
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0d5cd8bf-b9ce-3ef5-9611-a6fccc7db4b7.roa
File: 0d5cd8bf-b9ce-3ef5-9611-a6fccc7db4b7.roa (raw, json)
Hash identifier: KrM1Qfn7xB3Btqeg1FrxeOB2wr3U9JnZpWFodAmeswk=
Subject key identifier: 53:9C:7A:B7:BE:1D:47:7C:61:F0:1D:03:BA:54:3E:A3:48:C9:F6:BF
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584F0ED231212FA8AB5C3362D8DC
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0d5cd8bf-b9ce-3ef5-9611-a6fccc7db4b7.roa
Signing time: Fri 04 Sep 2026 01:00:12 +0000
ROA not before: Fri 04 Sep 2026 01:00:12 +0000
ROA not after: Thu 03 Dec 2026 02:00:12 +0000
asID: 31898
IP address blocks: 139.177.96.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:0e:d2:31:21:2f:a8:ab:5c:33:62:d8:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Sep 4 01:00:12 2026 GMT
Not After : Dec 3 02:00:12 2026 GMT
Subject: CN=58f7f031-e091-487a-915d-381fbcf918ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:66:88:ac:1a:75:06:13:da:83:63:28:52:cc:
19:67:16:ad:a7:44:8d:c1:ef:39:87:4b:c5:29:98:
38:71:3f:e8:85:5c:bb:b2:eb:b3:4e:8f:6f:7a:4c:
e6:9c:7c:54:99:cb:05:67:0e:a2:fd:f3:06:20:3b:
c9:32:81:6c:2f:cb:fd:10:d7:7b:df:3d:b1:b4:e0:
f5:ac:7f:f8:33:c1:0b:18:ae:e5:73:a4:0b:23:8b:
87:10:5d:0a:25:d9:1c:5d:cb:e1:d6:a3:be:94:49:
7b:0c:2c:cf:e9:7f:e9:27:e6:81:b0:6f:8e:c4:02:
49:ee:9f:ef:d2:0a:f2:2f:aa:f7:03:42:11:df:14:
8f:5e:23:ab:9b:5b:99:be:45:f4:ca:ae:f5:b2:df:
d4:f4:d7:fb:a8:9b:45:a1:3e:59:a1:5d:aa:80:c0:
3e:89:9a:16:0a:e1:de:7e:cf:58:1d:1d:12:55:39:
8a:43:c5:ae:4d:59:4a:a3:08:bd:1b:05:98:cd:fb:
6e:23:df:75:ce:6b:36:cc:3a:4d:60:08:05:d3:1b:
48:7b:78:a9:64:e1:36:09:7d:17:00:45:1a:bb:a0:
3d:60:31:f2:6d:45:bb:13:fe:19:d1:15:aa:12:29:
85:62:cb:a2:fb:2b:4c:51:c0:21:a0:bc:15:8d:07:
82:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:9C:7A:B7:BE:1D:47:7C:61:F0:1D:03:BA:54:3E:A3:48:C9:F6:BF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0d5cd8bf-b9ce-3ef5-9611-a6fccc7db4b7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
139.177.96.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:a4:a3:a8:99:94:38:41:d4:f5:63:cd:6d:d1:77:12:a6:14:
33:bd:4b:b7:83:97:82:8e:c7:e7:a0:de:cf:c4:54:58:32:41:
f7:f8:86:a9:03:4d:11:e0:e6:09:e1:89:fb:e9:b4:aa:97:9f:
62:2a:c5:85:53:d6:9c:30:06:5b:8c:ea:d7:d3:44:73:5c:eb:
64:0c:7e:25:63:56:72:28:9a:d0:2d:7f:7f:4a:41:14:16:84:
0d:db:cb:d2:a3:a8:bd:b5:01:a2:cf:e3:d1:2c:ab:30:45:07:
2b:68:85:12:65:40:18:cf:27:8f:e5:39:be:92:b3:e8:f6:75:
46:2a:9b:be:44:ac:99:96:b5:10:b4:e8:a3:c9:d3:47:ad:a0:
e2:96:34:ae:11:5c:ff:50:15:54:f4:53:1d:f1:39:a5:3b:5c:
c3:7c:66:e3:6c:77:c0:56:e3:5e:2e:17:94:e2:b7:f1:6b:91:
56:1d:dd:5d:b2:ef:bf:5a:07:8b:cb:54:66:0b:26:c8:b4:10:
8b:5f:30:68:cc:bc:c9:72:b6:b4:ee:aa:7b:29:e9:58:50:60:
7f:81:69:7a:50:91:21:27:88:6a:a3:0e:72:b1:8c:94:6d:33:
b4:39:9e:0c:85:82:52:3f:9c:a7:42:0e:6e:80:46:07:39:f5:
c1:5a:64:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:57:54 2026 by rpki-client