
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ec4896da-d268-331e-8be2-e90396fbe7b7.roa
File: ec4896da-d268-331e-8be2-e90396fbe7b7.roa (raw, json)
Hash identifier: GDN3cwvcIjhpnAZGyQnCsIFzMMlRvM9+XAPBEi+Dy1o=
Subject key identifier: AD:12:7D:B0:49:F4:27:25:30:55:65:F5:07:35:86:D7:76:61:A1:C1
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584CBDB2129F28D609EDAED77340
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ec4896da-d268-331e-8be2-e90396fbe7b7.roa
Signing time: Tue 03 Feb 2026 14:00:39 +0000
ROA not before: Tue 03 Feb 2026 14:00:39 +0000
ROA not after: Mon 04 May 2026 13:00:39 +0000
asID: 31898
IP address blocks: 157.151.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Feb 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:bd:b2:12:9f:28:d6:09:ed:ae:d7:73:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Feb 3 14:00:39 2026 GMT
Not After : May 4 13:00:39 2026 GMT
Subject: CN=a5b82500-ab2c-461c-adc9-5327b0e5bf39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:f3:d1:3b:5b:ac:9d:42:50:6a:0b:ae:fd:62:
f5:c5:d2:c4:19:44:d3:e6:ad:9c:8b:a4:6d:b0:fa:
7e:73:83:e3:c4:9b:3c:1f:51:7c:d5:d0:44:c0:a6:
6c:b6:63:c5:a0:d4:5b:eb:89:66:07:17:a6:eb:36:
f7:19:ad:34:e7:b2:89:ef:94:80:57:ad:30:86:25:
85:a1:65:93:e3:6e:60:16:64:59:6a:c0:43:4e:6a:
af:af:4b:5d:51:61:4d:0a:91:43:01:b4:5c:c9:c5:
1f:93:a8:64:ac:44:10:8b:7d:15:7c:b6:68:cc:47:
73:07:c8:ad:70:50:cc:f3:11:ec:84:cc:a7:18:86:
3c:01:9b:d3:1c:94:57:e9:17:aa:5e:bb:61:39:08:
25:85:6b:9f:e8:ed:72:84:5b:ef:4d:a8:a0:57:bb:
4b:b3:5a:ba:b1:2e:08:5c:85:44:ae:ea:00:0f:5e:
2d:68:e6:ca:95:9f:10:3c:32:7b:73:b3:70:af:da:
7b:cb:7e:a6:6d:84:b3:69:ba:df:2b:6f:00:44:7f:
4b:da:ea:62:c9:84:d7:34:51:52:63:3a:cc:26:fa:
4c:b4:c0:47:b8:98:b7:4c:f8:14:1b:f7:bf:7a:5b:
fc:b1:fa:20:b5:64:db:11:46:11:77:7e:6d:b4:cf:
9c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:12:7D:B0:49:F4:27:25:30:55:65:F5:07:35:86:D7:76:61:A1:C1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ec4896da-d268-331e-8be2-e90396fbe7b7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
157.151.58.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:67:dc:f5:06:8d:e7:fa:a8:e3:78:12:60:b9:dc:cd:56:9a:
21:1b:81:3b:1d:4b:bb:98:5e:95:6b:78:b6:51:4c:a9:fc:37:
4a:94:a2:35:5e:6f:91:ad:6b:8a:24:af:8c:db:9c:29:e3:b7:
5b:52:1e:69:97:4c:bd:e9:c9:45:22:32:22:02:e7:8a:ee:7e:
70:bf:b1:76:34:b6:ef:24:16:05:82:e0:04:05:83:8d:12:6f:
14:41:9f:23:96:f2:a9:f5:89:ac:5d:6c:48:c7:f9:8b:b0:96:
05:8e:12:6b:b6:bf:f6:82:9e:5e:68:2c:64:55:18:b1:93:3f:
aa:3b:37:bb:2e:6c:33:ec:a0:37:43:85:ad:d4:b5:1f:ce:de:
ce:58:2e:f8:24:f2:3a:c3:92:cd:29:2b:56:2b:bc:aa:fe:0d:
9c:16:6b:ce:c1:66:40:ee:0a:81:82:07:62:09:87:b1:17:55:
71:fd:db:84:1e:3f:38:f2:a2:2d:71:8d:74:95:10:c7:e1:f8:
1d:a7:03:aa:85:91:aa:56:f9:d5:75:5d:e9:59:05:27:04:b0:
96:8a:fb:74:48:cc:07:8f:e3:83:6c:49:82:f0:8d:7d:a6:fe:
05:dd:8e:00:b8:88:23:ba:bb:f9:b6:b8:ca:f1:96:8e:13:d4:
ee:e0:8c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 03:26:10 2026 by rpki-client