
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4ea28e87-a5d3-3935-b45b-5f9c92f2d0bc.roa
File: 4ea28e87-a5d3-3935-b45b-5f9c92f2d0bc.roa (raw, json)
Hash identifier: 1ipyg25iYyCJn3uOXDHBk5muL6Ozb9MoCeYMH4lFep4=
Subject key identifier: 9D:66:E3:B3:20:65:40:18:77:B7:07:50:7A:95:70:C3:C0:67:95:0E
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584F0D6CF613816DB930093DF440
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4ea28e87-a5d3-3935-b45b-5f9c92f2d0bc.roa
Signing time: Thu 03 Sep 2026 13:00:12 +0000
ROA not before: Thu 03 Sep 2026 13:00:12 +0000
ROA not after: Wed 02 Dec 2026 14:00:12 +0000
asID: 31898
IP address blocks: 159.54.128.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 22 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:0d:6c:f6:13:81:6d:b9:30:09:3d:f4:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Sep 3 13:00:12 2026 GMT
Not After : Dec 2 14:00:12 2026 GMT
Subject: CN=7f42b6b9-ef7c-4060-baaa-05de4df00161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ff:d6:28:1c:02:03:78:62:01:df:7c:a6:2d:
5c:93:a5:c1:76:f0:d7:e5:bb:39:53:f1:05:9f:d8:
8e:76:98:3d:ca:e4:cb:45:fc:22:75:38:05:ed:32:
39:69:b5:a2:1b:c1:c0:aa:91:1e:ef:32:bc:97:26:
e5:3d:1c:3a:92:05:ba:1c:b4:63:a2:c8:af:2e:6c:
d4:fc:91:5c:54:5e:15:6e:bf:d1:e9:15:8b:40:cd:
8f:47:8d:ca:b3:46:1f:fb:60:22:34:95:db:39:2b:
4d:ac:c7:3d:a7:b0:ed:0b:d8:98:b3:ea:25:0a:99:
12:08:0f:07:1f:5e:34:ed:d9:ef:6b:28:92:cc:09:
1c:6a:52:f9:b0:89:2a:83:35:dc:fc:e6:98:57:e5:
75:53:e9:22:5a:78:4b:3a:77:f5:8b:0b:b4:92:dd:
88:47:8a:9f:bc:04:c8:82:0f:37:2f:df:d6:26:d0:
f2:1f:68:4a:fc:99:fd:da:ee:53:7c:4f:ed:ee:11:
fa:d8:37:84:81:91:76:d6:f7:61:57:44:60:63:31:
3b:6c:b9:0f:de:d9:50:bf:79:66:47:11:06:5d:eb:
a2:d2:57:38:1b:0d:8f:c0:bc:e0:43:5d:2b:dd:28:
02:dd:a5:cd:fb:e7:af:f4:ca:f6:2c:55:0e:4a:03:
fe:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:66:E3:B3:20:65:40:18:77:B7:07:50:7A:95:70:C3:C0:67:95:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/4ea28e87-a5d3-3935-b45b-5f9c92f2d0bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
159.54.128.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ab:4a:b2:eb:c9:2c:b8:19:0f:94:3c:48:0a:d3:cc:aa:78:fd:
97:48:32:c0:dd:51:ca:fc:09:51:36:90:82:a1:e3:b2:64:b2:
53:f1:e1:76:2d:84:a7:16:fe:d6:3f:c5:f6:6d:02:fb:01:39:
bc:5a:86:08:d7:db:c1:58:f3:45:ac:f3:eb:3f:47:b0:91:d5:
dd:61:26:28:ad:49:a1:20:79:b1:0a:5c:e9:77:53:e3:d4:1e:
15:5a:0b:cb:7d:44:f5:a3:e0:8d:a6:54:5c:74:18:ec:99:2b:
2a:fc:81:d5:b6:9f:90:ef:35:f5:ba:32:10:53:c2:af:df:fc:
1d:6a:f9:ac:3e:1c:63:66:16:70:f9:8d:9b:6c:fa:d6:3b:a2:
3e:54:cb:6a:1f:86:d8:43:d8:e8:5f:0a:d2:0b:64:b1:18:74:
76:1a:0f:c8:25:26:22:3b:d9:45:8d:8b:dd:00:4f:5f:45:32:
ab:b4:d2:2d:a0:4b:e2:f7:cb:f2:dd:a4:6b:46:e8:00:a7:86:
a6:73:54:7d:80:78:25:02:f6:22:b9:a4:12:06:59:99:60:56:
56:bc:b7:a7:64:e2:11:94:46:2c:38:8b:65:49:3f:37:65:ec:
98:d0:18:d7:b0:da:c6:8d:44:72:78:a8:9a:90:ba:da:e8:ee:
29:14:ea:00
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8NbPYTgW25MAk99EAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI2MDkwMzEzMDAxMloXDTI2MTIwMjE0MDAxMlowLzEtMCsGA1UEAxMk
N2Y0MmI2YjktZWY3Yy00MDYwLWJhYWEtMDVkZTRkZjAwMTYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh//WKBwCA3hiAd98pi1ck6XBdvDX5bs5U/EF
n9iOdpg9yuTLRfwidTgF7TI5abWiG8HAqpEe7zK8lyblPRw6kgW6HLRjosivLmzU
/JFcVF4Vbr/R6RWLQM2PR43Ks0Yf+2AiNJXbOStNrMc9p7DtC9iYs+olCpkSCA8H
H1407dnvayiSzAkcalL5sIkqgzXc/OaYV+V1U+kiWnhLOnf1iwu0kt2IR4qfvATI
gg83L9/WJtDyH2hK/Jn92u5TfE/t7hH62DeEgZF21vdhV0RgYzE7bLkP3tlQv3lm
RxEGXeui0lc4Gw2PwLzgQ10r3SgC3aXN++ev9Mr2LFUOSgP+OQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ1m47MgZUAYd7cHUHqVcMPAZ5UOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNGVhMjhlODctYTVkMy0z
OTM1LWI0NWItNWY5YzkyZjJkMGJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFnzaAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKtKsuvJLLgZD5Q8SArTzKp4/ZdIMsDdUcr8CVE2kIKh47JkslPx4XYt
hKcW/tY/xfZtAvsBObxahgjX28FY80Ws8+s/R7CR1d1hJiitSaEgebEKXOl3U+PU
HhVaC8t9RPWj4I2mVFx0GOyZKyr8gdW2n5DvNfW6MhBTwq/f/B1q+aw+HGNmFnD5
jZts+tY7oj5Uy2ofhthD2OhfCtILZLEYdHYaD8glJiI72UWNi90AT19FMqu00i2g
S+L3y/LdpGtG6ACnhqZzVH2AeCUC9iK5pBIGWZlgVla8t6dk4hGURiw4i2VJPzdl
7JjQGNew2saNRHJ4qJqQutro7ikU6gA=
-----END CERTIFICATE-----
Generated at Sun Sep 20 21:55:25 2026 by rpki-client