
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/32cf6b02-9900-3229-8f16-396f98988223.roa
File: 32cf6b02-9900-3229-8f16-396f98988223.roa (raw, json)
Hash identifier: /s8orGHcmBbLrI9Lun6l5aHdF4mL2EAROLJyKyYh1sk=
Subject key identifier: 2E:42:76:CF:2C:CA:FF:8D:C4:DA:36:FD:D1:4F:71:5A:60:E9:8E:7B
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584F1CC79ADF658C2318B55D4200
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/32cf6b02-9900-3229-8f16-396f98988223.roa
Signing time: Wed 09 Sep 2026 01:00:11 +0000
ROA not before: Wed 09 Sep 2026 01:00:11 +0000
ROA not after: Tue 08 Dec 2026 02:00:11 +0000
asID: 31898
IP address blocks: 131.186.8.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:1c:c7:9a:df:65:8c:23:18:b5:5d:42:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Sep 9 01:00:11 2026 GMT
Not After : Dec 8 02:00:11 2026 GMT
Subject: CN=519f1b4e-83fe-4d5d-84bf-53b98e323c1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:18:83:80:8f:9e:e6:f1:f4:7a:d5:2a:99:bf:
97:f3:65:4c:da:9a:81:ba:19:6b:2f:76:84:fd:51:
89:f5:ea:c8:1c:b4:48:41:13:60:78:52:48:4b:26:
e7:79:72:fa:d4:ff:e3:2f:0a:01:8a:9d:88:6f:fc:
2e:dd:c4:55:70:ce:40:42:f9:34:1b:2b:e4:ac:ce:
84:bf:5e:76:a6:f8:bf:d5:a2:02:cb:5b:d4:b0:c7:
ff:8c:b9:97:1a:25:98:d0:03:14:42:9a:10:22:92:
3e:14:b3:63:b5:e6:e5:c4:d8:94:4b:b4:d0:99:b5:
34:ee:a0:94:95:03:0d:c4:77:56:a0:54:89:25:c2:
31:9d:70:5b:d3:a8:45:b7:12:eb:6d:30:4e:d0:c5:
0a:99:f6:55:f3:c5:c6:00:c1:80:2b:9b:4c:0e:3a:
50:c5:5d:c1:03:e9:1f:e4:8b:cc:3e:a8:70:bb:a3:
d3:de:53:e9:cc:bb:b3:40:ab:a4:f3:0d:92:c3:9f:
38:ff:59:d3:28:66:e0:22:07:c1:45:63:b7:a5:11:
4b:2d:ef:67:9a:ab:4a:89:f8:c1:b3:7d:5d:50:c3:
82:7c:bc:e5:66:cb:69:ff:37:e7:1d:7b:a5:33:ce:
da:81:92:9d:6b:94:90:0e:1c:db:4e:a2:a8:fe:84:
72:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:42:76:CF:2C:CA:FF:8D:C4:DA:36:FD:D1:4F:71:5A:60:E9:8E:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/32cf6b02-9900-3229-8f16-396f98988223.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
131.186.8.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:5c:71:a5:55:9a:ee:6a:c7:4a:64:11:0f:26:d3:2d:e4:d4:
09:5a:15:ee:a3:49:3c:9e:26:34:2e:e9:38:9c:4d:f7:61:9d:
86:89:16:45:78:90:f1:db:0c:fd:df:d5:f3:6f:32:c5:70:35:
50:d5:19:5e:f2:26:3e:77:ef:a4:e7:26:3a:71:65:83:62:1d:
65:a0:b4:b3:f9:d8:46:a7:17:a7:7c:c7:30:69:35:a4:22:02:
3d:8e:f8:d1:d7:8f:c2:92:08:d9:b1:c7:24:91:37:00:1e:47:
c6:23:e5:30:f9:75:c6:49:8f:36:cb:4c:5b:3a:46:62:9d:cd:
e0:cc:a1:92:ce:58:d1:e2:cf:a7:10:eb:6b:c5:dc:01:2f:7c:
06:e6:64:e1:3a:5a:a8:f2:56:4d:76:76:13:be:12:d7:ac:cc:
40:c1:81:0e:22:b6:ae:e9:ee:69:8d:7f:9b:c5:c8:9b:77:c6:
2f:80:1f:48:ce:2d:96:8f:e3:be:ed:93:a5:e8:22:a6:8a:27:
3c:23:12:0c:58:69:36:f1:1a:49:a9:24:4c:6a:ff:09:f6:c4:
cb:86:21:06:54:f7:07:1a:e5:e3:5e:27:1e:4a:70:48:6c:39:
eb:0f:15:c6:7a:f3:73:cb:b2:17:ee:1f:3b:37:bd:43:0f:a7:
23:ee:78:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 07:27:33 2026 by rpki-client