
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ae252c79-db02-35a6-a7ed-f0f74a25d9d1.roa
File: ae252c79-db02-35a6-a7ed-f0f74a25d9d1.roa (raw, json)
Hash identifier: vBlLJSUFFDVyTqT7ryPeqgr1T8JqvrYHMud8K4yw1Xg=
Subject key identifier: 62:74:17:7B:C2:03:D1:D6:55:ED:9F:98:26:67:C2:08:A0:B7:73:FF
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584F0D6CD5AA1FD79AEA34704D80
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ae252c79-db02-35a6-a7ed-f0f74a25d9d1.roa
Signing time: Thu 03 Sep 2026 13:00:12 +0000
ROA not before: Thu 03 Sep 2026 13:00:12 +0000
ROA not after: Wed 02 Dec 2026 14:00:12 +0000
asID: 31898
IP address blocks: 129.91.16.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:0d:6c:d5:aa:1f:d7:9a:ea:34:70:4d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Sep 3 13:00:12 2026 GMT
Not After : Dec 2 14:00:12 2026 GMT
Subject: CN=dfd7df80-8aa3-4d27-9913-3310b9888533
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ac:b8:59:8c:90:1b:db:1e:2c:f7:33:3d:51:
3d:a2:5c:57:9a:36:3a:ff:26:fd:f5:c6:cf:54:65:
a6:5e:08:11:51:87:23:d8:dc:22:37:88:3b:4f:cd:
26:78:60:f3:cf:4e:8b:b6:e8:22:86:a4:9c:3d:b4:
0e:59:84:22:d5:f2:a5:4a:4b:7c:04:f8:0c:63:6e:
a1:5a:58:9d:43:c7:0c:96:76:bd:51:83:c1:37:3d:
71:9c:11:fa:21:83:7d:5e:80:42:d2:9d:a2:ea:f9:
46:28:19:ba:bf:3a:7a:7c:5d:14:ba:98:53:fa:28:
ca:72:44:60:a0:70:3d:db:5f:69:12:41:4b:6f:37:
2b:c5:73:3f:d2:52:ef:98:62:a3:ab:99:80:0b:2f:
d4:b4:96:48:ee:60:13:4b:43:f2:2d:ce:c3:19:c0:
41:bc:66:c5:62:db:4c:03:d1:55:ba:c1:54:e9:7e:
00:d7:4d:3b:1d:05:4c:86:09:5d:84:4d:1b:b0:5c:
81:81:6e:d0:34:26:ee:c1:58:51:78:9f:94:9d:76:
fd:1f:4c:8b:99:07:83:5e:78:f3:89:31:80:56:80:
e1:f1:a1:0f:b5:ff:cf:3f:ac:2d:1f:54:a3:6c:8f:
14:e6:66:f4:09:87:79:97:c1:94:59:c3:13:8d:bb:
56:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:74:17:7B:C2:03:D1:D6:55:ED:9F:98:26:67:C2:08:A0:B7:73:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ae252c79-db02-35a6-a7ed-f0f74a25d9d1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
129.91.16.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a6:a5:07:2b:f7:f1:6a:04:48:a6:dc:70:9d:4b:05:ad:6d:d6:
3b:0a:ff:cb:66:cc:14:1a:71:34:08:49:1d:b1:13:c8:1f:61:
7e:48:85:4f:0a:18:be:15:55:73:f2:77:db:f5:5d:8b:42:15:
16:9d:90:b3:8d:c5:5a:eb:da:c8:c5:e2:01:c5:3c:c8:ee:5e:
54:35:4a:2b:f3:8a:0b:57:0a:0b:e9:d8:4d:67:4a:3a:3a:c4:
87:e1:6e:d4:bd:8d:ce:fb:40:69:e6:f4:0d:fc:99:e5:0b:9b:
5c:ef:0b:1a:95:cc:07:95:eb:af:5b:d4:cb:d7:a6:ae:63:cf:
57:91:e8:05:d2:e1:8e:e0:9e:5b:a7:f2:99:4f:d3:36:59:aa:
1b:26:26:c2:9d:9e:48:a3:f7:7d:a8:3c:b2:77:be:8d:8c:eb:
b4:8f:15:8a:16:7b:0d:e1:d0:0b:cb:50:e6:ac:ee:f7:31:a9:
b6:60:c0:70:8a:2a:74:84:02:25:01:36:c0:10:96:6d:32:32:
2c:2b:a6:d3:80:2d:32:0e:d7:90:f0:7a:5b:03:f3:d6:a1:70:
88:4c:93:45:fd:f7:6c:0f:0d:aa:bb:d5:bc:3f:18:07:f6:45:
19:a8:ab:a5:dc:49:34:da:f5:a8:a5:20:b5:ee:73:0d:e0:40:
43:bf:d6:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:45:33 2026 by rpki-client