
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/9f9901be-486a-39f7-82b9-2db378019951.roa
File: 9f9901be-486a-39f7-82b9-2db378019951.roa (raw, json)
Hash identifier: 9yzV5zHz56HQzvfHIkBw4ivSVeyk2iLkr1xSwArPIF0=
Subject key identifier: AC:59:EB:76:37:01:D9:42:E6:2D:70:F0:33:AC:88:76:05:67:C1:91
Certificate issuer: /CN=2aa438c9-0cbb-4364-946d-9714249a8222
Certificate serial: 010D0C9F4328584F4F08026ADB64DE0FA7D81700
Authority key identifier: 05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/9f9901be-486a-39f7-82b9-2db378019951.roa
Signing time: Sun 27 Sep 2026 01:00:12 +0000
ROA not before: Sun 27 Sep 2026 01:00:12 +0000
ROA not after: Sat 26 Dec 2026 02:00:12 +0000
asID: 63293
IP address blocks: 129.134.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 13 Oct 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:4f:08:02:6a:db:64:de:0f:a7:d8:17:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa438c9-0cbb-4364-946d-9714249a8222
Validity
Not Before: Sep 27 01:00:12 2026 GMT
Not After : Dec 26 02:00:12 2026 GMT
Subject: CN=0f9a23ee-4e6e-468e-a75d-bbbf12f6b956
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:49:15:65:80:65:02:05:b4:7e:15:99:f1:37:
08:3f:bf:37:af:3d:1f:52:49:11:82:7d:37:9a:55:
93:07:1f:9b:fd:39:e9:41:52:13:30:92:d2:03:cd:
6f:fa:77:31:ee:45:d2:c5:da:0f:06:36:32:0e:70:
dc:0d:04:a1:c7:2a:97:09:34:2d:67:56:cb:4d:66:
30:fa:4f:91:31:55:fe:d1:b7:16:f4:a3:81:54:25:
34:66:e5:40:f7:9c:a4:93:34:31:d4:81:22:90:40:
e0:bd:84:0f:ab:0a:99:02:7a:a5:64:dd:c1:bb:99:
2d:c7:ad:c0:8c:f7:c4:8c:4f:c0:ae:b2:0e:7a:3f:
da:12:ad:1e:2d:50:0c:2c:e3:18:1d:d2:57:b4:f0:
35:8b:9a:09:e5:01:19:58:e0:df:fb:b9:4a:54:98:
11:2e:e5:72:ab:80:36:0f:40:aa:48:85:1d:63:25:
a4:0f:f4:fd:ea:8b:05:bb:40:ed:be:05:47:9a:41:
c7:8a:62:5a:52:bf:4c:11:e8:3e:37:c1:f1:c4:f7:
a3:bb:64:fa:7c:bd:3e:24:60:5f:70:3f:ab:15:24:
07:46:6d:83:05:94:40:bd:2f:cf:de:2e:99:61:08:
6f:e5:2c:83:8d:5c:eb:fa:a5:a9:d2:99:a1:56:51:
8c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:59:EB:76:37:01:D9:42:E6:2D:70:F0:33:AC:88:76:05:67:C1:91
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/9f9901be-486a-39f7-82b9-2db378019951.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl
X509v3 Authority Key Identifier:
keyid:05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer
sbgp-ipAddrBlock: critical
IPv4:
129.134.196.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:0a:ca:eb:e7:df:66:25:93:49:48:15:a8:ee:bc:75:aa:99:
a0:e4:1d:f0:f6:d0:1a:41:69:e8:09:e7:55:bc:14:4c:a7:92:
4e:b3:5d:eb:86:8d:2b:6a:d5:c9:9a:1b:e0:34:06:97:46:40:
63:73:09:55:93:a7:e2:17:81:13:e7:7f:d0:07:80:30:81:10:
2d:a3:eb:6d:8a:c9:19:71:d4:4e:1e:b1:7c:f7:e7:da:9e:4b:
40:e1:57:f7:d9:2e:1f:bc:4d:11:ba:c1:59:2b:27:a2:20:fe:
11:23:b4:16:6d:1d:17:2c:3b:16:de:a1:d3:1a:26:4e:3f:f0:
36:46:44:6c:9f:b9:6e:ce:29:c2:af:5d:83:28:35:02:40:9c:
84:46:97:17:22:67:4e:26:d1:f8:c6:35:4b:aa:a5:66:2c:ae:
ac:82:3b:27:71:c2:21:f0:1e:2e:89:7b:3a:79:26:21:4d:ef:
b7:9b:2d:9e:2a:b7:12:13:bf:f5:e1:cb:e0:19:fd:36:05:16:
cc:12:e2:0f:71:64:2e:63:15:62:4f:96:81:40:9c:1f:db:f4:
b5:e7:0c:97:5b:72:9e:28:6e:68:0d:6d:57:64:dc:21:ac:25:
86:eb:1c:ee:d7:91:c7:f7:25:89:43:51:9b:4a:11:cf:21:72:
24:8e:39:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 23:58:35 2026 by rpki-client