
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/6eb4c70f-dec1-3bbc-b3c5-e32d822b2a12.roa
File: 6eb4c70f-dec1-3bbc-b3c5-e32d822b2a12.roa (raw, json)
Hash identifier: RMnt9+B19DIUBO/ULyOy66FPMLPBu2WuoVPnjSwLRv4=
Subject key identifier: 82:FE:C9:83:01:AD:21:7E:80:13:D6:6D:D2:F7:D2:DE:A3:4F:C8:05
Certificate issuer: /CN=2aa438c9-0cbb-4364-946d-9714249a8222
Certificate serial: 010D0C9F4328584F77832742651CBE12703EB580
Authority key identifier: 05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/6eb4c70f-dec1-3bbc-b3c5-e32d822b2a12.roa
Signing time: Sun 11 Oct 2026 13:00:12 +0000
ROA not before: Sun 11 Oct 2026 13:00:12 +0000
ROA not after: Sat 09 Jan 2027 14:00:12 +0000
asID: 63293
IP address blocks: 129.134.162.0/24 maxlen: 24
157.240.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 06 Nov 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:77:83:27:42:65:1c:be:12:70:3e:b5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa438c9-0cbb-4364-946d-9714249a8222
Validity
Not Before: Oct 11 13:00:12 2026 GMT
Not After : Jan 9 14:00:12 2027 GMT
Subject: CN=1e73f539-f9ed-48d2-bbbe-131644e4390e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:66:1c:a0:7f:37:0f:55:99:5f:1a:e7:e5:a3:
c4:a1:68:74:a7:f2:33:1e:c5:9f:1a:48:17:54:20:
39:ed:eb:8a:4b:ba:a6:68:43:d7:5d:ca:f8:7a:c6:
47:55:59:92:45:30:fa:e3:62:3c:6c:1e:c5:ab:0d:
16:6d:b3:c6:2f:e4:a6:81:00:0c:40:a8:b4:83:77:
eb:0a:15:3d:7b:4e:7c:4b:a7:53:37:61:8d:bb:93:
b1:c7:18:14:a9:7c:6e:f8:16:94:16:3e:9a:07:4f:
f7:1e:ab:90:bb:0b:21:71:08:1d:af:51:0a:3b:9b:
67:ba:11:e5:fe:69:58:8b:cc:99:71:d2:89:1d:35:
a7:19:9d:55:6b:d6:3e:23:84:44:b6:bc:40:4a:fd:
b3:2b:bf:9d:88:06:1c:91:f4:57:9a:d6:dd:36:45:
13:aa:28:c9:a5:2c:cb:79:f4:2b:99:7c:6f:70:2f:
38:98:45:0c:03:9b:ba:9c:76:32:ea:76:77:6d:d4:
9c:a9:c8:ce:8c:b4:90:ce:e1:72:22:0e:ef:b4:fb:
b3:f6:3f:b4:04:af:bf:63:db:60:f7:4d:fe:d3:d0:
fb:78:35:ea:34:6d:2d:7e:d3:50:96:fd:55:a3:66:
4f:16:a7:f9:cc:99:4f:0b:e0:d2:66:c2:65:fd:af:
8f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:FE:C9:83:01:AD:21:7E:80:13:D6:6D:D2:F7:D2:DE:A3:4F:C8:05
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/6eb4c70f-dec1-3bbc-b3c5-e32d822b2a12.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl
X509v3 Authority Key Identifier:
keyid:05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer
sbgp-ipAddrBlock: critical
IPv4:
129.134.162.0/24
157.240.129.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:9a:43:81:31:54:41:b0:c8:0b:ca:8f:98:b2:b6:3a:5c:79:
0e:8b:e0:cd:60:e9:ba:6f:08:86:c0:d1:1e:71:80:2b:21:48:
8c:d4:26:38:35:92:bc:dd:e6:72:21:a0:c0:ff:d3:41:8e:23:
17:78:3e:b7:0a:1a:a2:24:87:4b:a8:a7:7a:21:9c:a9:0d:78:
9d:54:b3:ab:56:5c:0e:69:be:fc:db:c3:bb:b0:f7:5b:dd:10:
50:27:ad:70:76:76:8e:e6:18:1d:ca:06:d6:34:f0:a0:00:3d:
1d:58:f0:d5:d6:18:a4:7f:78:3c:ac:6e:f1:ed:45:62:53:aa:
4f:be:b3:e8:8b:fc:95:52:88:ca:af:5e:39:7d:55:57:a1:57:
db:4e:69:b2:7d:88:ba:b6:9d:c2:4c:dc:54:b3:fe:77:73:2b:
85:d2:39:d0:8b:70:f7:f7:59:0e:df:ac:ad:6e:63:88:e6:95:
6e:05:e2:03:04:61:1f:e8:e6:f9:f4:81:48:22:b4:69:4c:bf:
67:f4:4d:f8:e1:f0:19:08:ab:96:d5:8a:e3:6a:9a:4b:71:60:
9e:a0:e6:46:ac:f7:4b:3d:d5:0a:ef:98:b5:fd:ab:16:51:1f:
97:c4:93:d6:12:3e:34:76:cd:92:72:71:d6:a9:07:ae:bd:0e:
1d:f5:f1:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 19:11:13 2026 by rpki-client