
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/13ae36b0-98f9-32ca-923c-5567474290df.roa
File: 13ae36b0-98f9-32ca-923c-5567474290df.roa (raw, json)
Hash identifier: 15+isgWKr4Pr/sQZNu8lKGPWlOvC+iWQxI2WKLCF5Tc=
Subject key identifier: B6:1E:E2:86:43:6B:8E:34:07:6E:5E:E9:48:22:B3:35:BB:2D:10:66
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584CAE56FF8CD4878E63584577A0
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/13ae36b0-98f9-32ca-923c-5567474290df.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 31898
IP address blocks: 129.148.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Feb 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:56:ff:8c:d4:87:8e:63:58:45:77:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=28d3fe84-deca-4067-adb6-3d5be4275d05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:90:02:c8:30:c6:09:26:49:a8:4a:cd:ae:9f:
da:55:0d:ac:1f:7d:04:41:2b:da:86:21:d0:58:4e:
c3:98:cd:28:60:f6:a2:63:d4:23:3a:d6:8f:a6:30:
39:e5:de:c5:1e:88:13:23:81:f8:cc:4e:80:0f:f6:
28:db:ab:ae:3f:0b:14:62:da:9d:9c:2c:7a:43:2e:
12:17:13:f0:bc:24:a6:a2:b2:0a:4a:aa:a2:ee:4a:
34:f0:41:5a:3a:15:e7:49:95:72:71:d9:0d:af:33:
20:46:55:d5:d3:1d:66:ca:5a:1e:af:ac:2c:95:50:
74:67:90:14:0e:a6:b8:64:41:80:e7:a1:d6:fa:1d:
25:a4:68:e8:58:d8:ff:d2:5d:eb:87:82:5b:f0:ec:
05:17:1f:94:dd:b5:19:6b:41:7f:9e:64:e2:62:08:
cd:86:c3:69:a2:6e:e3:fe:88:55:7e:ee:41:2e:49:
19:d7:49:17:77:0c:7a:2e:fa:f0:06:52:ac:22:c7:
c2:36:0f:d2:af:28:8d:6e:83:fc:b7:0f:55:31:4b:
b3:ae:39:18:88:5c:4d:d6:39:fa:68:77:7f:29:3a:
89:9d:0f:c1:1e:34:25:8c:81:dd:40:be:06:bd:a8:
d8:57:c5:1e:98:eb:2d:5b:ab:02:d9:90:28:fd:a5:
88:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:1E:E2:86:43:6B:8E:34:07:6E:5E:E9:48:22:B3:35:BB:2D:10:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/13ae36b0-98f9-32ca-923c-5567474290df.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
129.148.32.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:c6:f5:79:22:aa:54:46:01:de:4e:70:ac:e5:50:2d:4b:b0:
5d:d1:4a:de:66:31:34:06:be:0b:6f:56:88:e5:85:f7:3e:4a:
1a:f9:5c:08:55:25:08:23:c9:b5:01:da:dc:96:75:90:c6:b8:
35:1b:ff:27:90:89:4e:3b:4a:63:2b:7c:d3:27:9a:91:84:16:
78:3a:14:44:41:4a:60:6e:b0:6d:fa:63:43:ab:2e:32:9f:6d:
1c:58:f8:cb:c4:0f:69:2e:48:83:87:11:df:f0:8e:7d:cc:a7:
13:0c:82:dc:e1:d2:31:29:a5:f7:04:a8:de:ed:94:0f:98:27:
09:04:53:03:df:55:63:26:51:38:51:2b:7b:f9:34:7a:fd:2e:
8b:67:12:d2:cb:e3:79:00:71:21:9d:3f:65:63:ea:0a:44:fb:
5e:79:21:07:fe:12:aa:6b:8a:04:38:35:47:ed:22:22:23:84:
47:ad:d6:f0:63:27:d2:46:d2:ae:8d:97:1c:01:5e:40:6d:00:
fc:ff:44:19:e7:0a:ee:66:bb:75:6e:e0:d6:6f:aa:e0:a4:4e:
b3:bc:31:ad:db:89:1c:54:01:1b:7e:79:01:69:c4:10:bc:4e:
e5:83:8c:ae:26:b0:10:22:d4:27:3f:34:a8:3e:56:5c:7f:76:
77:27:04:a3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuVv+M1IeOY1hFd6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk
MjhkM2ZlODQtZGVjYS00MDY3LWFkYjYtM2Q1YmU0Mjc1ZDA1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJACyDDGCSZJqErNrp/aVQ2sH30EQSvahiHQ
WE7DmM0oYPaiY9QjOtaPpjA55d7FHogTI4H4zE6AD/Yo26uuPwsUYtqdnCx6Qy4S
FxPwvCSmorIKSqqi7ko08EFaOhXnSZVycdkNrzMgRlXV0x1myloer6wslVB0Z5AU
Dqa4ZEGA56HW+h0lpGjoWNj/0l3rh4Jb8OwFFx+U3bUZa0F/nmTiYgjNhsNpom7j
/ohVfu5BLkkZ10kXdwx6LvrwBlKsIsfCNg/SryiNboP8tw9VMUuzrjkYiFxN1jn6
aHd/KTqJnQ/BHjQljIHdQL4GvajYV8UemOstW6sC2ZAo/aWIcwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLYe4oZDa440B25e6UgiszW7LRBmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMTNhZTM2YjAtOThmOS0z
MmNhLTkyM2MtNTU2NzQ3NDI5MGRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFgZQgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKXG9XkiqlRGAd5OcKzlUC1LsF3RSt5mMTQGvgtvVojlhfc+Shr5XAhV
JQgjybUB2tyWdZDGuDUb/yeQiU47SmMrfNMnmpGEFng6FERBSmBusG36Y0OrLjKf
bRxY+MvED2kuSIOHEd/wjn3MpxMMgtzh0jEppfcEqN7tlA+YJwkEUwPfVWMmUThR
K3v5NHr9LotnEtLL43kAcSGdP2Vj6gpE+155IQf+EqprigQ4NUftIiIjhEet1vBj
J9JG0q6NlxwBXkBtAPz/RBnnCu5mu3Vu4NZvquCkTrO8Ma3biRxUARt+eQFpxBC8
TuWDjK4msBAi1Cc/NKg+Vlx/dncnBKM=
-----END CERTIFICATE-----
Generated at Thu Feb 26 03:30:33 2026 by rpki-client