
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/5e820769-a2e1-37f9-ba8b-ea8c7cf743fe.roa
File: 5e820769-a2e1-37f9-ba8b-ea8c7cf743fe.roa (raw, json)
Hash identifier: 7xAiT5ywrKwr4rksv1oQEP1DyzPYrMMbNTI0AiWa8fo=
Subject key identifier: FE:20:A5:04:EF:6B:55:D3:EB:62:52:2D:D6:34:CD:AB:B1:A4:2B:58
Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b
Certificate serial: 010D0C9F4328584EA787570F37F43F8052C3EBC0
Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/5e820769-a2e1-37f9-ba8b-ea8c7cf743fe.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 6391
IP address blocks: 97.107.176.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:87:57:0f:37:f4:3f:80:52:c3:eb:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=dbd2be4a-26e0-46ab-a096-44bc90114a87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:20:5b:52:ce:6a:d4:43:28:f4:bd:ed:00:d1:
6b:ec:5d:ae:d9:a8:5a:b2:11:c7:a8:cd:33:f4:1f:
fa:29:4d:8f:53:fd:93:d8:f6:50:e2:1e:6c:26:c9:
1b:a2:7a:23:54:fd:f3:98:b9:fb:d1:9c:0b:d3:8f:
fe:aa:74:46:1a:55:9f:d0:8c:f2:1f:2a:c2:00:cd:
fa:78:98:d2:b6:7b:e1:56:8e:d7:7e:e6:de:5c:f0:
2b:7a:9d:4b:22:74:48:d7:a5:7f:41:49:9a:50:09:
39:a1:23:4f:89:37:e5:bb:24:6c:c0:69:43:ea:c2:
62:07:19:ac:3b:95:30:b4:2d:3a:e2:e7:d0:b3:26:
ef:12:44:99:b8:7e:1d:a0:68:ed:e7:2f:c9:c6:58:
71:ba:01:5c:0e:67:d3:74:49:84:98:5e:d7:dd:c8:
99:0e:2d:02:bb:69:4a:52:3b:a4:16:62:bc:7e:d3:
e4:4f:33:b1:f6:61:0e:89:39:81:cc:a7:5d:fe:58:
92:af:2a:2a:95:c9:23:08:8c:e3:c1:6b:e2:73:b0:
5c:18:64:45:dc:bc:33:0f:1b:db:81:e6:6c:78:3f:
12:75:c1:39:17:2e:a6:3b:0c:bb:d6:50:cf:a6:f4:
45:b1:17:2a:49:c2:9a:8c:59:83:51:d8:30:4a:90:
30:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:20:A5:04:EF:6B:55:D3:EB:62:52:2D:D6:34:CD:AB:B1:A4:2B:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/5e820769-a2e1-37f9-ba8b-ea8c7cf743fe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl
X509v3 Authority Key Identifier:
keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
sbgp-ipAddrBlock: critical
IPv4:
97.107.176.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:1f:1e:f6:30:2c:e5:c9:22:44:5d:86:da:a5:c2:fd:73:05:
84:1f:45:ef:1f:b3:14:27:ca:9c:b3:9d:a1:7f:35:bd:21:cf:
de:98:b4:94:9b:8b:98:f8:62:67:a1:fe:c5:74:81:1c:96:d8:
30:33:f6:4b:e4:4a:ae:21:53:39:9c:1d:1f:45:9a:e6:bf:d2:
20:38:6f:4d:08:17:66:13:89:57:f6:20:b5:5a:23:e1:66:1e:
a3:46:36:57:d0:2a:5f:b9:cc:5e:fb:e7:05:e4:1d:55:44:f6:
f3:34:80:19:76:9f:17:99:00:b1:6c:3d:13:0d:18:6b:fc:16:
9a:c3:8f:53:f0:67:d6:60:d2:38:b9:4d:e2:ab:4d:13:16:95:
f2:6a:95:08:54:37:f5:8a:d1:9d:7e:27:70:76:4b:07:a2:f9:
c6:8f:4e:b2:3d:bc:40:11:a8:34:8d:8a:7d:d8:cc:6e:6a:bf:
28:de:c8:f5:65:9e:47:db:38:83:6a:88:29:b4:73:31:7b:cc:
17:3f:88:a5:be:34:b2:b6:d8:51:d6:a1:26:49:ab:84:41:81:
e9:27:98:3f:ce:71:d5:df:ba:e8:18:62:0d:f5:74:84:02:be:
b4:85:e9:23:29:79:fc:9c:fe:8b:a9:1c:59:83:80:b1:dd:0e:
27:24:5e:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:20:21 2026 by rpki-client