
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0e24e24b-ee77-39da-870b-5238e40967ff.roa
File: 0e24e24b-ee77-39da-870b-5238e40967ff.roa (raw, json)
Hash identifier: WT3OG3Hypsj04ATDvVQuz2H7namdELJMytC4Z0MSqhY=
Subject key identifier: EA:E7:CE:3F:19:70:64:50:DB:33:34:F6:ED:14:AF:F0:D5:97:C8:21
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584E078F17746656473F159A7980
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0e24e24b-ee77-39da-870b-5238e40967ff.roa
Signing time: Mon 01 Jun 2026 17:47:29 +0000
ROA not before: Mon 01 Jun 2026 17:47:29 +0000
ROA not after: Sun 30 Aug 2026 17:47:29 +0000
asID: 31898
IP address blocks: 148.116.32.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:07:8f:17:74:66:56:47:3f:15:9a:79:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Jun 1 17:47:29 2026 GMT
Not After : Aug 30 17:47:29 2026 GMT
Subject: CN=3ab399de-3159-4f15-ac1d-6222bcddcecf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:99:a2:8a:e3:3c:6a:6f:13:97:a3:47:da:c2:
e9:7c:45:e2:c0:f3:94:5d:1c:a0:36:ed:a6:14:3f:
5d:4c:5c:71:3b:f6:5b:8f:40:11:92:dc:2f:85:d2:
37:c1:f7:93:bf:91:7b:8d:fe:ae:2a:73:d0:32:0b:
22:b8:f8:26:89:f5:ec:b7:9e:61:a9:19:ff:99:00:
1f:ae:bc:56:04:ae:29:fe:2b:8e:82:e2:1d:7b:8c:
32:74:28:63:99:65:bb:7a:4f:49:ae:5c:7d:e5:66:
0a:e6:a3:31:c9:23:a6:c6:10:eb:e9:92:b9:15:e4:
2c:31:cf:e4:c9:20:74:c8:08:4f:da:2c:08:23:9a:
a0:11:ea:3a:36:fa:ab:fa:5c:fb:27:3c:16:2f:30:
9c:bb:06:ea:45:d6:53:26:9e:e2:32:b7:ff:41:61:
fc:61:4c:fb:85:d3:a8:14:32:50:37:48:41:dc:ba:
3c:13:22:f5:2e:41:7b:9f:cc:e8:08:ce:69:1d:11:
73:b6:08:cd:ef:ec:48:e0:ce:82:b8:cc:18:26:86:
e2:63:61:33:93:0e:39:28:ae:f9:95:3a:71:c8:be:
56:d1:d6:57:2c:af:10:56:b7:54:44:34:3e:82:79:
ec:04:5a:36:ca:d3:dd:71:5f:d0:3d:9e:ad:be:96:
74:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:E7:CE:3F:19:70:64:50:DB:33:34:F6:ED:14:AF:F0:D5:97:C8:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/0e24e24b-ee77-39da-870b-5238e40967ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
148.116.32.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:2f:e0:6e:20:5b:31:89:ce:78:e9:c8:a0:81:3e:06:44:ee:
dc:85:b0:8e:ff:80:c7:01:dd:64:fc:e8:eb:9d:3d:fd:c0:7d:
4e:a4:d0:cc:8a:89:9e:b1:0f:20:b3:0d:48:ea:33:05:20:49:
63:97:9d:21:24:a3:7c:77:41:8b:72:54:b9:19:03:bc:cb:52:
79:7d:43:aa:af:81:49:4c:fe:1a:87:bc:6a:9c:ea:c5:23:27:
37:69:c1:3e:8a:27:30:a8:9f:d5:38:d1:40:d4:4a:55:a4:37:
9d:8a:41:7e:6c:e4:08:e1:4a:6c:34:96:90:63:a7:63:25:1c:
45:b3:b3:10:bc:b7:25:a9:8c:be:8b:99:20:42:cb:f6:5d:ab:
2e:3e:9f:ca:1c:58:79:74:2c:6c:b9:04:54:72:ba:a2:c2:e6:
70:04:70:91:9d:77:39:9c:12:07:d6:38:3a:f0:60:31:d3:e6:
50:24:d9:af:52:6d:f8:06:f8:5e:7d:db:09:e7:6a:46:95:62:
76:c9:02:43:0e:e2:5b:d9:d9:9f:7d:c3:21:65:4e:d8:24:a8:
a6:e2:97:a6:6e:b5:5b:05:58:f0:96:17:e0:1e:e3:fa:4f:78:
85:79:1e:0a:59:b5:1c:40:11:d7:23:84:19:15:f7:13:82:8a:
1b:8b:f6:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:55:36 2026 by rpki-client