
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a6035598-470b-3423-9a02-720a630b0478.roa
File: a6035598-470b-3423-9a02-720a630b0478.roa (raw, json)
Hash identifier: lm3Beq5Acc51CNKYmPnN//50EHdHvxCnjDLqtOHkSLU=
Subject key identifier: 31:A4:CE:50:1D:54:72:67:65:06:3E:16:67:E3:EA:9C:42:4F:55:81
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584F119D02317DE82DF1E9A80280
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a6035598-470b-3423-9a02-720a630b0478.roa
Signing time: Sat 05 Sep 2026 01:00:12 +0000
ROA not before: Sat 05 Sep 2026 01:00:12 +0000
ROA not after: Fri 04 Dec 2026 02:00:12 +0000
asID: 31898
IP address blocks: 132.145.64.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 30 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:11:9d:02:31:7d:e8:2d:f1:e9:a8:02:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Sep 5 01:00:12 2026 GMT
Not After : Dec 4 02:00:12 2026 GMT
Subject: CN=d4d780ce-faee-47fa-9aec-815dc8f54798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:06:df:64:c1:ab:da:66:33:61:10:77:61:cf:
10:bc:a1:f0:23:d7:0e:35:45:d4:ee:eb:bf:6c:89:
8c:ea:60:2b:e3:11:e6:c6:2f:e8:62:43:88:1e:66:
5c:1e:f6:a7:88:04:32:44:ab:79:65:74:53:0a:7f:
5b:7a:46:7d:0b:5a:46:da:7d:af:2b:ac:64:af:1c:
dc:c5:90:d4:8d:74:d5:c0:d7:ad:a5:74:4d:8c:ee:
be:fc:c5:c6:3a:e9:d6:b6:66:3e:cd:a1:44:e6:e6:
18:5f:62:c4:44:d0:0e:11:4c:da:93:6b:5d:38:23:
d3:86:b4:83:7e:bc:79:91:44:8c:8a:ce:74:4d:d3:
bd:16:ae:7c:bd:ce:a2:7c:0e:d5:a0:03:90:b3:9d:
e3:22:8f:51:ce:16:8a:ba:3e:57:48:3f:a1:af:d0:
bf:96:b0:93:df:51:7e:b2:ce:ee:50:84:bc:ea:2b:
6f:4a:33:76:91:1f:07:d6:1c:d0:1d:2c:16:45:59:
d5:65:fc:b5:46:20:ff:d7:02:9f:b6:df:87:30:9e:
1e:0d:da:ee:64:f7:33:ba:47:86:99:06:e0:a1:0d:
fb:7b:cf:3f:a0:38:2f:9b:d9:4a:fb:53:60:df:52:
f0:6a:ec:be:dc:ff:9a:68:50:b7:06:ca:10:d7:46:
88:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:A4:CE:50:1D:54:72:67:65:06:3E:16:67:E3:EA:9C:42:4F:55:81
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a6035598-470b-3423-9a02-720a630b0478.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
132.145.64.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:98:bf:57:37:4f:d6:1c:b3:b3:5a:b9:b7:7a:03:ba:a3:9f:
72:f4:0c:fa:6d:a3:53:87:b5:63:28:88:f5:ef:e0:91:6e:fe:
17:df:42:c4:9d:c5:2d:47:3a:70:a1:52:92:9d:02:b7:db:1c:
50:49:f1:25:6e:3a:eb:a0:87:4c:c0:21:b1:e7:2a:cb:58:cb:
61:0f:97:e6:8f:34:0e:27:66:f8:82:5f:1c:30:ec:96:38:90:
54:2d:72:24:8b:08:3d:9a:d4:13:ba:0b:3c:2d:b1:96:5c:4c:
29:10:6d:09:40:26:aa:34:52:0f:bd:97:a5:40:22:94:1b:ce:
16:d9:35:92:98:04:ce:a7:bf:c1:d6:a8:80:df:dd:59:8d:47:
ac:9a:8f:60:ad:eb:2a:ef:42:f7:02:35:9c:99:66:61:72:63:
b6:99:25:f7:45:d3:95:1a:f5:88:6e:90:32:72:ea:84:37:6e:
01:75:42:f0:6f:0b:14:53:10:1f:23:12:80:52:e1:65:4e:53:
08:19:5b:d6:82:8b:9a:8f:5f:87:ad:33:a7:2f:10:7c:32:28:
a1:9d:3b:81:fd:cc:c9:48:ee:f3:80:18:5f:3b:1d:a2:09:70:
84:22:bc:cc:df:5a:c4:f2:13:cb:a6:ea:3c:a2:08:4d:f7:6f:
9a:5e:ea:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 00:59:49 2026 by rpki-client