
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/127cd072-7bfc-37b0-9056-b94e5403a384.roa
File: 127cd072-7bfc-37b0-9056-b94e5403a384.roa (raw, json)
Hash identifier: AlG5IqhAZPBhQ/I02wWKXAxPDqQtbuZ4DvCJtCv+t8c=
Subject key identifier: ED:78:82:99:19:CB:E1:44:73:2C:89:67:87:F2:A7:A3:E9:1C:43:18
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584CAA27329EA5F4CC691C331280
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/127cd072-7bfc-37b0-9056-b94e5403a384.roa
Signing time: Tue 27 Jan 2026 14:00:36 +0000
ROA not before: Tue 27 Jan 2026 14:00:36 +0000
ROA not after: Mon 27 Apr 2026 13:00:36 +0000
asID: 31898
IP address blocks: 132.226.216.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Feb 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:aa:27:32:9e:a5:f4:cc:69:1c:33:12:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Jan 27 14:00:36 2026 GMT
Not After : Apr 27 13:00:36 2026 GMT
Subject: CN=f3620246-ac0f-46d1-bdc5-d13a7d72c95d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:52:94:b2:1b:70:47:fc:76:da:74:c6:76:7d:
47:d1:69:3b:4c:d6:2c:f9:33:95:b7:df:21:dc:78:
80:0a:c2:ca:d4:fc:0e:f4:3e:60:53:7d:bd:49:c8:
00:ee:81:8e:f8:a0:fa:ce:bc:0f:46:06:c6:8b:1e:
7c:d7:6e:b1:54:a5:bc:5a:68:4d:76:9a:20:19:73:
23:16:53:1e:33:d1:7a:84:69:2b:d5:79:45:96:49:
21:57:96:d9:dd:28:93:83:53:3e:54:5d:ea:ff:34:
42:d2:d1:e9:18:0c:6d:0c:4b:c9:15:3b:f7:38:68:
e1:f0:a4:a1:fa:80:b4:e3:9e:7c:3c:f5:5d:d1:f3:
af:4e:c2:1b:7c:92:d0:50:23:49:bc:a2:83:f7:ab:
0a:a8:11:78:a0:3e:8a:39:b5:0e:9c:5d:f2:61:f3:
5d:37:3e:be:9b:ef:c5:b4:78:35:e3:74:c3:a2:37:
f7:b0:4c:c3:e0:70:a1:42:6f:72:d9:4a:a6:d8:a3:
8f:f2:57:49:31:dc:f1:5d:27:64:14:fa:98:4f:e6:
63:02:cc:55:cf:e0:0f:4c:15:3e:db:b9:84:68:ce:
ac:21:ec:8e:d2:0a:a0:16:08:f8:01:df:29:ac:d8:
53:d9:b0:74:c3:c3:f5:b6:5b:fb:64:ca:00:e3:fd:
ea:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:78:82:99:19:CB:E1:44:73:2C:89:67:87:F2:A7:A3:E9:1C:43:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/127cd072-7bfc-37b0-9056-b94e5403a384.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
132.226.216.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:b6:c1:6f:91:34:0c:43:49:20:19:31:35:4d:c7:41:e4:13:
85:95:38:b1:48:0d:aa:03:7f:54:e6:d3:d4:5e:b7:93:78:c7:
01:e9:18:c0:af:08:92:35:29:95:b3:8e:d1:5f:0c:c0:b0:22:
22:09:9f:ce:2c:9e:10:13:46:02:ce:81:af:a0:1f:f0:9a:6b:
dd:6a:2b:05:37:f4:9a:60:d9:bf:c4:3c:bb:ab:6a:1e:b6:f4:
38:01:55:08:d8:73:1b:e8:83:0c:64:31:41:b9:22:a1:d2:89:
f5:1d:d1:93:64:90:20:d6:0b:73:7a:f8:c2:32:d1:60:88:fe:
f7:9c:ae:c8:e6:d0:90:f5:71:86:f3:a3:97:44:50:11:15:0d:
0f:40:98:32:f5:a6:cb:1a:ed:0a:59:99:f2:57:11:68:4a:7c:
a0:32:b6:fd:96:73:f5:74:4f:0b:ba:93:e4:53:9f:b7:ac:96:
05:c3:35:c0:5a:0c:cc:44:76:56:1d:c4:2c:c1:42:a7:96:d4:
5a:56:e2:4b:ca:58:bb:1d:e9:d7:4e:40:7a:b8:8a:b6:97:16:
56:c7:80:45:49:56:7a:67:81:cc:c9:b6:d4:57:2b:8b:a1:c4:
64:f4:2b:9f:1f:55:83:a9:e1:07:e6:71:59:8a:f3:50:38:e1:
bc:0d:4d:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 03:29:11 2026 by rpki-client