
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ce01e685-97ad-3167-82e0-d4a26f182d86.roa
File: ce01e685-97ad-3167-82e0-d4a26f182d86.roa (raw, json)
Hash identifier: 28rvnOn3FU56rGJK7qk4DVIpu0EqMxKMo/AahZ3+qpk=
Subject key identifier: D1:89:0D:EC:10:9A:3E:2C:2B:E3:62:A0:40:98:AA:77:EE:D5:5D:03
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584E6F3A300A5B843570DE215680
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ce01e685-97ad-3167-82e0-d4a26f182d86.roa
Signing time: Wed 08 Jul 2026 21:00:12 +0000
ROA not before: Wed 08 Jul 2026 21:00:12 +0000
ROA not after: Tue 06 Oct 2026 21:00:12 +0000
asID: 31898
IP address blocks: 192.29.8.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 14 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:6f:3a:30:0a:5b:84:35:70:de:21:56:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Jul 8 21:00:12 2026 GMT
Not After : Oct 6 21:00:12 2026 GMT
Subject: CN=436e0e1d-def0-4db6-9354-4b28e458b90a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f1:3c:08:e8:db:ff:98:b2:80:15:db:5c:68:
1b:b7:39:70:aa:6e:e2:d1:03:87:2a:31:6d:cf:b7:
00:f4:21:26:42:4b:f6:84:b7:bb:82:26:21:77:74:
d2:95:52:64:2a:1e:42:26:7e:5b:ac:64:de:e0:a6:
9c:2a:22:12:8b:6b:01:30:bb:3f:fb:e2:5e:ba:28:
76:19:79:b1:e4:3a:7b:51:d9:ac:eb:04:e9:82:bf:
23:21:fa:65:15:85:43:6c:61:a2:3b:ad:ea:1e:14:
7e:57:53:b7:eb:5a:9d:cf:41:ef:d6:4c:b6:3e:15:
38:97:64:9f:ca:fd:62:32:90:c8:f1:33:2f:54:a2:
a5:47:41:68:a3:f4:23:29:cc:11:4d:82:a3:b6:09:
04:1e:a5:7c:ab:bd:b0:45:e3:ae:7a:0d:17:58:61:
d1:1e:92:13:84:55:ff:af:a0:b1:07:ee:bf:fc:48:
19:68:ce:c6:6f:9c:ec:e6:74:75:08:00:49:54:d3:
47:9b:96:f0:d7:8c:19:02:35:ab:f4:f0:23:66:8e:
04:35:4a:09:c0:7f:17:82:88:7e:fa:36:ec:73:4e:
59:a0:48:b4:56:a9:95:77:59:c7:55:a3:8c:f0:5f:
c2:10:ae:18:1c:19:41:9a:45:fc:e4:24:d5:98:aa:
2f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:89:0D:EC:10:9A:3E:2C:2B:E3:62:A0:40:98:AA:77:EE:D5:5D:03
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ce01e685-97ad-3167-82e0-d4a26f182d86.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
192.29.8.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:35:30:84:12:50:6b:fe:57:15:2e:28:50:d7:e7:11:3c:b8:
8a:4b:92:ce:eb:b2:92:87:57:3c:22:20:0e:e1:8c:17:82:9b:
71:f1:7b:71:72:a4:e9:6b:4c:1e:2f:a4:16:66:17:a0:60:c1:
94:d5:c4:4c:47:1c:9a:96:7a:bd:13:8d:1d:e7:ae:d1:f8:ab:
cf:5c:e1:1e:5d:1e:f2:69:2a:46:a0:7d:7c:8e:0f:12:4d:3e:
db:63:1f:54:92:93:3f:a2:c8:d7:03:8b:45:17:ef:8f:f4:d0:
2d:89:c2:b7:a7:b8:36:38:0d:4d:5a:c6:72:5b:9a:68:d8:b8:
77:ad:2a:4e:2c:81:42:59:38:33:40:96:83:d2:9e:5f:1c:c7:
31:c4:f2:7b:38:80:d3:6a:7a:52:83:b5:cb:37:3e:a0:36:63:
49:dd:fc:41:10:dd:6f:65:e0:fe:a0:8d:ed:29:f8:6d:af:52:
66:69:a7:48:c1:a7:ca:4b:32:14:04:21:6a:31:ab:ca:95:66:
b1:08:2b:d1:97:73:d6:c2:11:b9:51:de:ad:5d:10:22:a5:97:
85:3b:15:c7:bf:06:cd:b5:fb:29:93:f6:43:f1:65:03:b7:5e:
9d:e1:99:e7:8b:09:34:87:b6:8f:bb:30:a0:1e:2a:ae:fa:0f:
65:a3:5d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 02:49:26 2026 by rpki-client