
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/9f9901be-486a-39f7-82b9-2db378019951.roa
File: 9f9901be-486a-39f7-82b9-2db378019951.roa (raw, json)
Hash identifier: /aLZyZFJ7k/LDFnr4pecAqf6nIUV0FNvh7A27ReXixY=
Subject key identifier: 7F:B8:1C:DE:65:40:B8:BF:1C:2A:FA:60:D4:BB:97:1E:70:C2:75:0B
Certificate issuer: /CN=2aa438c9-0cbb-4364-946d-9714249a8222
Certificate serial: 010D0C9F4328584D2A74B80739DAFC06224F3028
Authority key identifier: 05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/9f9901be-486a-39f7-82b9-2db378019951.roa
Signing time: Sat 14 Mar 2026 13:00:40 +0000
ROA not before: Sat 14 Mar 2026 13:00:40 +0000
ROA not after: Fri 12 Jun 2026 13:00:40 +0000
asID: 63293
IP address blocks: 129.134.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 21 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:2a:74:b8:07:39:da:fc:06:22:4f:30:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa438c9-0cbb-4364-946d-9714249a8222
Validity
Not Before: Mar 14 13:00:40 2026 GMT
Not After : Jun 12 13:00:40 2026 GMT
Subject: CN=b61f483a-306a-480e-a1b0-4f777408e4ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:a0:26:8c:be:05:32:dd:d4:dc:bf:c3:5e:ec:
a7:f0:d2:be:25:61:e8:46:3a:b2:06:c4:21:1c:b4:
03:21:f8:d8:00:71:e9:be:23:d6:79:ac:27:b8:a0:
2a:5c:3f:1e:62:1f:ef:c2:df:e1:be:76:e6:22:c3:
36:5d:ca:ea:fd:b0:1b:c1:ea:96:64:4d:58:70:2a:
da:28:bb:65:12:31:41:33:60:ba:87:33:32:72:1c:
aa:e1:f7:c3:b0:a0:8a:59:71:de:36:96:70:50:e5:
25:3b:96:e9:00:fd:46:91:6e:af:45:34:54:a4:36:
cd:ba:11:cc:f3:28:0e:26:b2:d9:2e:fe:cd:8e:52:
98:89:16:a5:36:16:f0:e3:00:e9:8d:c8:6c:a4:15:
42:53:44:77:42:1e:a1:c8:83:65:62:5e:80:2d:e1:
e3:ab:1e:90:56:36:55:af:30:e3:32:a4:cd:c7:a0:
05:ea:05:ca:33:de:97:73:c0:28:cb:f5:3f:54:06:
e7:25:0d:db:40:c9:69:a3:28:65:44:cf:27:be:7e:
88:4c:12:1c:65:b8:d6:ee:1f:3f:23:c5:b6:a1:9b:
51:42:a7:49:03:df:66:68:95:76:56:1a:80:d6:c4:
95:f7:80:da:71:0a:66:cf:49:fc:a7:01:2a:ad:c3:
7c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:B8:1C:DE:65:40:B8:BF:1C:2A:FA:60:D4:BB:97:1E:70:C2:75:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/9f9901be-486a-39f7-82b9-2db378019951.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl
X509v3 Authority Key Identifier:
keyid:05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer
sbgp-ipAddrBlock: critical
IPv4:
129.134.196.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:9c:61:16:10:7f:60:af:cf:10:2b:74:45:2b:61:52:a3:e5:
d1:56:3c:22:d1:01:bf:57:7c:31:ff:cc:3a:43:63:96:c7:1b:
cb:62:94:42:d1:61:5a:4b:5d:7c:4c:85:c0:d9:45:9f:96:01:
d1:c5:a3:e8:23:ee:da:d8:a0:48:17:1d:95:8c:41:48:34:55:
41:a1:25:c9:bf:fc:df:56:47:01:15:4c:8a:ad:92:4e:73:1b:
32:40:fd:e5:f1:d5:5a:bf:55:f0:21:7a:18:0a:95:80:2e:d7:
75:56:f2:ac:c6:8c:44:96:f8:ab:43:bf:99:a6:94:4a:10:6e:
49:e5:17:37:75:d3:c2:b1:5a:c0:52:79:de:2a:68:60:00:02:
82:9b:b8:82:fa:ff:98:b8:f7:5d:8a:bf:b4:ac:7c:4c:d5:e1:
44:0e:22:1b:53:ef:aa:9d:ff:08:ab:fb:63:43:03:e5:c5:25:
f2:e4:5e:76:14:0c:65:06:cc:45:9c:b7:ca:d9:f0:fb:ce:df:
17:e2:2f:75:54:fb:28:b9:60:08:c6:21:a5:c1:0e:e1:71:03:
04:77:f7:c3:35:3c:67:f8:d8:18:06:f7:12:a7:2b:58:cd:95:
f2:87:b9:76:11:92:6e:27:3a:c9:27:b1:04:c2:18:30:a8:e1:
78:a8:72:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 22:15:52 2026 by rpki-client