
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9f402ac2-805b-33f9-8973-e24027b97258.roa
File: 9f402ac2-805b-33f9-8973-e24027b97258.roa (raw, json)
Hash identifier: HjEFSl5kNGCFbaXUgb2r1taSVjrTR9fFsF9mdxDcu7s=
Subject key identifier: 67:BE:BA:DC:90:82:3A:BE:52:55:5A:FA:38:EC:93:6D:07:55:AA:A2
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584E7E9508C4BDA8B68C16351D00
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9f402ac2-805b-33f9-8973-e24027b97258.roa
Signing time: Tue 14 Jul 2026 09:00:12 +0000
ROA not before: Tue 14 Jul 2026 09:00:12 +0000
ROA not after: Mon 12 Oct 2026 09:00:12 +0000
asID: 31898
IP address blocks: 168.107.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 26 Jul 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:7e:95:08:c4:bd:a8:b6:8c:16:35:1d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Jul 14 09:00:12 2026 GMT
Not After : Oct 12 09:00:12 2026 GMT
Subject: CN=871e10fb-11da-4bb6-953c-f308f6ad07be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:2d:74:4e:54:c8:a0:74:ef:95:1c:70:bf:84:
6c:dd:76:d8:c1:1d:d3:11:cd:ff:28:75:df:e6:a1:
94:8e:ec:76:c9:12:68:58:73:91:b6:ef:29:a1:5d:
c6:67:a7:ae:5b:43:bf:62:c0:8d:d1:62:17:7b:6f:
8c:7e:73:9e:b5:68:38:cd:27:18:b5:7b:73:35:f1:
6b:0c:15:dc:f3:d4:b6:33:83:4e:14:1a:0a:31:bd:
dd:b1:ae:1e:d2:d4:52:12:70:c9:3f:f6:74:5c:99:
c5:43:c4:a3:9d:30:2b:f0:9d:1f:9f:7e:05:02:e7:
87:de:9e:eb:e2:41:fe:2f:97:c7:68:2e:9f:e2:ac:
9d:ad:cf:45:3f:c3:67:dd:cf:e7:e7:2e:20:13:72:
90:7a:9d:05:ca:c6:a3:a5:a2:8f:0d:fb:bb:e0:38:
9e:6d:b5:6a:7f:be:a7:12:34:2c:09:b6:7f:58:18:
39:62:6c:32:5f:21:76:ec:98:49:5b:82:4f:cd:1d:
de:5e:ea:eb:92:37:40:0b:a1:8e:6e:4f:02:32:c4:
f7:72:c2:86:bf:d1:94:5f:5e:7b:10:b4:f6:2a:ad:
8a:ad:7e:2b:45:0b:c5:c9:cf:a4:4a:46:29:bb:52:
6b:ec:06:b4:97:f5:a5:e1:74:10:a3:22:57:99:97:
39:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:BE:BA:DC:90:82:3A:BE:52:55:5A:FA:38:EC:93:6D:07:55:AA:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9f402ac2-805b-33f9-8973-e24027b97258.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
168.107.228.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:e6:0e:ce:9e:e5:2f:07:b1:96:23:42:ae:16:b3:9e:be:ef:
b9:9a:13:11:d2:2c:56:48:43:78:6f:4d:c3:ab:93:a6:be:f0:
56:4d:76:c8:69:2a:0b:68:2a:a8:f8:42:38:84:3f:de:ae:c7:
03:41:a1:35:1b:ee:20:c9:59:fc:c5:d9:91:4c:90:59:0e:9c:
92:08:93:d5:ae:ca:0f:f9:b2:1b:7b:06:4e:e1:d4:8f:59:ce:
eb:0b:5d:ce:03:f1:65:fc:48:8d:3e:31:1a:8c:fa:2e:6a:ca:
2f:50:0d:c9:b6:7c:c7:77:ae:e1:1f:81:25:df:85:15:70:24:
a4:8a:c8:e1:16:4c:b9:81:a4:ef:19:f1:b3:18:ee:2b:ed:70:
6e:11:f6:1a:61:5d:7f:ff:86:46:ec:3c:bd:f0:cd:54:ed:35:
8d:0e:b2:a5:64:60:a6:a4:f2:43:8f:68:04:19:fa:9d:a5:4e:
b5:be:ad:fc:65:ac:f5:1a:bb:30:09:0d:81:2c:e2:7e:ed:2e:
26:de:9f:e4:43:f7:28:88:03:8e:7d:bc:c7:0b:4e:b7:b7:08:
30:c0:58:a8:c2:f7:ca:69:58:a4:a9:cf:b3:80:ec:11:0d:22:
f6:07:4e:5c:4d:ea:11:74:61:69:8a:2e:8e:a2:8b:86:b3:3d:
70:c7:a4:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:38:32 2026 by rpki-client