
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/75fbc23e-8340-348c-afd0-cfe805be2546.roa
File: 75fbc23e-8340-348c-afd0-cfe805be2546.roa (raw, json)
Hash identifier: yQ7q35MIEZ1YGpQ8Q5OToUeImgs9Z8xYQppD9c0qcc0=
Subject key identifier: D7:29:0D:B6:08:A2:4A:26:B8:A9:A9:8B:19:C9:06:58:97:D8:6C:10
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584F1B6252EDEE86E6E12559F900
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/75fbc23e-8340-348c-afd0-cfe805be2546.roa
Signing time: Tue 08 Sep 2026 13:00:12 +0000
ROA not before: Tue 08 Sep 2026 13:00:12 +0000
ROA not after: Mon 07 Dec 2026 14:00:12 +0000
asID: 31898
IP address blocks: 129.151.48.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:1b:62:52:ed:ee:86:e6:e1:25:59:f9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Sep 8 13:00:12 2026 GMT
Not After : Dec 7 14:00:12 2026 GMT
Subject: CN=72ba2df0-8edb-417e-8717-01d4afab5b16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:fc:6e:86:4f:1e:a4:bb:b4:7c:56:49:36:31:
0c:3c:41:b7:8c:08:c3:25:2c:e1:ca:1e:de:a1:51:
d0:61:97:b6:5d:5a:b0:e2:6e:d6:dc:3e:58:f7:3a:
4e:e8:25:2e:6a:ac:51:17:d7:b0:eb:64:b1:a6:15:
a6:9d:df:26:f3:80:58:68:f2:a7:ee:e2:29:f4:5a:
ec:e9:5c:f8:11:ae:12:4f:93:92:11:22:49:d9:6c:
40:42:08:7c:8a:47:08:fc:2e:c5:9c:df:05:c6:51:
e1:d5:d2:b8:07:6f:bc:9a:c1:a0:cc:e1:8d:a8:c1:
3d:8f:25:e7:cc:8a:7e:5f:1c:f1:fe:1e:62:ea:e0:
88:33:da:d1:7e:74:94:ed:8b:6b:60:a5:6e:c2:0a:
6e:bf:51:cc:64:31:10:fa:7a:41:c7:c1:45:79:bf:
f3:8c:df:5d:70:9f:88:23:a8:af:4f:84:7e:a9:c7:
dd:81:8f:f0:ac:40:9a:6b:66:a2:49:5d:fb:f2:47:
2a:2d:00:32:db:76:b9:c6:cb:6e:18:ab:d9:d5:36:
9a:b9:a6:cc:ad:c9:06:2b:8e:38:04:22:80:c2:78:
8f:cd:83:db:70:b8:62:72:a0:1f:7e:c8:00:14:95:
e2:18:ae:1b:62:14:26:27:c5:0b:2e:79:ce:61:b8:
51:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:29:0D:B6:08:A2:4A:26:B8:A9:A9:8B:19:C9:06:58:97:D8:6C:10
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/75fbc23e-8340-348c-afd0-cfe805be2546.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
129.151.48.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:8e:cd:2d:7b:16:76:ff:ed:97:b7:5c:2e:b4:e4:d7:9b:94:
f6:25:11:39:a6:6f:38:89:9b:2a:36:01:a3:83:ad:30:d5:a2:
ca:8e:22:bf:41:75:5d:6d:aa:09:5c:84:26:e7:40:8b:4c:57:
6c:d0:d5:8a:0d:34:65:57:ad:28:72:4d:df:0b:10:8b:9d:d7:
57:29:a7:d1:7e:d8:97:55:35:c3:49:0d:7c:0a:77:7b:68:34:
f6:94:fe:0e:71:32:cd:98:4f:e9:24:cc:2e:ff:21:3e:55:f3:
f7:84:bd:af:03:30:1b:99:96:c7:98:11:83:65:f8:89:21:1d:
bc:fd:bf:f6:57:6f:5e:2e:de:d2:15:21:1a:97:8a:44:bb:12:
97:8a:53:ec:b4:d1:a9:44:98:4d:0c:12:e9:82:46:67:59:8e:
e4:c1:1e:bf:dd:e9:57:a4:37:48:54:8b:5e:20:92:cb:63:7e:
06:09:c3:4a:12:b3:cc:72:f6:87:6f:b9:e0:86:ea:e5:87:a3:
35:51:c5:2d:2e:49:ef:89:6c:a9:ba:bd:3f:94:2a:2b:53:94:
39:de:95:b0:86:3b:67:57:4c:e7:12:7a:1d:54:b4:ff:06:b8:
75:16:c2:c4:ba:7c:59:b4:71:97:e4:e6:68:4f:51:81:bc:24:
46:68:53:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 12:41:06 2026 by rpki-client