
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/74b80e32-2028-3837-a19e-a86bbffc7ae0.roa
File: 74b80e32-2028-3837-a19e-a86bbffc7ae0.roa (raw, json)
Hash identifier: G4fqRGfleerwOMAQ65OIa+xveZ7ZeknsUMtjDaaQWpQ=
Subject key identifier: D0:DB:95:71:4C:6D:D0:EE:89:AE:42:04:73:6D:3E:F5:C9:73:4E:9D
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584F10379D74850D647336865C40
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/74b80e32-2028-3837-a19e-a86bbffc7ae0.roa
Signing time: Fri 04 Sep 2026 13:00:12 +0000
ROA not before: Fri 04 Sep 2026 13:00:12 +0000
ROA not after: Thu 03 Dec 2026 14:00:12 +0000
asID: 31898
IP address blocks: 161.33.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:10:37:9d:74:85:0d:64:73:36:86:5c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Sep 4 13:00:12 2026 GMT
Not After : Dec 3 14:00:12 2026 GMT
Subject: CN=379d0101-f990-41a8-97ae-5eddd5a1ea6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6c:7c:59:0f:1b:f5:8e:f9:83:ef:66:fa:da:
6b:68:15:a5:37:5d:d2:2c:43:39:56:59:81:fe:c4:
65:c1:55:b3:b4:b2:55:e3:c3:76:86:21:5e:a3:1a:
9f:cf:5a:bd:34:de:1d:8d:17:5f:33:90:19:3e:cb:
f8:bf:4d:67:03:68:4c:e3:48:40:35:28:1c:73:7b:
30:9f:31:52:17:f0:0e:13:26:34:e9:8f:e8:21:af:
4e:7d:0c:b8:3d:a4:c9:23:f7:18:68:40:4b:d9:50:
8a:e9:ff:92:16:ca:d3:2e:c8:cd:5a:01:ef:5b:a8:
d0:7a:70:94:b8:98:09:6d:d2:f2:ff:70:93:5b:b5:
2b:9c:bd:ca:f9:99:12:28:84:71:3e:a5:de:26:03:
7e:69:a5:ed:85:88:f7:fa:9a:56:29:15:1f:7f:34:
30:c7:5c:22:ee:07:9c:05:a6:fb:a4:7a:5a:71:6a:
f5:33:0c:91:c9:45:3b:d0:18:de:63:b2:4f:37:64:
64:0a:d3:42:d4:77:2e:90:04:ac:40:55:14:b4:34:
56:c7:e5:f5:6a:79:76:a2:2b:64:8e:83:96:2c:7c:
fa:e0:a1:b0:43:3c:c7:37:4b:f5:86:c7:e6:87:fd:
21:85:22:bf:5a:1d:8f:19:e5:f3:76:d6:67:cd:8b:
08:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:DB:95:71:4C:6D:D0:EE:89:AE:42:04:73:6D:3E:F5:C9:73:4E:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/74b80e32-2028-3837-a19e-a86bbffc7ae0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
161.33.255.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:ce:83:cb:a0:9a:3e:0c:81:dc:fb:fd:d3:5b:1a:60:75:44:
33:07:b3:c2:6c:00:83:88:f6:68:98:97:7d:b1:ce:dd:8c:70:
60:ef:c1:6d:63:02:3e:62:6a:4f:02:d1:40:09:5e:f0:0e:0a:
9d:8c:44:cd:c2:fb:6c:f6:f6:99:7c:96:72:43:9b:71:0f:76:
5f:27:a8:57:4b:6f:86:3c:0d:5b:bd:e4:0d:f6:3a:48:de:c8:
3b:b0:a5:7d:a6:e7:d8:75:d3:85:6c:18:c0:e1:4f:4e:92:01:
6e:c7:7e:18:e6:fc:9c:0a:10:e2:18:f4:9f:65:91:c9:bf:c3:
99:5e:5a:5b:bf:6d:3c:04:8a:bd:79:ea:f5:07:78:6b:2e:df:
3c:83:7f:5d:35:62:7f:5f:85:f1:9c:31:c3:b4:35:49:5c:9c:
eb:8c:94:2d:ea:18:9c:65:6a:f3:e3:39:9e:11:56:60:98:10:
de:f4:80:f5:49:06:a8:f0:8a:e0:4a:9c:cb:49:64:3e:92:57:
0d:0e:1c:9e:6b:a5:6e:1c:8d:e4:6a:14:e7:39:9d:33:d5:24:
42:ea:f3:f3:ec:6c:a9:c9:0c:55:2a:ac:57:25:3f:77:3f:4a:
a1:89:31:64:a5:dd:a0:59:08:a2:af:28:ed:b7:75:53:e7:75:
2c:0e:fc:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:42:48 2026 by rpki-client