
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d09b6a9f-bb19-327f-bf80-437fbf99ae93.roa
File: d09b6a9f-bb19-327f-bf80-437fbf99ae93.roa (raw, json)
Hash identifier: 8FjMpk9HX+FQjmn1xwR/sh2ekQThrmlZOKCptDDMZEE=
Subject key identifier: A7:17:6A:C4:EE:96:34:7A:97:B5:06:FE:B1:08:F4:0E:6E:D4:B8:36
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584D8D8FE999D8BB7E247AFA0EF0
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d09b6a9f-bb19-327f-bf80-437fbf99ae93.roa
Signing time: Sun 19 Apr 2026 01:00:23 +0000
ROA not before: Sun 19 Apr 2026 01:00:23 +0000
ROA not after: Sat 18 Jul 2026 01:00:23 +0000
asID: 31898
IP address blocks: 129.151.128.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:8d:8f:e9:99:d8:bb:7e:24:7a:fa:0e:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Apr 19 01:00:23 2026 GMT
Not After : Jul 18 01:00:23 2026 GMT
Subject: CN=1cf165c0-e977-4e76-98b3-6a9866eb774f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d1:6f:07:8f:98:8e:28:7b:17:99:9e:8a:f0:
e2:c2:14:81:99:74:38:06:3d:29:c7:80:2a:30:ec:
cc:f0:29:c4:eb:62:98:93:31:24:20:1e:b4:a3:8f:
54:8c:ed:10:9e:a6:15:8c:62:2d:b5:b3:87:50:9a:
9e:9f:f0:d2:6a:cf:01:95:ff:3e:f0:94:cf:ac:36:
f3:39:5e:18:c7:a7:10:8a:08:33:bd:64:1f:0e:76:
88:d2:16:f6:03:f1:91:78:a5:b1:2f:00:33:c3:d6:
4e:d6:b7:e6:c2:82:13:46:9a:9c:08:4c:32:da:e7:
37:97:49:6e:78:b2:71:eb:f1:81:d7:bd:f9:89:d5:
3c:4c:e3:58:82:d0:92:9b:f1:4a:53:58:e1:eb:40:
33:c3:e8:c9:4c:f9:33:78:fb:cd:d8:3d:82:69:42:
82:df:5e:a9:d8:85:ea:6a:45:7e:16:72:64:5c:01:
e4:98:59:2a:8f:ba:d2:aa:40:02:ec:4f:66:24:ca:
d4:86:7f:6f:a8:f3:23:7b:16:34:8a:40:35:70:b0:
7e:00:f7:80:d4:7a:dd:e2:81:5e:26:fb:be:27:60:
ac:c3:35:cf:33:23:2e:d7:a2:9f:31:2c:35:74:3b:
ae:1d:ef:b0:6f:96:13:2f:59:b4:df:91:5a:3f:77:
a3:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:17:6A:C4:EE:96:34:7A:97:B5:06:FE:B1:08:F4:0E:6E:D4:B8:36
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d09b6a9f-bb19-327f-bf80-437fbf99ae93.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
129.151.128.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a3:23:24:8d:ff:a2:01:6f:0b:9c:08:07:ac:7e:90:cf:8e:20:
d6:08:87:ca:07:c5:06:a5:ec:e4:21:a3:11:ed:40:27:eb:04:
cd:fa:fd:b1:53:ce:13:78:f4:66:9c:ab:c8:1e:a8:f2:db:1b:
c6:95:24:79:b7:f8:70:74:17:62:dd:95:14:18:3a:ec:80:aa:
64:77:c1:e5:a4:51:9d:f9:96:c5:52:3c:37:0a:f1:87:12:5b:
7e:9a:64:ea:49:c0:a4:26:ba:c3:5c:bd:5e:61:0e:b8:a2:18:
b6:bb:eb:a9:f4:f0:39:b9:2b:83:32:33:5f:c0:ba:e3:32:2b:
f9:74:28:68:59:03:87:71:b2:8a:44:19:9a:0b:24:99:ae:57:
db:41:4c:1d:ae:0c:28:e4:f1:a7:a2:71:da:5f:0f:35:cb:a9:
4f:0c:26:f8:d2:b9:11:a5:0d:d3:e1:17:6f:f2:fb:ef:37:b1:
e3:56:eb:79:37:5e:5d:22:b6:56:5b:9d:f0:04:3f:4d:77:15:
e4:0e:0e:b2:a5:93:7a:b4:51:14:07:75:b8:2e:2a:7e:41:33:
bf:58:b3:07:3e:8c:88:de:d6:a8:4e:36:22:fd:f9:d9:c0:d6:
69:5c:90:f6:17:59:ba:1c:b1:db:61:d7:a9:fa:90:b2:85:b5:
49:b2:84:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:14:38 2026 by rpki-client