
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e927bec1-3b18-329d-aba0-38badbc54989.roa
File: e927bec1-3b18-329d-aba0-38badbc54989.roa (raw, json)
Hash identifier: Nt2B0DFs58ujk5ErVJrc7WmIFuWBmf/cnnrIvAZTKwI=
Subject key identifier: 9B:8B:72:BF:12:E0:1A:18:C2:D0:18:3B:5A:42:C4:1F:F1:0E:92:F8
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584EED5243EAAFA78419C251F980
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e927bec1-3b18-329d-aba0-38badbc54989.roa
Signing time: Sun 23 Aug 2026 01:00:12 +0000
ROA not before: Sun 23 Aug 2026 01:00:12 +0000
ROA not after: Sat 21 Nov 2026 02:00:12 +0000
asID: 31898
IP address blocks: 152.70.192.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 29 Aug 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:ed:52:43:ea:af:a7:84:19:c2:51:f9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Aug 23 01:00:12 2026 GMT
Not After : Nov 21 02:00:12 2026 GMT
Subject: CN=20dd28b5-0304-4102-a126-953b10465ffd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:14:61:1b:90:21:60:45:3f:63:68:db:fd:c4:
09:82:e5:91:a7:c5:2b:07:8c:ad:d8:30:6e:b5:70:
fd:1b:f1:a0:62:46:30:4c:5f:77:4c:59:ec:65:15:
eb:55:82:84:cf:57:d6:00:25:ed:af:78:31:d2:61:
98:7b:e6:26:db:ba:36:3b:ae:4e:80:79:58:da:e5:
cc:5a:75:dc:96:f2:df:db:4c:0d:05:7c:50:f6:87:
23:e9:2a:10:07:a4:1a:48:74:79:81:da:01:d6:49:
87:fe:c3:ba:b0:ba:ad:eb:f8:00:13:76:65:9e:8b:
2d:a9:49:ee:52:c4:b5:01:03:19:62:c2:59:e7:89:
10:04:77:f5:31:40:f1:f4:3e:8b:7e:9b:13:5a:19:
6b:b2:ac:e3:0f:c6:f4:3a:86:90:ee:0c:64:08:1e:
b4:e1:df:c7:78:66:50:e0:ad:21:5e:ec:50:12:5b:
cb:3b:9f:7e:87:5f:f4:78:88:37:fc:a7:0c:2c:b8:
85:b4:9c:77:0c:cc:55:0f:10:70:24:95:41:7d:20:
48:6b:56:7f:1e:bb:0f:de:ef:bb:e3:91:fb:25:85:
2d:0a:80:10:fb:cc:77:f9:7e:6b:0e:6f:d7:01:77:
f9:3e:3a:45:db:b8:74:ba:14:53:a6:55:46:76:6e:
a4:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:8B:72:BF:12:E0:1A:18:C2:D0:18:3B:5A:42:C4:1F:F1:0E:92:F8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e927bec1-3b18-329d-aba0-38badbc54989.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
152.70.192.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:bf:2c:c6:26:4b:dc:d3:32:3b:6a:9a:96:eb:19:69:1a:4a:
c8:8f:fe:62:d6:d6:a6:1f:25:ee:a9:e8:ab:b9:35:5d:e8:cf:
83:75:c2:db:08:2a:26:fc:1c:a9:ae:1c:3c:87:99:2b:05:61:
24:0f:57:36:5e:a1:bf:92:70:b8:a8:cb:09:9c:68:fd:19:ba:
0b:da:ca:da:fd:2c:19:ba:2e:b6:88:4b:6f:94:91:16:e9:3a:
74:92:b2:5e:d2:1f:7b:f0:66:ba:71:84:ab:67:23:7d:61:17:
1e:aa:d7:4e:e4:da:74:89:d8:d9:0f:5d:e7:1b:da:da:6c:25:
b9:7a:a3:80:93:69:21:8d:10:d9:c6:14:06:83:db:65:f9:39:
8c:f0:73:0c:5c:e0:13:4e:fa:0e:1e:67:b7:bf:43:28:8a:87:
45:d0:66:0e:b7:d1:45:9c:6e:d0:a3:27:b7:0b:76:bd:00:0b:
4d:6d:fb:b3:09:48:2d:d5:36:ec:3a:03:26:0e:8e:ea:b2:ee:
0c:24:b1:5e:2d:d9:f8:e4:56:81:e7:fc:00:71:02:64:d2:b5:
fe:f7:3b:b6:c4:ba:3a:05:44:ad:c5:d3:44:20:37:37:53:18:
bb:55:e3:7c:91:04:3f:d7:e0:d0:43:0e:02:67:d3:9e:49:96:
e2:3b:9a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 07:57:48 2026 by rpki-client