
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cf6ae818-e71f-354e-a80a-9c7d6682c4ab.roa
File: cf6ae818-e71f-354e-a80a-9c7d6682c4ab.roa (raw, json)
Hash identifier: ORU5B5YqkRiwUeXby0DwtmoBhhx6UaM0+z0IE/Isfdc=
Subject key identifier: 1A:15:3E:DD:4A:69:68:55:AE:DB:51:3A:94:64:4D:BE:70:9B:60:44
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584EA786F3B57ABCCA2596B42780
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cf6ae818-e71f-354e-a80a-9c7d6682c4ab.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 54253
IP address blocks: 159.112.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 29 Aug 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:86:f3:b5:7a:bc:ca:25:96:b4:27:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=029f3aeb-1676-46b6-99a2-f9e8bbdfe801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d0:20:3c:d7:ad:94:90:e5:70:99:c3:6c:1f:
fc:1b:d3:6f:62:9f:69:30:1a:cc:12:b6:79:90:e4:
de:d2:d8:00:c6:d8:68:2f:2b:7c:11:9b:b0:4a:f5:
ce:b6:0d:13:79:9e:4d:68:22:dc:0f:f5:59:b9:55:
c8:eb:95:7f:f0:99:63:a2:72:fa:2f:63:5d:b2:08:
a5:82:3a:89:a3:bd:43:4e:ed:b3:eb:b5:57:5b:69:
02:04:b4:8f:87:29:f5:db:c4:6d:13:a8:8f:4f:bf:
d2:0f:08:a6:a3:36:c6:69:f7:50:f5:85:34:5c:3a:
3d:8b:75:4c:b3:e2:54:ab:4a:be:d1:5c:64:c7:24:
a5:65:7d:91:d5:bc:5f:0b:27:4a:23:dd:f1:cd:82:
35:28:61:b4:7d:f7:88:95:a4:4b:a7:d5:77:16:de:
4b:99:29:a9:d7:51:b7:3c:4e:ed:05:2e:09:98:5c:
8f:e6:da:c7:a1:ab:fa:ff:9c:95:b6:4c:dc:ea:da:
e8:97:e8:c7:c2:3a:7b:96:d1:45:14:76:8b:16:a5:
e5:e3:e5:46:10:97:ea:90:4b:80:46:5c:eb:7d:04:
bf:ff:7b:b0:f0:99:a6:49:8e:2b:1b:f7:fe:cb:58:
e5:a8:d2:d6:d6:b6:85:b5:3b:48:0b:fd:66:00:01:
2b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:15:3E:DD:4A:69:68:55:AE:DB:51:3A:94:64:4D:BE:70:9B:60:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cf6ae818-e71f-354e-a80a-9c7d6682c4ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
159.112.165.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:81:a2:1e:c3:35:07:c4:64:4c:27:92:bd:4f:55:c2:3b:c1:
97:21:3e:10:61:f2:95:86:a2:00:b1:aa:cc:d2:6c:d1:9a:19:
03:de:de:c4:33:8c:63:30:7d:52:3c:5e:53:37:58:09:f9:67:
64:4d:dc:39:7b:c8:c6:c4:85:7d:b6:97:3e:9e:03:1a:73:c1:
89:67:ba:06:4f:cd:36:36:d6:f9:77:36:f1:61:35:6d:88:e5:
ac:b6:f8:de:46:a0:94:87:c7:83:0e:eb:24:bb:a3:93:25:29:
61:91:9f:b4:b8:2d:3d:84:09:54:24:b0:48:c3:a3:f1:3b:f9:
b6:c6:8f:03:be:66:30:c2:06:b5:24:a6:d2:a3:8c:b5:bd:9d:
cc:c3:c5:6a:8a:e1:8b:1b:5c:b5:8d:bc:04:f5:1e:4c:95:60:
54:b2:65:d9:65:83:c6:47:1f:66:a2:9f:d7:cf:df:d3:dc:51:
fb:22:28:f2:7d:5b:87:59:9c:ea:4f:9a:b9:53:d6:86:fc:3c:
01:d7:f3:f5:7d:05:46:e6:5c:b1:ab:8b:12:b3:40:d1:74:d0:
c9:0c:e2:21:3f:8e:c5:d0:4a:5f:b3:14:6f:16:83:44:cb:2e:
69:cb:32:e3:1e:40:6b:e2:b2:c6:cc:10:37:0b:9b:1c:45:58:
fe:95:4d:76
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nhvO1erzKJZa0J4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
MDI5ZjNhZWItMTY3Ni00NmI2LTk5YTItZjllOGJiZGZlODAxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodAgPNetlJDlcJnDbB/8G9NvYp9pMBrMErZ5
kOTe0tgAxthoLyt8EZuwSvXOtg0TeZ5NaCLcD/VZuVXI65V/8JljonL6L2Ndsgil
gjqJo71DTu2z67VXW2kCBLSPhyn128RtE6iPT7/SDwimozbGafdQ9YU0XDo9i3VM
s+JUq0q+0VxkxySlZX2R1bxfCydKI93xzYI1KGG0ffeIlaRLp9V3Ft5LmSmp11G3
PE7tBS4JmFyP5trHoav6/5yVtkzc6trol+jHwjp7ltFFFHaLFqXl4+VGEJfqkEuA
RlzrfQS//3uw8JmmSY4rG/f+y1jlqNLW1raFtTtIC/1mAAErMwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBoVPt1KaWhVrttROpRkTb5wm2BEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvY2Y2YWU4MTgtZTcxZi0z
NTRlLWE4MGEtOWM3ZDY2ODJjNGFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAn3ClMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHmBoh7DNQfEZEwnkr1PVcI7wZchPhBh8pWGogCxqszSbNGaGQPe3sQz
jGMwfVI8XlM3WAn5Z2RN3Dl7yMbEhX22lz6eAxpzwYlnugZPzTY21vl3NvFhNW2I
5ay2+N5GoJSHx4MO6yS7o5MlKWGRn7S4LT2ECVQksEjDo/E7+bbGjwO+ZjDCBrUk
ptKjjLW9nczDxWqK4YsbXLWNvAT1HkyVYFSyZdllg8ZHH2ain9fP39PcUfsiKPJ9
W4dZnOpPmrlT1ob8PAHX8/V9BUbmXLGrixKzQNF00MkM4iE/jsXQSl+zFG8Wg0TL
LmnLMuMeQGvissbMEDcLmxxFWP6VTXY=
-----END CERTIFICATE-----
Generated at Thu Aug 27 09:36:25 2026 by rpki-client