
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/132e7b72-2d06-316b-afaa-74c07ae106c5.roa
File: 132e7b72-2d06-316b-afaa-74c07ae106c5.roa (raw, json)
Hash identifier: /16SW8OBoIUqm3dcmo4F6F3wEUHjmTGTWPOuQgjoB3w=
Subject key identifier: 1F:BB:B4:28:29:1B:2A:68:6F:E2:0F:82:2B:19:C9:21:79:F2:41:04
Certificate issuer: /CN=2aa438c9-0cbb-4364-946d-9714249a8222
Certificate serial: 010D0C9F4328584E3A2F704E44F7303E71925704
Authority key identifier: 05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/132e7b72-2d06-316b-afaa-74c07ae106c5.roa
Signing time: Fri 19 Jun 2026 21:00:12 +0000
ROA not before: Fri 19 Jun 2026 21:00:12 +0000
ROA not after: Thu 17 Sep 2026 21:00:12 +0000
asID: 63293
IP address blocks: 129.134.191.0/24 maxlen: 24
157.240.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 21 Jun 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:3a:2f:70:4e:44:f7:30:3e:71:92:57:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa438c9-0cbb-4364-946d-9714249a8222
Validity
Not Before: Jun 19 21:00:12 2026 GMT
Not After : Sep 17 21:00:12 2026 GMT
Subject: CN=ec28a81a-3a8d-4a6f-a2cf-545c385c68af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c3:f9:6b:18:09:d3:06:9f:74:30:fa:a3:6a:
1a:16:0a:11:10:83:59:05:a9:2e:11:cd:18:b0:fa:
9e:28:89:10:04:f2:ed:69:38:8d:83:67:44:91:c2:
12:9f:e8:2c:74:bd:68:9f:d0:ad:6c:45:1d:db:3a:
79:cd:19:13:84:5b:75:5a:25:65:d0:c6:e4:25:68:
56:53:47:b9:7f:70:40:03:9e:05:f5:3e:37:6b:62:
6a:b3:f5:24:41:d9:fe:5d:44:67:b0:73:84:79:8d:
97:c0:ee:89:c9:b0:63:fa:1c:b5:ad:1f:21:83:fe:
af:61:65:3b:12:93:72:da:6b:75:07:cc:1e:fb:d1:
cb:89:14:ab:4e:a0:72:18:28:d1:8a:04:53:0b:f7:
75:73:4d:f2:37:ee:3d:c7:5c:be:b3:ef:5d:22:3f:
0b:9b:49:f0:a4:3e:d3:c5:be:1e:57:d8:b8:62:81:
6e:a9:89:52:77:c9:8f:c6:89:a7:83:53:c7:f0:0b:
1d:2f:66:d1:ba:4c:2b:f8:43:06:5a:3e:f9:50:8e:
fb:73:ba:ee:c3:75:61:a5:e1:40:85:08:52:88:bf:
6b:cd:7a:33:d1:f7:b1:f5:71:97:c6:50:6a:f2:28:
0c:71:56:c7:12:17:d5:1c:33:fb:34:03:1b:5f:f4:
85:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:BB:B4:28:29:1B:2A:68:6F:E2:0F:82:2B:19:C9:21:79:F2:41:04
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/132e7b72-2d06-316b-afaa-74c07ae106c5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl
X509v3 Authority Key Identifier:
keyid:05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer
sbgp-ipAddrBlock: critical
IPv4:
129.134.191.0/24
157.240.190.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:d8:98:cb:91:1b:1c:69:a1:93:db:3c:51:79:d8:42:43:88:
74:89:08:38:41:8b:cb:e2:38:87:4e:4e:12:70:ed:20:6a:80:
ec:af:a2:22:25:30:86:a6:46:55:9d:d6:b1:33:64:e8:56:38:
c0:c6:7f:82:0f:fd:4d:d6:97:c4:3e:2e:19:ad:ae:87:13:11:
b9:1d:5c:65:a3:c2:64:5d:1b:26:6a:41:6c:c3:27:1d:6e:64:
01:25:31:46:7d:6e:95:4e:e6:c5:39:6e:ce:4a:27:32:5f:7d:
53:59:9d:98:e1:2e:bf:ae:77:24:29:8b:de:85:a3:7f:81:5e:
26:d9:46:50:ec:c0:bd:26:5e:8a:a8:69:f9:72:5b:69:a3:62:
51:18:49:22:d0:5d:ef:ac:75:d0:51:2b:48:cc:05:c9:f1:76:
40:81:ec:54:63:92:77:ea:6d:37:2b:51:ff:ee:3b:44:f0:cd:
96:73:cb:9e:48:1c:24:e4:c1:35:de:fb:5c:9a:a8:52:1e:28:
7f:7b:80:c8:4d:fd:98:cd:e3:1f:da:7e:0a:89:74:2c:d1:49:
e9:83:05:bc:f3:27:13:0c:c2:59:37:0b:10:ca:b5:27:c6:f6:
c6:da:92:2d:c2:53:49:f9:bc:f0:67:7b:90:b2:5a:f5:75:45:
e6:4f:92:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 14:45:24 2026 by rpki-client