809B913D9199AB9D52480
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c0bacfaf-e82b-3328-961c-9001007438cd.roa
Signing time: Mon 18 May 2026 01:00:24 +0000
ROA not before: Mon 18 May 2026 01:00:24 +0000
ROA not after: Sun 16 Aug 2026 01:00:24 +0000
asID: 31898
IP address blocks: 158.101.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 29 May 2026 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:de:88:09:b9:13:d9:19:9a:b9:d5:24:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: May 18 01:00:24 2026 GMT
Not After : Aug 16 01:00:24 2026 GMT
Subject: CN=292bbe63-292f-46d2-9e6a-0e9b5c26c6ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cb:62:00:3d:51:67:94:ea:3f:2e:8c:08:43:
fc:ff:44:52:f3:0c:c8:61:a8:8f:93:8e:df:6d:20:
29:a3:9b:66:3c:4d:fc:1a:ef:79:45:96:45:c6:01:
d7:ee:ce:9d:70:51:cd:89:ac:ed:51:85:c2:66:65:
ce:fa:e4:3e:82:db:06:40:29:cc:7d:ba:b2:41:21:
82:a6:85:0a:17:63:de:80:70:c6:3c:35:18:c6:8f:
42:8d:83:0d:96:fd:79:bc:23:ca:ea:db:8c:eb:df:
61:39:ca:17:ea:12:87:84:31:06:fe:64:a5:a6:71:
94:4b:5a:c3:ac:1c:e6:a8:94:cb:e3:0b:f6:f9:70:
6c:fb:21:6b:0f:c4:0b:23:c0:d8:11:b9:1e:23:95:
64:3b:63:3d:75:3d:9a:e4:1d:b2:c1:6b:e8:3f:cf:
4f:52:8e:2d:61:61:10:cf:90:13:b1:73:a1:ea:3b:
46:61:35:d4:fc:fa:01:58:77:10:72:69:29:29:47:
b0:15:25:0a:38:a4:f2:b2:4f:25:f0:05:0b:e7:16:
69:7f:c9:73:e6:8b:4b:2e:ec:a1:7c:42:23:1b:ec:
f3:1c:db:3c:e9:95:46:a4:1b:d9:42:a0:c0:a1:c4:
20:3f:4c:db:d1:ed:70:18:82:5a:05:05:a8:2d:a0:
71:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:4B:CD:F3:89:B1:6B:6A:BF:90:C9:DD:02:B4:A5:11:BA:27:D2:70
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c0bacfaf-e82b-3328-961c-9001007438cd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
158.101.224.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:1c:48:18:26:a4:91:b3:89:96:52:74:90:98:d1:2c:35:bd:
af:b1:8e:7f:f2:1e:3b:6f:a2:8c:de:52:33:79:bc:0d:f8:84:
bc:5a:79:fc:7e:4b:78:e1:c4:33:e9:0e:89:7e:bd:1f:8c:92:
d7:50:17:ff:fc:02:e0:23:d5:ec:65:0b:92:06:88:68:cf:fb:
87:dc:2a:25:e8:91:f5:b1:32:e5:25:f7:2c:80:6f:95:4e:6a:
ce:27:c8:5e:b2:d2:1f:29:c8:c2:2e:c8:b4:34:3b:52:5e:21:
ce:44:15:d7:b4:80:70:03:44:df:ec:f0:7f:5a:67:7d:f8:c5:
b0:7a:04:ff:fc:f8:ef:8c:6f:4b:ac:d5:07:0d:5f:21:28:1d:
37:17:fc:a5:d8:e7:63:55:b6:6b:61:2a:75:b3:ac:e4:a7:ee:
e2:a8:22:2d:a1:a5:14:8c:05:d5:e7:bd:36:d6:b1:a7:5a:aa:
59:73:5d:42:6c:32:4f:37:a5:72:69:59:b4:26:ae:e1:d3:e6:
0e:00:4c:dd:dc:b3:45:6f:6c:65:50:15:24:f5:a4:05:f5:c3:
d4:d2:7b:54:59:2a:ef:39:18:ef:01:ac:b5:b8:df:a6:e4:3a:
4c:be:31:36:91:8c:3e:02:c5:45:09:fb:f0:9d:dd:87:53:65:
c0:39:94:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 15:25:15 2026 by rpki-client