
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/41059d34-8eac-3523-8ca6-0016a5d2aaf9.roa
File: 41059d34-8eac-3523-8ca6-0016a5d2aaf9.roa (raw, json)
Hash identifier: 2hgPLQcX1EpcKSmrbPKG/Ajr7w2JrwE91wR+32c4CF0=
Subject key identifier: DF:BD:3D:C9:D1:01:2B:93:D2:E1:F2:A8:FC:16:53:66:64:E6:A3:AE
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584D905A98A31B1773C3031E7E00
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/41059d34-8eac-3523-8ca6-0016a5d2aaf9.roa
Signing time: Mon 20 Apr 2026 01:00:24 +0000
ROA not before: Mon 20 Apr 2026 01:00:24 +0000
ROA not after: Sun 19 Jul 2026 01:00:24 +0000
asID: 31898
IP address blocks: 129.191.0.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:90:5a:98:a3:1b:17:73:c3:03:1e:7e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Apr 20 01:00:24 2026 GMT
Not After : Jul 19 01:00:24 2026 GMT
Subject: CN=86042b09-e4dd-401b-b584-0888bd0f30fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:58:d4:df:97:a0:40:0c:52:24:38:50:bb:a5:
ca:31:d2:58:dd:56:ae:d2:aa:56:b8:70:75:95:72:
e8:97:d2:59:77:1c:df:08:05:7d:47:0e:ce:6e:45:
e3:d9:b9:dd:db:1a:8a:bd:cc:4f:0e:8f:67:a8:06:
66:78:a1:1d:b8:7e:04:ba:22:59:ee:35:ae:ae:4c:
fe:67:d4:17:d1:33:01:70:91:84:ca:f5:88:c2:e0:
a7:ca:78:ed:eb:e3:1a:83:8f:5a:9e:f1:8b:9b:0c:
c6:c6:14:f3:b2:24:96:86:9b:61:3a:83:30:5a:8a:
34:e8:b1:36:52:7e:a1:4d:cc:b3:bd:23:03:79:4b:
69:e5:3b:53:d3:0b:0e:e5:e7:da:f8:16:06:66:e3:
3b:3a:0d:42:b8:66:30:bc:8f:f1:e5:e5:83:d6:d2:
cb:ab:2e:e7:6a:ce:86:e0:5f:50:04:94:91:0f:b6:
7e:28:06:37:8f:f6:c6:20:fa:6d:12:9a:84:1c:f2:
5c:c5:f8:05:4d:19:78:f7:e2:27:ea:50:22:25:5d:
c6:a7:b8:a2:68:38:34:2f:8c:12:5c:8a:0c:74:cb:
eb:7e:1a:bc:c2:7f:88:83:65:c1:36:44:8b:8d:1e:
90:90:1a:f2:d4:b4:b8:45:40:79:34:66:9b:4d:e1:
7a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:BD:3D:C9:D1:01:2B:93:D2:E1:F2:A8:FC:16:53:66:64:E6:A3:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/41059d34-8eac-3523-8ca6-0016a5d2aaf9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
129.191.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:6c:85:f7:e7:97:59:d2:01:85:92:0f:11:a2:99:d2:67:79:
94:e3:70:2d:41:b4:17:39:3d:90:f7:5d:8c:32:75:fc:6a:a3:
8f:53:92:ee:a0:79:6d:d7:31:b4:35:23:5d:94:53:79:bf:e8:
83:3f:9f:bb:ae:93:46:90:4e:28:bf:3a:ca:fb:bc:e3:11:f3:
b1:ac:ba:9d:ab:83:73:45:ff:12:d2:3e:44:da:79:c6:e5:2e:
ef:a4:f6:cc:42:f7:1b:49:79:3f:a3:bc:f0:fc:21:dc:27:d8:
0b:73:6c:12:b2:97:58:1d:9a:78:6f:0a:9e:af:da:a4:16:1e:
48:3d:cb:00:85:1f:ce:db:54:b6:cc:10:70:03:e5:95:a4:b6:
54:d5:d0:2b:37:23:42:7b:6f:08:97:8f:47:c2:70:78:86:2c:
d0:65:16:a9:e4:ba:c8:20:6e:05:22:76:3e:87:d6:a8:cc:17:
9d:ff:30:75:38:08:32:db:15:f7:a5:a8:43:5e:03:09:fb:eb:
f3:5e:e4:23:09:2b:e8:55:54:ab:e6:02:a3:5a:5e:13:c7:11:
79:4a:b5:0b:49:dc:fc:b2:3c:c2:33:f4:48:81:d3:e9:48:ed:
e0:df:0f:68:17:bb:b8:39:09:31:49:ee:dc:66:57:3b:53:2b:
ed:e6:b5:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:02:56 2026 by rpki-client