
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/02ffddf9-85c6-3491-ae52-3ebc24347218.roa
File: 02ffddf9-85c6-3491-ae52-3ebc24347218.roa (raw, json)
Hash identifier: jBsTnd9mJyIppeLGLx/DbcY+OksplMq2uTgic1kkKW4=
Subject key identifier: 40:AD:85:6E:4D:CC:40:EF:01:F1:8C:A7:F4:BE:12:62:AF:F0:B8:E1
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584F119D0200AC0F4BEC653D5158
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/02ffddf9-85c6-3491-ae52-3ebc24347218.roa
Signing time: Sat 05 Sep 2026 01:00:12 +0000
ROA not before: Sat 05 Sep 2026 01:00:12 +0000
ROA not after: Fri 04 Dec 2026 02:00:12 +0000
asID: 31898
IP address blocks: 159.54.160.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 26 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:11:9d:02:00:ac:0f:4b:ec:65:3d:51:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Sep 5 01:00:12 2026 GMT
Not After : Dec 4 02:00:12 2026 GMT
Subject: CN=928d9e0b-d013-4ec3-bd19-6f317b495310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:04:24:20:d8:0f:4e:d0:74:23:95:fb:db:15:
74:1d:78:a5:32:d2:ac:43:28:92:e2:22:b9:81:45:
8e:00:eb:d0:8e:c0:b1:b2:9e:d0:58:5f:55:a0:f9:
ca:3c:e2:89:3b:c8:64:b7:01:6f:6a:de:04:19:67:
18:f4:8f:1b:c0:b0:48:51:49:ff:42:dc:6d:80:47:
fb:f2:02:b8:4d:31:e5:fa:73:67:dc:fa:d2:17:94:
92:85:d5:bb:48:c3:be:53:36:35:14:59:e3:b5:02:
e2:eb:8d:ce:ce:1f:35:45:cf:6d:25:09:11:d1:96:
e2:7a:a4:bf:ef:9b:b5:db:43:af:32:c5:64:e1:c1:
b5:58:94:14:92:d9:fe:37:39:31:56:6a:0e:54:fe:
66:81:d0:4a:d3:f6:de:4a:cb:0f:4a:1b:c2:cc:14:
ca:ed:a9:c5:38:3a:95:88:8a:52:89:6b:ab:56:87:
6b:70:be:35:4f:24:5a:f6:00:d9:65:84:0b:ed:5e:
94:2b:e9:e6:44:3a:c6:12:35:d7:22:88:f4:4e:c6:
4c:bd:f0:5e:1d:74:7c:e8:eb:78:b2:6e:93:1a:83:
cf:b9:94:1a:96:0e:49:95:65:bd:40:1a:7e:e7:07:
52:3a:d2:c7:90:e9:43:51:49:80:58:79:20:85:cb:
a9:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:AD:85:6E:4D:CC:40:EF:01:F1:8C:A7:F4:BE:12:62:AF:F0:B8:E1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/02ffddf9-85c6-3491-ae52-3ebc24347218.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
159.54.160.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:15:9b:ae:15:85:bb:64:36:e4:68:13:3b:77:58:3b:5f:0f:
66:ea:e1:e2:ea:53:e4:1b:0e:53:f9:9f:00:29:34:ae:ef:c1:
5f:dd:a8:21:ac:22:93:44:ad:20:71:06:71:03:1a:8d:95:fd:
cd:61:05:03:62:ad:f0:ac:4d:08:af:15:3e:d9:99:b0:16:b1:
b9:a6:dd:18:bc:c6:52:39:64:51:d1:98:20:6c:d4:bd:46:19:
f4:3d:4b:71:07:d8:6a:07:66:88:f1:d4:fc:a1:69:55:b9:36:
b6:51:ee:23:7f:56:23:8f:e3:87:0a:42:9a:93:3b:42:b4:31:
3e:61:d4:5c:1b:bf:ba:0c:b0:b3:3a:c8:b8:ab:56:1a:02:d3:
87:ec:57:3a:f5:eb:e1:19:8c:a7:d8:d9:3a:8b:60:a2:5f:0d:
ad:58:8b:64:f5:e6:8d:06:9d:66:4f:67:3f:03:88:b9:78:88:
e2:e7:ec:d3:35:54:3f:7e:2c:8b:73:94:bc:95:60:a0:54:4f:
d0:12:f1:8c:10:64:1d:5f:63:64:9f:a6:83:a6:5e:3a:bd:a9:
50:53:74:86:c4:58:05:77:25:9e:24:69:e0:81:ef:6c:78:3e:
fe:36:41:8d:31:c9:ef:73:98:bb:d7:93:f6:8c:4d:f1:82:2b:
07:e4:b1:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 09:36:56 2026 by rpki-client