
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/87d7fdf1-6104-31af-b7e7-145ec462444b.roa
File: 87d7fdf1-6104-31af-b7e7-145ec462444b.roa (raw, json)
Hash identifier: GcelexdjkCb8FqkxAjQZIAS/DhHDlJILnhQykqhglp4=
Subject key identifier: 05:22:8C:0D:E6:E4:50:10:F1:E4:94:7B:46:58:58:A5:F1:EB:8C:C0
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584D87FA8F439B8E5D94F10EC4B0
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/87d7fdf1-6104-31af-b7e7-145ec462444b.roa
Signing time: Fri 17 Apr 2026 01:00:27 +0000
ROA not before: Fri 17 Apr 2026 01:00:27 +0000
ROA not after: Thu 16 Jul 2026 01:00:27 +0000
asID: 31898
IP address blocks: 158.247.108.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:87:fa:8f:43:9b:8e:5d:94:f1:0e:c4:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Apr 17 01:00:27 2026 GMT
Not After : Jul 16 01:00:27 2026 GMT
Subject: CN=47fee59d-6fb4-4f67-88a3-5cd259628f2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9c:ea:5b:25:f9:bf:8c:3c:4d:88:bc:31:72:
0c:f6:ce:c9:55:6e:4f:e6:6b:81:ad:50:16:d8:e6:
bc:ce:7d:c1:c8:dc:4b:44:44:1b:37:57:e4:38:55:
a3:7a:66:06:d0:b1:28:8e:46:50:3d:df:77:b4:93:
88:ef:91:6c:f1:5f:bf:11:2b:f8:5d:c1:02:1e:c6:
ee:9a:c7:5d:58:f1:8f:f0:48:a7:5b:44:7a:b2:cd:
7f:0d:83:16:36:03:f0:f1:c1:ee:02:27:db:7c:36:
4c:73:23:66:69:2a:ee:cf:e0:f7:96:78:65:cc:6b:
eb:ea:96:b2:c8:ea:b2:da:ce:99:c4:79:4e:21:7c:
fc:c1:da:88:4f:0a:ef:b0:63:e1:55:ce:a6:06:aa:
6b:29:ce:27:7b:74:a0:0b:de:cb:d2:11:08:9a:4c:
72:87:81:43:03:f5:a3:30:13:ce:1e:38:2a:3a:e5:
1f:8b:eb:14:ff:9e:12:83:78:62:4f:9d:e7:0f:95:
99:e2:50:72:56:a1:b9:69:c8:5b:9a:1d:42:62:46:
1e:1f:8c:5d:08:2d:f5:9b:45:50:ac:d3:72:5f:31:
fa:fc:da:88:4b:a0:57:ae:f8:a9:ee:99:ed:79:a6:
dc:0d:a1:c7:17:e5:81:51:06:65:27:f2:57:df:39:
66:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:22:8C:0D:E6:E4:50:10:F1:E4:94:7B:46:58:58:A5:F1:EB:8C:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/87d7fdf1-6104-31af-b7e7-145ec462444b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
158.247.108.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:82:c0:88:4c:0a:91:e8:56:dc:bc:08:2d:92:a8:74:8a:e5:
26:af:ef:2b:cd:3e:2d:6a:55:50:c9:e7:8e:65:35:8a:32:41:
d9:9d:21:a1:54:0e:02:4d:68:9e:4b:20:1b:78:55:90:8c:f2:
a0:4b:aa:fe:80:e6:52:bc:4a:df:1c:5e:94:27:f2:4b:65:66:
58:61:22:4e:94:4f:5f:ca:ff:0e:37:cc:d2:89:7f:31:d1:73:
57:24:e8:61:f3:c4:49:80:72:89:67:65:4d:d3:37:13:5f:8e:
eb:ff:89:9c:4a:f2:d7:cf:bf:e7:4c:65:c5:0f:75:23:17:ef:
26:8e:d3:53:ac:54:2f:bd:d2:dc:d5:b5:96:f4:e8:c2:62:97:
3e:a6:2c:92:0d:0e:c9:bd:c4:46:7f:4c:27:39:f1:59:73:c7:
be:2a:78:e7:91:6f:da:12:86:05:a1:18:67:33:cb:c9:fb:73:
65:43:32:88:2c:1e:3e:46:16:7a:dd:f3:10:1b:48:26:10:8c:
63:20:4f:b5:8d:1e:9e:85:bb:49:29:0b:55:0e:af:94:fc:18:
e7:c2:d7:c9:25:71:bb:7a:27:87:38:c4:50:4a:cc:cf:ba:70:
5a:1e:e6:29:66:fd:0f:8c:55:c5:50:60:f0:4f:09:76:4b:ae:
10:18:10:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:42:19 2026 by rpki-client