
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6f43a7af-5941-3c70-b3c6-914fbef88a98.roa
File: 6f43a7af-5941-3c70-b3c6-914fbef88a98.roa (raw, json)
Hash identifier: clIfMk8AEkr+OOht7WIkU0FmjEsDK3Nz5x3BUnW3ex0=
Subject key identifier: 1C:CE:A5:A4:63:25:4C:5E:95:AA:94:FB:DF:ED:BA:8D:EA:8C:12:6B
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584F130245C8F0D9C94DE27D6B80
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6f43a7af-5941-3c70-b3c6-914fbef88a98.roa
Signing time: Sat 05 Sep 2026 13:00:12 +0000
ROA not before: Sat 05 Sep 2026 13:00:12 +0000
ROA not after: Fri 04 Dec 2026 14:00:12 +0000
asID: 31898
IP address blocks: 129.146.80.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:13:02:45:c8:f0:d9:c9:4d:e2:7d:6b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Sep 5 13:00:12 2026 GMT
Not After : Dec 4 14:00:12 2026 GMT
Subject: CN=a29bf774-2dbc-4d20-b601-e8c25f7b9361
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a9:ad:9b:99:73:0c:76:e5:5b:b5:d5:88:07:
31:bd:5c:b8:4f:af:a5:25:fe:39:ce:d0:86:76:45:
f3:d6:3e:5d:29:36:dc:46:d5:0b:3b:5d:4a:78:6d:
dc:24:f7:49:99:88:5d:7c:9d:f2:cb:78:40:f9:09:
95:60:82:c6:e9:8f:fe:91:58:23:4a:06:7b:e0:bb:
76:30:69:3a:bd:0b:4d:6b:9f:2d:af:d4:63:48:d3:
81:fc:78:30:b4:06:de:bd:a2:ae:00:04:69:c6:98:
98:c6:84:d3:73:de:2c:fa:0e:fb:cc:88:27:20:06:
9b:33:43:1d:62:ad:53:2d:71:88:6e:11:27:79:f6:
71:02:cf:54:79:1e:7f:71:96:20:99:4a:04:43:f6:
17:aa:50:9a:4e:44:a1:fd:72:c0:dc:cb:95:b7:4d:
8c:2c:10:82:5a:e0:7a:6b:fb:8f:09:07:76:31:5e:
ac:8b:64:82:43:eb:e8:be:82:ac:84:98:d0:19:fa:
d5:11:b6:c5:d3:fe:7e:c0:4c:ec:23:b1:65:38:7b:
d2:ac:98:14:91:ed:46:8e:cd:c8:14:2e:9d:eb:de:
e6:82:c5:b6:53:6f:2d:61:b0:50:86:8c:39:35:c7:
93:6a:ed:c4:61:0a:47:f1:8e:af:bd:7a:1c:79:08:
cd:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:CE:A5:A4:63:25:4C:5E:95:AA:94:FB:DF:ED:BA:8D:EA:8C:12:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6f43a7af-5941-3c70-b3c6-914fbef88a98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
129.146.80.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:52:63:66:a7:e8:bb:72:b0:72:cb:fd:b1:be:2f:f6:c2:ab:
2e:b4:cf:99:a8:53:b0:af:80:dc:55:08:c0:15:2b:c8:ac:60:
bc:da:e2:3f:d3:50:d3:a3:35:5d:1e:87:ea:8d:42:60:fc:4a:
ad:01:03:13:bb:90:b2:d1:7e:1a:1f:14:58:1d:59:3d:bb:fa:
1d:d1:e7:87:f1:26:20:7b:4a:af:98:7b:e9:4f:8a:d4:f9:6f:
af:7d:59:3e:6f:e4:f2:47:99:f1:98:07:4b:8c:33:d6:72:02:
6a:1c:49:41:bd:2f:81:20:3c:e6:87:8e:74:fe:5a:55:44:b8:
84:03:2d:83:df:56:f1:44:5f:f1:8b:4f:29:e3:af:b9:96:6c:
5c:ef:75:54:95:80:8e:4e:29:25:e5:18:82:5c:41:1c:be:5d:
92:0a:a6:90:bd:c2:8d:17:f4:50:41:b2:d6:a5:29:21:85:dc:
45:6a:d8:e3:3a:a4:fa:42:a7:b1:1d:fa:dd:2b:23:99:43:cf:
e6:7c:d8:d0:c2:c7:1a:6e:f3:e0:44:51:32:60:5c:1c:ff:89:
c0:24:8e:28:b9:1d:29:22:a8:52:8d:49:59:83:5c:f8:dd:20:
d1:9c:83:db:6d:8b:72:bd:b0:21:89:ea:f2:31:e8:a8:e1:52:
71:ef:b2:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 06:37:32 2026 by rpki-client