
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/292c398a-66e0-35f6-9a9a-b08cbabfa581.roa
File: 292c398a-66e0-35f6-9a9a-b08cbabfa581.roa (raw, json)
Hash identifier: XH0u/uhZb1a7RFkOVLO19K4Bew/T2N6LkB76lk0ZMDY=
Subject key identifier: 54:1F:B8:4B:93:F9:2C:A4:9E:65:44:41:B5:CC:68:13:55:12:91:D8
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584F20F7CFFA44CF5223A48455C0
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/292c398a-66e0-35f6-9a9a-b08cbabfa581.roa
Signing time: Thu 10 Sep 2026 13:00:12 +0000
ROA not before: Thu 10 Sep 2026 13:00:12 +0000
ROA not after: Wed 09 Dec 2026 14:00:12 +0000
asID: 31898
IP address blocks: 157.137.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:20:f7:cf:fa:44:cf:52:23:a4:84:55:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Sep 10 13:00:12 2026 GMT
Not After : Dec 9 14:00:12 2026 GMT
Subject: CN=764c3004-6bd4-45c0-9d94-707f66d71be9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5c:b1:d4:a2:cd:01:e4:2f:aa:99:0c:d1:74:
82:71:63:e5:24:85:2f:bd:45:40:6c:2d:64:d5:57:
b7:fe:13:bd:7b:c3:1e:cf:d6:27:8d:4c:80:27:de:
e4:5a:3e:5d:4e:c4:a5:5d:0a:54:a7:2d:02:f7:f1:
4f:b9:47:58:f5:4b:25:7d:b8:32:46:35:ec:ac:15:
16:01:9e:26:19:9d:7e:88:3c:9c:c6:f8:46:f9:fb:
16:75:83:59:db:3d:50:53:2f:ef:1a:71:58:76:f1:
90:bb:e4:87:ba:44:b8:bf:bf:20:04:25:49:0b:33:
f4:7c:06:95:34:ab:31:c0:31:d6:92:8e:6f:15:90:
62:09:9b:4d:62:66:28:a1:c1:19:c0:6e:cc:f4:e0:
8e:b8:f0:98:9b:cc:32:6a:90:e2:e0:fd:6b:2a:7b:
44:5e:57:01:22:08:c5:6c:15:6a:84:05:bd:75:0b:
71:9d:07:11:1d:c6:ac:34:ae:d0:46:d0:b4:f8:3d:
c2:93:c5:0d:1a:d6:19:c1:98:47:ed:7b:91:7f:c6:
5e:71:a1:63:58:bd:fd:c9:59:aa:e5:2e:35:0a:96:
bb:4c:00:86:c9:75:31:0b:26:f9:c8:8d:70:bb:d1:
cb:84:92:fa:fd:5a:54:62:54:d3:b2:d9:f3:50:ce:
45:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:1F:B8:4B:93:F9:2C:A4:9E:65:44:41:B5:CC:68:13:55:12:91:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/292c398a-66e0-35f6-9a9a-b08cbabfa581.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
157.137.247.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:e0:bb:29:b5:fe:92:78:59:1a:b9:dc:42:11:44:66:a7:77:
da:af:03:93:19:fb:ea:9f:e1:f3:dc:d8:62:00:c7:3d:46:c5:
47:c0:04:66:e7:03:e9:e4:c6:e2:5d:9c:b3:52:41:e8:89:25:
f5:86:c8:5f:75:39:dc:41:9d:92:34:a0:73:ee:df:75:b4:d5:
77:20:15:f0:d5:fb:79:15:35:2d:27:c1:78:be:3a:17:a7:8e:
b2:98:e0:40:5a:76:e7:64:87:b9:4c:3d:fe:2f:b6:cf:21:30:
64:86:1e:ff:fd:ed:03:85:f0:07:13:5d:18:03:11:25:05:c3:
96:72:28:4f:ab:9a:2e:b0:aa:f3:77:b1:27:f6:86:a9:e7:65:
3d:38:40:98:ba:17:71:df:fa:08:8b:13:b3:33:65:18:87:77:
99:5a:99:0a:0b:ea:c9:4a:d4:f0:49:d8:b8:4d:fe:2f:d5:d1:
1b:f2:d7:f2:c7:bc:18:3d:c0:79:c9:3c:7a:ed:7b:27:0d:ff:
49:44:c5:7f:4e:9f:7e:51:e5:8e:b4:b7:81:57:03:79:55:16:
31:d9:31:f1:17:1d:93:30:08:3c:80:5e:71:a2:0f:aa:13:fc:
a8:4a:88:31:d3:67:4c:ee:a1:4e:fd:68:32:bd:17:09:8e:36:
15:fc:df:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:16:44 2026 by rpki-client