
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/15a4f54d-f4bc-3779-afab-c700fc05fe12.roa
File: 15a4f54d-f4bc-3779-afab-c700fc05fe12.roa (raw, json)
Hash identifier: 8qx3HXt6I+fhd8IFqsM05OCINkeFhoJLT9YZhLw7clI=
Subject key identifier: 3F:6C:40:46:F4:03:EC:77:DA:97:18:BD:41:51:CD:22:EF:A5:4C:04
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584D8C2A969C3FF1611C2B0DDAC0
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/15a4f54d-f4bc-3779-afab-c700fc05fe12.roa
Signing time: Sat 18 Apr 2026 13:00:30 +0000
ROA not before: Sat 18 Apr 2026 13:00:30 +0000
ROA not after: Fri 17 Jul 2026 13:00:30 +0000
asID: 31898
IP address blocks: 157.137.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:8c:2a:96:9c:3f:f1:61:1c:2b:0d:da:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Apr 18 13:00:30 2026 GMT
Not After : Jul 17 13:00:30 2026 GMT
Subject: CN=390dc4a8-fc1b-4195-a321-7b5c983bc665
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:bc:6a:af:46:f2:f7:38:8c:77:2e:99:c6:1d:
62:43:be:83:81:db:5d:7c:7d:28:97:44:14:8c:c3:
d1:11:22:73:48:80:fc:78:97:5c:0e:7a:df:9e:97:
89:fc:82:22:a6:fa:ac:61:22:3e:ff:f9:34:fd:4c:
58:30:b0:7c:df:a1:31:f0:e2:53:53:49:13:21:e9:
8c:5c:cb:db:26:6b:1b:30:46:f2:03:e2:99:d9:32:
86:f2:8d:93:f3:3d:12:24:61:b0:ed:2f:aa:72:f0:
29:0a:ad:d0:0d:6b:3d:a8:89:9b:f1:9d:8c:08:88:
8c:c2:b0:a6:fb:a5:b1:d9:bf:ef:5a:1d:02:e2:9d:
d8:10:ea:a2:ec:2f:90:34:98:d8:e1:56:0a:b4:67:
9e:6b:30:f7:a1:d6:b1:1d:6f:bd:ec:ac:0c:c8:2e:
e0:65:c4:5a:3a:a9:07:3d:31:76:67:50:06:ed:b9:
6c:c7:84:55:e1:8a:7b:57:8c:34:50:4d:28:27:04:
46:7b:b2:70:ed:f6:5f:b8:66:cf:b4:ee:53:de:23:
d5:ad:15:03:21:e7:b8:f9:bd:f1:a1:50:ca:e2:71:
bf:1c:24:0c:ea:4d:4b:9c:86:d7:94:68:ed:03:40:
3a:cd:d3:e2:d7:6a:ec:e5:f2:3e:83:6b:37:88:19:
c6:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:6C:40:46:F4:03:EC:77:DA:97:18:BD:41:51:CD:22:EF:A5:4C:04
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/15a4f54d-f4bc-3779-afab-c700fc05fe12.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
157.137.253.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:b1:ee:23:c7:f0:ad:7b:f8:30:df:26:b9:21:c0:c2:52:67:
c3:aa:0a:24:c6:1f:4e:7c:3b:cb:9e:ea:a5:29:9d:70:93:fd:
fe:f2:db:64:ba:9c:c6:7e:ea:08:7d:cb:d3:95:6e:a8:2d:f5:
44:dd:1b:6a:4f:71:d3:55:03:6f:ce:81:39:46:ec:a7:83:45:
ad:7f:85:7d:da:69:0a:6a:02:da:86:c4:79:9c:bc:cf:a6:52:
ab:c0:ed:c6:b8:2d:c2:b7:3d:2e:69:94:cd:fd:b2:6b:4b:b5:
fa:b1:f1:0e:59:7b:96:73:df:63:25:5c:85:ba:15:2a:6c:c1:
90:f9:3f:29:c9:98:12:11:70:38:74:5e:fc:2f:92:13:97:27:
02:b4:8e:81:70:ca:50:aa:6d:0a:bb:e3:30:35:69:38:08:dd:
f9:7e:d9:af:8d:f2:27:8c:6b:60:e2:af:11:53:98:b0:50:72:
ad:3a:0d:de:32:0c:71:d3:d6:40:a0:d2:16:b3:a9:5d:eb:b6:
08:fa:be:75:7b:bf:ae:9e:b3:49:7a:cf:42:aa:ad:12:94:4a:
5d:c5:f8:27:f7:7c:e6:2a:f5:1c:bf:15:07:d1:22:e7:a0:aa:
ec:5c:b0:e2:83:f4:34:ed:03:c0:92:b2:28:f9:9c:8f:55:12:
37:97:f9:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:55:09 2026 by rpki-client