
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/d3b9a71b-0a68-3198-8b69-86b1b0ff724a.roa
File: d3b9a71b-0a68-3198-8b69-86b1b0ff724a.roa (raw, json)
Hash identifier: bfHerDENL+g5cne5yKLIoL6nZ7IjrLLuGYTmF7FXDXE=
Subject key identifier: 6E:68:30:80:42:25:4D:73:A7:3D:7D:99:6E:53:BD:F3:CD:51:3C:D7
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F4328584EAF234A72A75A901B80D57280
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/d3b9a71b-0a68-3198-8b69-86b1b0ff724a.roa
Signing time: Fri 31 Jul 2026 18:26:05 +0000
ROA not before: Fri 31 Jul 2026 18:26:05 +0000
ROA not after: Thu 29 Oct 2026 18:26:05 +0000
asID: 81
IP address blocks: 128.109.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 24 Aug 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:af:23:4a:72:a7:5a:90:1b:80:d5:72:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Jul 31 18:26:05 2026 GMT
Not After : Oct 29 18:26:05 2026 GMT
Subject: CN=50550dfc-f183-4719-8cad-ee8001b8cfa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:d5:71:2e:a4:77:df:34:8e:21:68:13:b4:17:
7f:76:9a:3e:9c:8d:9a:22:b1:d7:01:51:1c:b3:18:
ca:c1:77:d2:7c:ca:a1:68:40:49:0e:e2:f0:43:f7:
ff:91:87:f6:95:41:c3:5e:6b:cf:58:1c:30:34:3a:
fb:57:bc:5a:4b:ad:9a:f1:eb:50:c9:d7:90:c4:52:
ef:7a:d0:1b:2e:d1:eb:d8:01:46:88:50:31:08:07:
aa:b3:b9:59:6c:dd:b4:b5:c2:34:c2:5c:53:56:63:
7d:6c:88:57:7f:5a:01:af:a5:27:a2:5c:59:61:34:
0c:4d:da:75:ac:3a:99:81:bb:3d:a7:fd:66:92:82:
2c:43:af:c5:2d:ea:f1:d8:78:33:f4:b6:f8:33:27:
62:39:11:2f:07:10:e0:d2:b2:73:6d:15:03:a7:c8:
64:ce:63:9d:d7:a3:86:19:6b:b1:04:0c:00:b1:b9:
05:fb:4f:40:82:93:e2:d1:5c:fb:c9:34:9e:a1:d9:
1a:df:77:8e:fd:32:a4:f6:e2:99:9b:72:02:cd:c5:
a7:24:05:6d:2c:5f:f2:c6:cb:f5:a6:ce:59:95:54:
76:05:ad:d2:6a:f6:aa:61:01:99:a3:2a:43:33:fc:
70:cb:07:35:ed:a7:f3:b6:de:57:3f:81:1c:0a:07:
d1:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:68:30:80:42:25:4D:73:A7:3D:7D:99:6E:53:BD:F3:CD:51:3C:D7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/d3b9a71b-0a68-3198-8b69-86b1b0ff724a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
128.109.130.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:71:7e:1e:95:63:3d:6b:d3:b4:e0:ac:f1:d2:95:56:95:40:
6f:a3:cb:e5:a8:c4:39:ff:5f:17:e1:fe:7b:93:35:d0:25:7a:
16:3f:f4:31:d9:d9:73:48:f5:4d:be:dc:81:03:2c:db:aa:ec:
f9:91:e8:8a:8f:e0:e0:5e:3c:be:77:25:45:61:60:88:56:42:
60:90:b8:34:54:7f:b0:41:3d:d6:65:37:f5:4c:63:ca:82:14:
fe:e2:e2:a7:f3:01:e0:aa:82:27:4b:c0:a5:4c:c1:0a:66:84:
02:1e:d7:d7:f3:a9:54:67:8e:1f:fd:3a:43:7e:cd:60:25:90:
a9:57:b0:3f:cf:f9:9c:b9:10:6c:04:02:9c:0c:d4:19:5e:93:
c5:8d:be:77:9f:2f:16:34:3f:10:94:98:64:5c:03:59:91:e2:
4b:7e:58:10:87:54:b0:1f:d9:d8:f6:79:d2:0a:91:95:bb:ed:
58:01:de:35:3f:31:1e:2d:9f:c2:ea:33:8b:74:d8:b0:41:45:
12:df:1e:99:75:6e:22:aa:9f:2f:4c:50:1b:55:72:3b:cc:64:
f4:79:e2:16:27:c6:d5:77:c6:05:be:9c:78:a1:e2:f7:09:a5:
e7:bb:36:3e:b3:6d:31:bd:50:2c:e7:8f:63:ec:31:16:c2:6d:
b5:fb:ba:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 19:24:55 2026 by rpki-client