
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ae85de18-a745-33a3-858d-c584a58376f7.roa
File: ae85de18-a745-33a3-858d-c584a58376f7.roa (raw, json)
Hash identifier: p8JHc7YH3kuTd39ha6v+FmND6il1j7rIPROklgionnE=
Subject key identifier: 1E:FC:80:5D:F2:BD:2D:22:C4:11:EB:04:E2:0E:F0:7C:27:04:9A:9B
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584DC8305C8C2C4A67EE62DE6300
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ae85de18-a745-33a3-858d-c584a58376f7.roa
Signing time: Sun 10 May 2026 01:00:24 +0000
ROA not before: Sun 10 May 2026 01:00:24 +0000
ROA not after: Sat 08 Aug 2026 01:00:24 +0000
asID: 31898
IP address blocks: 147.224.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:c8:30:5c:8c:2c:4a:67:ee:62:de:63:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: May 10 01:00:24 2026 GMT
Not After : Aug 8 01:00:24 2026 GMT
Subject: CN=b1649c39-ada1-40ca-81e8-42caa6fd76f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0f:d7:6f:61:85:a5:1c:67:08:36:ca:ac:d7:
a7:29:46:09:84:b9:ed:6b:d5:96:41:b1:30:81:97:
c6:8f:4b:29:fc:dc:b0:3c:1e:91:ff:18:8e:34:6d:
2f:b5:de:a5:d7:ac:d4:08:e7:2c:2a:b9:3a:02:0e:
db:52:a5:27:07:b1:c0:f2:75:8a:ce:b4:9d:bb:d6:
db:2b:e3:37:2d:35:f3:e5:a9:21:7a:9a:88:a2:bd:
6a:0c:85:e0:3b:ec:4c:83:c8:a0:97:7b:7e:9b:47:
d1:b0:f4:5b:32:a3:6b:18:71:62:b4:14:09:bb:c2:
30:d2:ca:f1:e3:1e:24:84:0a:46:81:56:76:91:0d:
94:01:32:65:e3:da:5c:dc:e1:02:3f:50:1f:47:62:
f5:8a:27:5b:63:40:7e:64:df:a0:5b:8d:ff:16:b4:
f6:e6:6b:3c:7c:1d:a5:fa:0f:10:d9:fe:a8:b8:e5:
e0:de:be:fe:2f:a7:99:83:db:95:73:20:b8:64:a7:
89:da:89:04:89:77:b7:fb:67:b5:d3:a5:24:cc:83:
60:9c:2b:80:0e:a7:15:d6:9a:3e:11:56:af:e3:ab:
a3:20:2a:ae:c2:e8:dc:e4:0f:93:9a:1d:29:19:88:
35:a5:88:bd:dc:44:c5:bd:c1:45:36:18:2a:46:48:
27:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:FC:80:5D:F2:BD:2D:22:C4:11:EB:04:E2:0E:F0:7C:27:04:9A:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ae85de18-a745-33a3-858d-c584a58376f7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
147.224.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:9b:37:c1:7c:ea:8c:62:23:50:3f:84:c0:f2:5d:34:b9:38:
a8:1f:c4:87:83:21:d5:70:5b:6d:9d:0f:f9:4b:14:b5:40:16:
ea:10:c2:29:71:4e:f1:36:6a:0f:dd:bd:ef:ba:02:a7:64:de:
c2:e1:47:1b:74:99:d0:93:fc:01:03:50:52:b1:c5:17:7c:b0:
40:ed:a0:1d:9e:b5:a2:7d:3d:3a:49:4b:c6:7c:12:be:45:77:
b9:8d:d3:76:71:df:e5:c0:e8:e9:d0:49:6a:e9:61:f0:5f:d8:
f6:1d:5c:f8:da:c7:73:6a:79:b0:2e:bc:6d:45:81:4a:f9:2a:
e8:20:03:82:4f:a3:c4:a3:50:e5:f6:2e:d8:5f:90:ca:45:d2:
1d:c1:d1:e1:eb:b5:ac:83:7e:6d:59:dd:15:99:3d:7e:72:01:
ec:48:b7:57:4d:80:52:68:e0:8e:ed:c2:a2:39:9a:82:3d:7e:
8a:0f:97:c1:e0:75:5e:67:fc:b1:e5:d1:2d:99:e1:4a:ee:57:
d9:80:ea:11:9b:62:da:e9:83:5b:d0:dc:58:a2:58:57:70:6f:
09:65:30:92:12:ad:1e:cd:26:40:e2:e7:1c:c3:17:d5:f6:11:
cb:94:4e:e0:ab:c7:77:19:59:ee:47:7a:b6:98:6f:03:a9:dd:
8a:c8:59:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:50:02 2026 by rpki-client