
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ec6016a8-852f-3b67-a0b8-1bb4ddb6349c.roa
File: ec6016a8-852f-3b67-a0b8-1bb4ddb6349c.roa (raw, json)
Hash identifier: O+LRNrOXkFxs9y4Ig+FqDXXA0dT6/U9R3bfn8jGAmpw=
Subject key identifier: 4C:37:83:AB:BC:0F:71:4C:22:99:A3:03:09:78:BD:60:97:B8:A9:A6
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584D905A9B6C0192E16C6D9F0400
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ec6016a8-852f-3b67-a0b8-1bb4ddb6349c.roa
Signing time: Mon 20 Apr 2026 01:00:24 +0000
ROA not before: Mon 20 Apr 2026 01:00:24 +0000
ROA not after: Sun 19 Jul 2026 01:00:24 +0000
asID: 31898
IP address blocks: 129.146.36.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:90:5a:9b:6c:01:92:e1:6c:6d:9f:04:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Apr 20 01:00:24 2026 GMT
Not After : Jul 19 01:00:24 2026 GMT
Subject: CN=d3fb933f-ef76-4904-a4d0-c6ff2e832583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:cd:b1:ef:ce:78:3a:aa:d7:02:c0:0c:fb:b6:
7e:4f:fd:88:bd:2b:42:50:29:22:85:63:b3:73:b0:
32:c0:5f:8b:02:f5:99:3b:fc:3a:5c:41:d5:cc:c7:
54:13:d3:93:56:b7:a2:00:44:31:e6:61:4e:cd:04:
66:34:7e:8a:2a:27:0c:71:c0:8f:6e:d9:d7:3b:35:
05:33:1f:cd:4d:65:c5:5f:d3:07:a9:b4:92:16:c7:
e6:93:b6:77:d7:24:bc:19:88:e1:bb:ee:35:7f:10:
6f:8c:06:58:de:38:0d:f7:4d:ce:7a:ef:43:ce:54:
20:3c:7f:bf:0f:a0:38:45:4f:67:5f:f0:01:5f:fc:
9d:69:aa:b7:b0:ad:c3:46:e1:4f:6b:d8:a0:8e:74:
66:46:e2:f7:65:1f:65:bc:c1:5b:60:02:e4:8a:33:
3c:27:5d:8d:99:27:a4:60:c3:c7:ad:43:54:59:55:
06:84:45:73:98:33:51:25:e8:62:65:9d:e5:c9:b0:
81:41:84:30:cd:63:a6:6d:8a:49:b9:96:c2:81:84:
7e:58:f8:b5:e9:71:fb:ca:23:57:32:d8:3b:2a:fc:
2c:38:e7:92:3b:8b:35:e8:73:92:7e:c5:ac:0f:85:
54:c8:f3:e4:b0:90:19:30:fd:5e:74:4d:69:32:ca:
1b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:37:83:AB:BC:0F:71:4C:22:99:A3:03:09:78:BD:60:97:B8:A9:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/ec6016a8-852f-3b67-a0b8-1bb4ddb6349c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
129.146.36.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:ea:30:0d:49:ce:ad:97:9e:da:62:80:dc:e3:d1:4b:86:ac:
55:eb:11:eb:bd:37:ae:c0:6c:cc:62:1f:22:61:13:72:2c:ee:
49:0c:23:eb:29:5a:c0:d4:3b:78:58:c6:45:e6:b3:9b:82:fc:
71:5b:a7:a9:c1:18:5e:86:93:23:8a:e8:91:e3:17:dd:99:61:
83:e1:8c:bf:e1:e9:cd:1d:75:f2:0a:95:00:ae:34:7e:1d:c9:
f8:7d:1f:46:b3:1c:58:eb:8e:12:bd:d8:44:db:27:ee:ad:26:
6b:5a:f2:b1:2d:97:a0:64:f4:f1:5a:bf:10:ee:d4:31:26:b9:
33:5c:16:24:4f:66:5d:9d:d6:92:32:96:f9:cb:73:42:a1:53:
62:93:1d:ae:b2:f5:22:2c:ab:42:b7:5e:63:5c:d1:2d:36:b8:
8c:df:b4:e1:1c:df:49:3b:34:62:11:96:16:9f:65:91:82:96:
75:f7:36:b1:c1:c3:2f:8c:a7:1a:6e:9d:22:33:5e:41:c6:ae:
16:2f:1e:25:6b:e7:51:11:bb:d2:cf:2f:fb:52:88:fa:b8:0e:
7b:a7:dc:4e:99:e4:81:f2:b7:06:55:f7:78:ce:b5:b3:c5:a7:
c6:3a:c6:2c:ec:45:d2:20:fa:39:0d:8e:11:a9:93:74:f5:2b:
6b:c9:f7:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:22:37 2026 by rpki-client