
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e50eb706-0d5f-33b3-99e7-5d4d89f4fed4.roa
File: e50eb706-0d5f-33b3-99e7-5d4d89f4fed4.roa (raw, json)
Hash identifier: GLzjKdRM/DSR0bw8PrAQKUY4/hn4Bt3SguONubk6Ph8=
Subject key identifier: D7:36:DF:9F:E0:CA:B6:63:F9:C3:0F:58:C1:31:EA:E9:72:7D:9E:CA
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584F119CE9938E01FFD91313C3C0
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e50eb706-0d5f-33b3-99e7-5d4d89f4fed4.roa
Signing time: Sat 05 Sep 2026 01:00:12 +0000
ROA not before: Sat 05 Sep 2026 01:00:12 +0000
ROA not after: Fri 04 Dec 2026 02:00:12 +0000
asID: 31898
IP address blocks: 152.67.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 26 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:11:9c:e9:93:8e:01:ff:d9:13:13:c3:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Sep 5 01:00:12 2026 GMT
Not After : Dec 4 02:00:12 2026 GMT
Subject: CN=d1ba9664-bdbf-4fc5-b140-02098d9036af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1a:0a:ac:2d:d8:b2:93:b7:c9:fd:66:3b:8e:
b6:6f:d2:4a:4a:7d:2c:2e:4d:fe:61:68:de:61:1d:
3c:9e:4f:cd:89:7f:a9:a1:19:89:cf:2f:49:8b:57:
37:18:34:43:e7:9e:7f:87:ee:69:03:06:65:95:96:
57:92:7b:52:f5:cc:09:ce:4e:1b:15:d4:a6:ac:20:
cb:0a:81:4c:72:45:41:91:23:27:6e:1c:9d:ee:e1:
48:92:58:ec:2f:d7:28:aa:88:da:3f:ae:21:45:1a:
5d:db:31:e9:f3:10:07:d0:e6:61:bb:9c:29:ba:11:
21:61:f4:ed:49:3e:69:b3:5b:9c:13:d0:98:db:08:
40:0e:09:3d:bc:46:a5:b0:f5:a1:0c:20:a3:13:bb:
e0:3f:4a:b8:b0:9b:60:b0:22:9a:d9:f2:ef:0e:02:
07:6d:77:9e:f1:ae:89:3f:be:08:53:4b:ce:2a:24:
6c:5c:29:2c:2e:9f:5e:0d:11:61:60:65:d4:32:6d:
59:dc:71:f5:50:73:46:b4:39:7d:d7:d6:be:98:23:
d8:1d:ed:91:35:1f:12:be:9e:b2:87:fa:af:c1:8f:
3c:7a:64:1b:b5:a6:11:b2:24:07:93:03:84:86:3d:
1b:c8:be:13:a3:c1:79:48:23:09:f8:cc:63:05:f8:
d4:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:36:DF:9F:E0:CA:B6:63:F9:C3:0F:58:C1:31:EA:E9:72:7D:9E:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/e50eb706-0d5f-33b3-99e7-5d4d89f4fed4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
152.67.224.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:2a:b7:37:1e:cd:ee:5a:c1:64:57:05:b4:33:7e:07:42:f4:
c0:9d:f5:6b:5a:5f:d7:4e:d0:07:21:6d:7b:e5:b8:01:b9:fa:
15:52:ca:71:63:26:08:8e:3e:44:24:b3:1c:7f:e3:c8:b2:d6:
09:5c:ff:9b:18:51:8f:67:04:65:52:3f:86:45:35:00:b7:9a:
2d:13:a0:35:d8:20:22:ce:a3:c4:5d:13:34:0a:0a:2d:5e:c8:
b0:3a:10:1f:a5:4e:2d:02:9b:56:01:56:2c:6a:61:4e:36:93:
12:cd:61:63:b9:6a:c0:cc:bd:78:80:50:e7:83:b1:9e:38:46:
71:a6:cf:5d:55:42:1c:6e:70:89:38:8e:88:4f:71:19:40:0a:
1d:6d:ba:f3:83:51:7c:92:3f:36:12:aa:5e:eb:65:89:34:8e:
4c:8a:5e:6c:67:c0:95:83:bf:34:6f:49:11:99:9b:49:ba:d9:
68:46:1c:a3:e7:29:5b:81:5d:72:c1:0e:36:16:4e:a5:bf:1e:
08:47:ee:ed:79:d9:06:93:4f:93:50:e5:cc:2e:9f:15:6e:db:
c6:68:91:00:3c:77:76:ed:52:11:d1:a4:05:6a:e3:d2:d0:86:
b0:0d:eb:ed:96:ee:71:a4:b5:f1:46:e9:37:eb:d1:3a:98:a5:
3e:0f:6d:fe
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnOmTjgH/2RMTw8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk
ZDFiYTk2NjQtYmRiZi00ZmM1LWIxNDAtMDIwOThkOTAzNmFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRoKrC3YspO3yf1mO462b9JKSn0sLk3+YWje
YR08nk/NiX+poRmJzy9Ji1c3GDRD555/h+5pAwZllZZXkntS9cwJzk4bFdSmrCDL
CoFMckVBkSMnbhyd7uFIkljsL9coqojaP64hRRpd2zHp8xAH0OZhu5wpuhEhYfTt
ST5ps1ucE9CY2whADgk9vEalsPWhDCCjE7vgP0q4sJtgsCKa2fLvDgIHbXee8a6J
P74IU0vOKiRsXCksLp9eDRFhYGXUMm1Z3HH1UHNGtDl919a+mCPYHe2RNR8Svp6y
h/qvwY88emQbtaYRsiQHkwOEhj0byL4To8F5SCMJ+MxjBfjUYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNc235/gyrZj+cMPWMEx6ulyfZ7KMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZTUwZWI3MDYtMGQ1Zi0z
M2IzLTk5ZTctNWQ0ZDg5ZjRmZWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFmEPgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJYqtzceze5awWRXBbQzfgdC9MCd9WtaX9dO0AchbXvluAG5+hVSynFj
JgiOPkQksxx/48iy1glc/5sYUY9nBGVSP4ZFNQC3mi0ToDXYICLOo8RdEzQKCi1e
yLA6EB+lTi0Cm1YBVixqYU42kxLNYWO5asDMvXiAUOeDsZ44RnGmz11VQhxucIk4
johPcRlACh1tuvODUXySPzYSql7rZYk0jkyKXmxnwJWDvzRvSRGZm0m62WhGHKPn
KVuBXXLBDjYWTqW/HghH7u152QaTT5NQ5cwunxVu28ZokQA8d3btUhHRpAVq49LQ
hrAN6+2W7nGktfFG6Tfr0TqYpT4Pbf4=
-----END CERTIFICATE-----
Generated at Wed Sep 23 21:26:01 2026 by rpki-client