
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9d4d81ad-7416-3912-be9b-4b0cd2d1e461.roa
File: 9d4d81ad-7416-3912-be9b-4b0cd2d1e461.roa (raw, json)
Hash identifier: yHVillsypnqQeN1abyBp2rct1MmAhtAmHAJ5xPVJJEk=
Subject key identifier: 0E:A2:79:95:28:A8:72:0C:90:7F:73:28:4F:A8:7C:4A:FF:55:2D:D4
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584F0AA23584E342EEFCDD3812C0
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9d4d81ad-7416-3912-be9b-4b0cd2d1e461.roa
Signing time: Wed 02 Sep 2026 13:00:12 +0000
ROA not before: Wed 02 Sep 2026 13:00:12 +0000
ROA not after: Tue 01 Dec 2026 14:00:12 +0000
asID: 31898
IP address blocks: 157.137.254.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:0a:a2:35:84:e3:42:ee:fc:dd:38:12:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Sep 2 13:00:12 2026 GMT
Not After : Dec 1 14:00:12 2026 GMT
Subject: CN=45e89b6e-5f53-4473-ae86-b5afe266cd70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:9c:18:66:cc:a5:fe:c2:93:89:20:15:1f:69:
8d:02:af:f3:b1:04:49:2d:9d:07:5f:3e:c7:7b:0d:
64:80:bb:50:2e:00:c3:ed:51:4c:af:02:b7:80:71:
9d:b5:16:3b:83:94:28:5f:8e:e8:f3:c7:bc:64:4c:
2a:2b:69:c6:23:8e:5b:d7:ed:2d:db:43:b0:fa:a2:
c6:19:b7:b6:54:7f:fa:b1:c9:5d:8c:18:e1:58:c3:
20:b6:8b:3c:3b:dc:bd:8a:00:23:4e:94:37:94:fa:
3c:78:43:57:40:04:75:bf:f5:26:36:47:37:c4:30:
a1:36:f3:28:8c:55:31:06:87:81:05:67:0d:b1:bd:
ef:60:83:e7:3d:f6:2b:88:2a:7f:81:86:0a:74:0b:
24:87:9a:85:c1:39:5f:77:5a:4b:c8:e4:d0:73:1d:
d1:ee:ea:30:95:1b:99:a2:f1:c6:9e:ae:8e:91:1c:
e0:cc:df:b2:52:86:3c:65:45:f2:7f:de:ff:59:b9:
42:06:b7:1d:08:75:7f:ee:3e:d1:40:a3:d1:37:ad:
b5:a7:df:67:3b:5c:91:5e:5f:77:a6:39:64:fa:8b:
dc:f0:a9:00:d2:7b:d0:f7:a8:3f:75:39:b7:8b:d8:
27:b9:4f:3f:08:d2:c3:10:24:ef:b8:6e:e6:ab:2d:
03:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:A2:79:95:28:A8:72:0C:90:7F:73:28:4F:A8:7C:4A:FF:55:2D:D4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9d4d81ad-7416-3912-be9b-4b0cd2d1e461.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
157.137.254.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:08:16:af:60:de:26:2f:84:b6:2d:71:27:88:42:fb:a5:dc:
c5:a1:a6:0b:ab:66:69:b0:bc:79:81:b5:b4:97:ed:9d:d0:98:
70:99:8d:e0:2d:80:2d:b6:84:78:f6:31:b4:fc:06:3b:4a:91:
4c:82:86:2d:b9:5b:7a:e0:5a:ec:7b:32:36:48:18:48:3f:4b:
ad:54:bd:93:8d:75:67:48:ec:c6:c5:56:a0:11:e9:98:e3:88:
da:f0:f0:ac:8a:7c:e0:5a:98:33:8a:42:19:1d:76:01:84:4f:
af:d5:a2:89:7f:88:f0:ea:a3:26:c8:3e:a4:fa:0f:16:82:f3:
d5:29:0c:ca:9d:29:48:41:b5:d4:89:7c:b7:0e:f4:44:f5:4c:
2b:9a:ac:27:63:32:57:0d:bc:28:b2:d5:fa:9c:e7:f1:d8:4d:
9f:fb:f1:ef:9e:89:39:00:5c:6b:49:e9:9c:71:4a:03:a5:a6:
33:a5:e9:cf:31:4a:63:6f:2a:ba:73:c6:3e:5e:23:d7:e8:34:
92:ae:bf:e0:9d:a2:ef:da:2a:7d:bb:1b:ee:46:d1:90:8f:67:
46:4f:45:3e:ab:a0:22:f2:08:99:6d:73:48:9f:ad:ff:35:d9:
67:e0:ed:62:6c:f9:2f:7d:3e:b6:22:48:7d:bd:7f:f6:69:e3:
fa:78:66:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 14:08:57 2026 by rpki-client