
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/119727b6-8f8c-37be-8982-acdca080440f.roa
File: 119727b6-8f8c-37be-8982-acdca080440f.roa (raw, json)
Hash identifier: rcEUG0dcMM1qhfvcL2eX/mL2VWk9EmzvNK9GUfsnbpY=
Subject key identifier: 5F:40:23:6A:26:54:1D:BB:E1:83:C6:57:8B:BB:52:F0:DF:ED:05:16
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584F23C2898E9D899EFBE59E89B4
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/119727b6-8f8c-37be-8982-acdca080440f.roa
Signing time: Fri 11 Sep 2026 13:00:12 +0000
ROA not before: Fri 11 Sep 2026 13:00:12 +0000
ROA not after: Thu 10 Dec 2026 14:00:12 +0000
asID: 2763
IP address blocks: 156.151.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 26 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:23:c2:89:8e:9d:89:9e:fb:e5:9e:89:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Sep 11 13:00:12 2026 GMT
Not After : Dec 10 14:00:12 2026 GMT
Subject: CN=1d1e439a-7231-4d58-8194-15bc0f88b3e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9b:0f:e4:92:26:41:2a:60:c4:1b:57:be:24:
13:a7:e4:fd:9c:35:db:bd:d3:22:91:01:de:25:7b:
70:65:d2:2f:2f:46:8e:06:43:5a:27:4f:eb:5a:7b:
a8:bf:bd:12:8c:d9:a6:f8:27:8e:75:7a:5e:f2:02:
e7:bb:a4:24:14:5f:b5:9e:31:c8:f5:0a:19:91:2a:
e2:a9:63:12:1d:45:0f:44:87:74:47:d4:e4:91:f4:
ee:e3:92:2d:29:1f:6c:3d:7b:ae:93:80:24:5f:80:
73:60:98:bb:a1:a0:c5:24:dd:ab:d5:13:00:e8:b1:
a6:b0:a1:b4:31:9f:bd:f3:7c:69:2c:dd:1d:91:03:
2d:2f:3b:33:74:d1:76:ff:b2:91:a2:fd:ca:cd:b1:
4d:57:30:7a:59:27:2b:cb:b3:5a:e4:4f:71:0f:5a:
d1:08:1a:4e:b9:b6:68:b4:a7:fb:43:68:ec:e2:d1:
9d:b3:26:17:c2:bd:ce:52:9d:ed:d5:86:2d:d9:29:
29:1a:a8:aa:33:c7:9f:72:3d:a9:9b:40:72:d5:9f:
e1:63:3e:41:b1:38:0e:ca:ed:b5:d0:c0:78:46:3b:
61:5c:a7:ff:a1:bf:b8:9c:70:91:b7:30:61:86:b9:
27:d8:bf:63:d1:fc:0b:3a:88:7d:98:b6:fd:60:fe:
41:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:40:23:6A:26:54:1D:BB:E1:83:C6:57:8B:BB:52:F0:DF:ED:05:16
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/119727b6-8f8c-37be-8982-acdca080440f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
156.151.200.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:d4:36:50:97:45:42:9b:c5:d6:42:71:17:e0:6c:87:a1:fa:
14:47:1c:5a:94:25:fe:1b:28:a1:7d:67:58:d2:70:c6:5a:6f:
54:2b:cc:c6:ae:2b:5b:6e:4d:a3:67:92:2c:09:fe:34:fa:e4:
e5:7e:58:6f:2f:91:19:33:33:8b:e0:8e:1b:7d:99:b1:31:33:
e2:1f:d7:27:0a:25:c2:33:7f:06:ae:bb:52:d8:b6:f1:6d:24:
92:fa:88:10:14:fc:ef:dc:c3:3a:66:81:2f:99:10:49:48:79:
b5:e0:14:24:7f:a0:22:7a:43:07:94:92:ec:5b:6c:ed:50:81:
7d:50:99:65:7d:75:d4:19:db:c5:1b:13:02:7e:d8:ba:6a:94:
7f:c5:9a:ee:bd:c6:e3:39:d2:a1:c7:54:82:22:0c:0f:21:0b:
7a:fa:6d:be:20:94:f9:27:82:55:42:31:d4:92:71:a4:63:76:
8b:98:a1:43:8d:a9:69:f9:ee:ec:a0:d6:f1:b9:c1:76:b4:1d:
18:6b:3d:6d:11:56:5e:b7:5e:27:ba:cd:37:0b:b3:16:ce:d8:
a8:da:53:c4:80:d9:18:2e:a0:e6:0b:a3:9b:01:54:86:6b:f6:
40:1a:51:61:68:b0:f0:31:9f:77:84:b0:f1:a1:b3:e9:da:16:
fa:f3:e6:7c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8jwomOnYme++WeibQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI2MDkxMTEzMDAxMloXDTI2MTIxMDE0MDAxMlowLzEtMCsGA1UEAxMk
MWQxZTQzOWEtNzIzMS00ZDU4LTgxOTQtMTViYzBmODhiM2U2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpsP5JImQSpgxBtXviQTp+T9nDXbvdMikQHe
JXtwZdIvL0aOBkNaJ0/rWnuov70SjNmm+CeOdXpe8gLnu6QkFF+1njHI9QoZkSri
qWMSHUUPRId0R9TkkfTu45ItKR9sPXuuk4AkX4BzYJi7oaDFJN2r1RMA6LGmsKG0
MZ+983xpLN0dkQMtLzszdNF2/7KRov3KzbFNVzB6WScry7Na5E9xD1rRCBpOubZo
tKf7Q2js4tGdsyYXwr3OUp3t1YYt2SkpGqiqM8efcj2pm0By1Z/hYz5BsTgOyu21
0MB4RjthXKf/ob+4nHCRtzBhhrkn2L9j0fwLOoh9mLb9YP5BzwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF9AI2omVB274YPGV4u7UvDf7QUWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMTE5NzI3YjYtOGY4Yy0z
N2JlLTg5ODItYWNkY2EwODA0NDBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnJfIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB/UNlCXRUKbxdZCcRfgbIeh+hRHHFqUJf4bKKF9Z1jScMZab1QrzMau
K1tuTaNnkiwJ/jT65OV+WG8vkRkzM4vgjht9mbExM+If1ycKJcIzfwauu1LYtvFt
JJL6iBAU/O/cwzpmgS+ZEElIebXgFCR/oCJ6QweUkuxbbO1QgX1QmWV9ddQZ28Ub
EwJ+2LpqlH/Fmu69xuM50qHHVIIiDA8hC3r6bb4glPknglVCMdSScaRjdouYoUON
qWn57uyg1vG5wXa0HRhrPW0RVl63Xie6zTcLsxbO2KjaU8SA2RguoOYLo5sBVIZr
9kAaUWFosPAxn3eEsPGhs+naFvrz5nw=
-----END CERTIFICATE-----
Generated at Thu Sep 24 21:59:19 2026 by rpki-client