
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ecee568d-eb00-478c-b486-db3f5d62cbf3/d931f223-a5e0-357c-9df4-646112c7d5fd.roa
File: d931f223-a5e0-357c-9df4-646112c7d5fd.roa (raw, json)
Hash identifier: NFHvpV9mxK4CFvI4AvPeZvXSIyZjeDLvwOt5m2dhDJw=
Subject key identifier: EC:1C:ED:57:AD:10:7A:DF:2B:76:00:B8:08:7B:97:1A:46:F4:2E:26
Certificate issuer: /CN=ecee568d-eb00-478c-b486-db3f5d62cbf3
Certificate serial: 010D0C9F4328584EA79C11A1C57FAC979F8C7540
Authority key identifier: DD:EC:C1:62:6B:16:28:4E:3F:9B:52:C6:83:04:C5:D6:75:80:A5:46
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ecee568d-eb00-478c-b486-db3f5d62cbf3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ecee568d-eb00-478c-b486-db3f5d62cbf3/d931f223-a5e0-357c-9df4-646112c7d5fd.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 26395
IP address blocks: 159.222.160.0/23 maxlen: 23
159.222.160.0/24 maxlen: 24
159.222.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ecee568d-eb00-478c-b486-db3f5d62cbf3/ecee568d-eb00-478c-b486-db3f5d62cbf3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ecee568d-eb00-478c-b486-db3f5d62cbf3/ecee568d-eb00-478c-b486-db3f5d62cbf3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ecee568d-eb00-478c-b486-db3f5d62cbf3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:9c:11:a1:c5:7f:ac:97:9f:8c:75:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecee568d-eb00-478c-b486-db3f5d62cbf3
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=3f9dc267-6795-49f8-a92f-1263f8c99dea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c7:20:b4:27:e9:83:20:91:ee:60:d3:80:14:
ed:28:dc:77:52:fb:83:57:07:7b:f0:ad:f8:86:bf:
bc:5f:24:00:d9:0c:8c:48:02:93:c0:24:1c:68:b9:
77:5e:13:53:cd:57:20:e1:c4:00:5b:fe:dc:d6:07:
d6:cc:7e:16:d6:56:d3:18:3e:bc:77:51:57:44:ec:
46:28:e2:18:5a:57:09:cf:d8:fe:7a:85:fb:75:a8:
a0:ff:a8:07:5d:27:6b:af:f0:5e:b2:45:97:19:82:
87:8d:10:50:5f:22:db:94:2b:56:28:f6:52:8a:05:
de:3f:6e:1f:4c:c4:38:3c:55:32:81:bb:a1:1b:de:
30:d6:1f:2a:4f:4f:6e:b2:eb:26:56:92:3a:02:a0:
b8:8c:ec:d7:00:18:67:03:0a:7b:38:16:e2:c4:f3:
b4:3e:4c:58:62:a4:62:73:95:af:4f:5d:ef:95:87:
54:46:69:4b:3d:3b:ce:31:81:b6:f6:5c:09:af:04:
06:42:a2:89:10:20:16:ce:69:20:45:9f:4b:8b:74:
8c:59:e1:ea:a8:ae:fa:97:36:3d:5c:8b:c2:bb:4f:
2c:fb:16:36:46:d6:b8:61:07:41:75:19:e8:e7:c2:
fd:a6:fd:b6:cb:f2:dd:36:11:3c:ac:62:09:c0:5c:
55:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:1C:ED:57:AD:10:7A:DF:2B:76:00:B8:08:7B:97:1A:46:F4:2E:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ecee568d-eb00-478c-b486-db3f5d62cbf3/d931f223-a5e0-357c-9df4-646112c7d5fd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ecee568d-eb00-478c-b486-db3f5d62cbf3/ecee568d-eb00-478c-b486-db3f5d62cbf3.crl
X509v3 Authority Key Identifier:
keyid:DD:EC:C1:62:6B:16:28:4E:3F:9B:52:C6:83:04:C5:D6:75:80:A5:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ecee568d-eb00-478c-b486-db3f5d62cbf3.cer
sbgp-ipAddrBlock: critical
IPv4:
159.222.160.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:4a:b1:70:71:44:cf:34:1e:5c:65:b0:94:d3:d8:4f:e7:70:
48:bd:42:cd:81:61:24:5a:c7:03:9b:53:98:27:f3:7c:4d:7d:
83:98:ce:0f:a0:02:51:06:bd:32:d5:1e:f8:47:8d:49:fb:f0:
de:e3:1b:ac:08:df:0b:ab:52:d8:88:58:31:0e:15:5f:cf:89:
80:6d:9f:c4:e8:85:f6:54:09:61:4d:bc:dd:ff:00:03:a5:20:
98:f7:03:73:22:08:40:ac:88:59:e0:51:3b:85:97:07:c0:6f:
2d:4d:ed:61:db:80:30:ec:dc:b3:5d:c8:77:9d:42:55:f4:8d:
c7:0f:b9:84:8c:51:df:cf:5c:27:54:52:ce:fc:15:ef:b9:cb:
a8:2a:a4:f0:5f:e4:0b:95:92:09:85:20:24:ac:d5:1c:c8:c5:
13:e6:5d:94:f6:75:a5:12:01:e6:49:e6:21:78:67:c6:09:91:
94:c8:8c:d0:3d:01:45:5e:32:8a:68:0d:ae:96:48:7f:33:73:
df:e9:98:e7:73:f0:f5:11:a2:b6:87:85:30:32:c1:a6:5b:2f:
65:b0:53:d9:88:6e:65:4b:cf:4a:15:5c:37:1b:ee:96:13:cd:
0c:13:59:c1:12:1c:f8:dd:37:59:68:db:b9:fa:3f:15:47:be:
0f:64:53:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:54:48 2026 by rpki-client