
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/890a6233-2962-38a6-8ced-95148f69bafd.roa
File: 890a6233-2962-38a6-8ced-95148f69bafd.roa (raw, json)
Hash identifier: 2/cdxLHUT9CTy8eNApV9TVqSexfO8TjgnHtM2xgYCmA=
Subject key identifier: 06:08:11:BD:62:FB:05:A5:61:EF:5B:74:E0:9D:3A:E4:B1:22:44:DC
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584F58CD64E586E72A47573C2220
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/890a6233-2962-38a6-8ced-95148f69bafd.roa
Signing time: Wed 30 Sep 2026 13:00:13 +0000
ROA not before: Wed 30 Sep 2026 13:00:13 +0000
ROA not after: Tue 29 Dec 2026 14:00:13 +0000
asID: 31898
IP address blocks: 147.5.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 04 Oct 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:58:cd:64:e5:86:e7:2a:47:57:3c:22:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Sep 30 13:00:13 2026 GMT
Not After : Dec 29 14:00:13 2026 GMT
Subject: CN=8723ce98-8461-4945-9c3c-afbe05b13864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ab:c0:78:4a:38:be:50:2e:9d:f2:eb:3a:00:
f1:2d:32:1a:ac:42:93:06:6f:e7:f1:bb:13:df:64:
d8:77:2f:37:1d:a5:26:de:7a:b5:a9:3b:aa:60:6c:
63:ff:3c:ac:0a:31:13:7e:a8:13:33:47:28:97:f9:
18:e7:3f:bd:9c:02:f3:84:a3:76:36:f3:9c:28:8a:
36:44:a1:04:3b:86:96:32:ba:74:b3:27:4c:8b:ef:
4c:36:09:0c:6c:6e:fe:be:9a:3c:c7:64:0b:b7:cf:
55:5b:27:dd:e5:ae:90:25:06:2a:2e:1e:ba:03:b8:
3b:5b:e0:e1:86:2c:e0:c4:d0:6f:f3:3e:c8:a1:f3:
35:49:5f:d5:0a:a4:69:b3:2c:19:ff:8a:45:5c:3d:
a6:2e:94:5c:dd:86:62:73:d3:ca:9f:0d:ae:22:db:
fd:db:88:ba:c7:32:2b:65:89:b0:db:52:70:03:1f:
77:73:b2:c0:02:ed:ed:9a:e3:8e:64:e8:4e:fa:0c:
d0:3e:90:eb:77:c5:df:cc:86:ba:00:1e:af:0b:9b:
e4:e9:c8:b2:03:bc:51:ae:c8:38:18:08:cf:07:63:
46:99:7d:76:68:9f:ae:6b:65:49:0c:ae:b2:78:4b:
7f:8f:c0:54:8d:11:6f:9e:de:41:05:70:d1:01:02:
b1:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:08:11:BD:62:FB:05:A5:61:EF:5B:74:E0:9D:3A:E4:B1:22:44:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/890a6233-2962-38a6-8ced-95148f69bafd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
147.5.14.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:1c:29:aa:17:b9:4f:0d:3e:be:85:7c:9b:4d:6d:ed:38:42:
28:88:06:cc:42:d8:b9:c6:00:9b:ff:1d:eb:ba:03:3f:29:e9:
cb:76:2c:4d:b0:95:af:de:86:ba:fe:f9:62:da:0a:26:96:98:
38:0c:fe:16:37:01:da:b2:80:0c:a2:cb:51:73:69:97:69:b9:
d1:44:6a:e0:ae:7f:fd:29:c4:ee:ff:2d:34:da:7c:da:7d:31:
56:7f:43:b1:b4:43:da:9d:90:ec:22:d6:49:9c:44:2a:94:3e:
bc:c9:ca:6e:db:e4:47:c0:2a:d1:8f:cc:6f:d5:d2:39:8a:70:
6a:7c:d0:12:c8:c0:fe:38:80:14:d4:a0:16:1c:2b:d8:44:85:
d1:67:e9:00:33:95:9a:d6:24:70:6d:d4:87:48:dc:6d:34:6c:
90:37:36:53:18:62:b7:ab:38:20:ce:12:2c:6d:cf:37:81:ff:
13:3b:7b:24:15:9a:96:2d:de:24:ee:fd:76:ca:20:bf:46:78:
74:51:18:23:ec:76:86:b3:c6:bf:a3:cc:85:29:9c:92:77:72:
6a:c2:79:c1:9f:1e:35:44:ee:22:49:61:ea:06:d0:13:22:fb:
96:6a:c3:74:9c:f0:f5:a6:45:93:a4:f1:94:86:5b:a6:b8:77:
d6:7b:f2:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 13:04:15 2026 by rpki-client