
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f19ebe7a-f1d1-34fa-ad73-de900988d3a5.roa
File: f19ebe7a-f1d1-34fa-ad73-de900988d3a5.roa (raw, json)
Hash identifier: 7ZVs0vGHGWFOGJ8bcexS7fJwFXetdUgZX5b2Zt7tv3g=
Subject key identifier: BF:CB:97:EC:E9:A5:4F:D9:17:37:FD:A8:C8:7F:2A:96:AC:FB:5D:0C
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584D9E5000D252FDC57146CAD000
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f19ebe7a-f1d1-34fa-ad73-de900988d3a5.roa
Signing time: Sat 25 Apr 2026 01:00:24 +0000
ROA not before: Sat 25 Apr 2026 01:00:24 +0000
ROA not after: Fri 24 Jul 2026 01:00:24 +0000
asID: 31898
IP address blocks: 157.151.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:9e:50:00:d2:52:fd:c5:71:46:ca:d0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Apr 25 01:00:24 2026 GMT
Not After : Jul 24 01:00:24 2026 GMT
Subject: CN=2b4e32e6-64f7-4c94-adcf-8e793a72d58f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:17:3c:24:30:2d:8a:e1:3f:eb:45:b5:ef:67:
51:e2:09:ff:40:d1:94:42:d7:c3:9b:ed:0c:16:fe:
f5:d5:8c:ae:89:72:30:f2:4d:e3:17:66:55:65:81:
ac:7f:6a:7a:21:0a:7c:e9:8f:70:49:75:f8:08:ae:
4a:7e:12:f0:50:a8:17:4b:61:03:c9:38:ac:a8:bc:
da:70:5b:da:c2:4b:78:a0:eb:61:d4:4f:ec:3a:53:
54:1b:57:d2:ab:17:04:9c:ae:a7:e2:ab:7d:9c:4e:
f6:8d:2d:50:b0:25:09:b5:07:27:ce:4e:cf:ac:01:
dd:37:dd:7f:5c:b0:1a:56:ee:f1:5e:a6:bb:78:24:
25:9f:eb:b2:e5:5f:7d:81:2b:cb:c6:cc:cf:1d:68:
8a:23:eb:6f:b1:04:8f:5e:2c:79:54:90:7f:7c:11:
5d:4c:61:77:13:7d:55:20:bf:60:10:dd:b4:f5:3a:
40:15:89:34:3f:fc:db:ac:45:db:1d:39:06:18:ff:
45:0f:e5:f1:57:00:29:fa:dc:80:8c:85:9d:fc:95:
f5:9a:6c:8b:23:2f:15:3b:d5:5e:a3:a9:24:f4:18:
e6:22:7a:3e:25:45:7e:82:20:ea:01:b0:06:7d:67:
4d:f8:84:fa:de:ca:a9:71:e5:d8:fd:57:3a:a1:08:
22:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:CB:97:EC:E9:A5:4F:D9:17:37:FD:A8:C8:7F:2A:96:AC:FB:5D:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f19ebe7a-f1d1-34fa-ad73-de900988d3a5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
157.151.49.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:aa:49:e5:5e:6f:a5:93:d9:aa:00:61:04:b4:bb:8c:2e:dc:
4f:f3:36:3a:5e:93:34:07:28:5e:2c:ba:24:02:13:75:59:6b:
4c:33:c6:d4:53:9f:b5:5a:8f:aa:28:57:97:31:2a:35:14:66:
67:d1:17:ac:66:b2:41:a6:97:e5:26:1e:33:77:a1:26:8d:84:
8b:50:44:90:d0:65:1f:47:87:0f:04:37:9e:94:5f:d9:8a:93:
e4:c9:6e:7d:88:31:10:33:e5:b3:cb:9f:4d:01:ac:34:b4:69:
a5:38:ea:a0:d3:49:48:36:13:60:53:c6:9b:8f:90:39:3a:8b:
76:98:4c:c9:6a:03:9e:b5:ae:82:ad:19:d3:82:41:61:f5:97:
28:19:41:38:2a:ee:29:6a:40:a6:4e:d7:04:e1:bf:35:10:d3:
27:9a:69:52:08:f9:81:d9:38:4d:b3:11:84:5f:80:6f:20:61:
68:8b:58:05:14:9f:26:96:f0:20:6b:ae:ec:4d:1c:f6:2c:b6:
e6:47:ad:64:0a:26:b8:74:c7:20:54:23:f6:4a:c9:7b:ab:82:
36:53:b2:81:cb:bd:57:d5:21:46:49:a6:d2:b1:60:64:04:d3:
0d:44:dd:a8:d2:bd:bd:5f:3e:41:6b:70:5a:7c:6e:c8:6b:62:
5f:82:79:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:31:50 2026 by rpki-client