
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/19928233-6d2f-37ae-9fb3-1f6627892861.roa
File: 19928233-6d2f-37ae-9fb3-1f6627892861.roa (raw, json)
Hash identifier: ap/CLR5rc/sIpMu98+XALvZOxyN7gUitdB4uWs0AeLU=
Subject key identifier: FB:45:63:E8:D8:1D:9A:A1:92:39:B6:B1:48:E1:02:2D:AB:1E:A0:40
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584EB2B1AF515186BE20CB486F00
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/19928233-6d2f-37ae-9fb3-1f6627892861.roa
Signing time: Sun 02 Aug 2026 01:00:11 +0000
ROA not before: Sun 02 Aug 2026 01:00:11 +0000
ROA not after: Sat 31 Oct 2026 01:00:11 +0000
asID: 31898
IP address blocks: 129.91.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 29 Aug 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:b2:b1:af:51:51:86:be:20:cb:48:6f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Aug 2 01:00:11 2026 GMT
Not After : Oct 31 01:00:11 2026 GMT
Subject: CN=61973b3e-78ec-4e64-94ff-634b5ffb4aca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:1e:d9:af:1e:2e:da:08:3c:5f:b6:b9:b8:31:
c5:86:fa:bb:52:3e:de:91:af:2b:89:0b:64:97:1c:
92:56:27:5b:80:bb:a9:b2:8e:2f:d2:bd:b9:5b:82:
52:ca:23:99:f5:3c:e8:86:ad:e9:9e:15:41:b8:91:
0a:1f:03:3f:53:11:ec:a3:62:59:0b:d0:cf:6c:ca:
17:ca:89:16:4b:63:4a:97:a3:d3:bd:29:52:23:c8:
68:ef:cc:78:45:cd:5f:f6:68:32:29:eb:bd:ef:6d:
86:1a:1b:df:28:02:f6:fc:3e:a8:7a:2d:40:8c:2f:
09:1a:4c:b3:ba:ad:30:86:a4:7f:47:bb:db:76:d0:
38:6f:0c:44:e2:37:01:37:23:cd:03:49:6d:2d:7b:
b3:67:3d:0e:b6:f0:61:5b:21:5d:e4:2f:67:0d:57:
dd:74:ab:6b:a1:bf:e2:5f:63:d0:70:4d:16:27:aa:
fd:8c:57:6b:2c:9f:69:f0:89:30:50:2c:f8:73:ab:
9c:b4:4e:ee:00:9a:63:f8:5f:f2:fd:59:68:e0:03:
33:32:b6:71:8e:41:91:d0:3e:a0:8b:09:c9:61:77:
ce:bc:88:3f:a1:93:da:47:96:25:6d:85:01:13:b7:
d7:39:ee:eb:77:a1:ed:3d:f9:88:a9:f9:35:43:85:
b1:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:45:63:E8:D8:1D:9A:A1:92:39:B6:B1:48:E1:02:2D:AB:1E:A0:40
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/19928233-6d2f-37ae-9fb3-1f6627892861.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
129.91.2.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:4e:ec:4a:b9:04:4b:bd:d2:35:6b:c6:ea:58:3d:e8:47:ff:
3a:75:e0:f0:2e:bc:be:fb:02:55:34:a8:b3:8b:8a:e2:2b:5a:
91:4f:2e:6b:c4:d2:46:1e:75:0d:f1:4e:85:ba:76:5c:00:71:
98:14:5b:14:de:03:13:32:4f:04:62:c2:80:7d:f0:3f:3f:0d:
c8:d8:25:7c:03:b0:11:c1:25:1f:60:cb:0b:5f:73:6d:7f:9b:
ea:bb:75:8e:ec:3a:35:5f:5a:6d:d1:7b:65:24:51:d2:18:c5:
bc:76:35:76:26:fa:97:87:9c:bb:9e:df:2b:46:e4:03:da:7f:
d4:a0:2d:4d:ba:de:2b:d9:76:b1:1e:85:bb:08:46:43:2e:65:
4d:80:1c:ee:44:49:cd:1f:0d:07:d9:a0:c4:3f:79:09:44:07:
2f:2c:08:41:54:ef:91:d8:69:80:d5:a6:39:be:df:c5:f9:4b:
e2:c8:22:f8:26:4a:e3:10:24:4d:7a:ed:5b:f9:a6:3a:9b:18:
7f:a9:b1:6f:1e:01:f8:16:8a:6f:96:5d:b0:fa:ca:50:cd:25:
66:bd:71:78:62:9d:96:fc:8c:50:6a:f9:44:97:41:13:63:4f:
11:3a:68:63:c7:24:c8:b5:03:df:5a:f8:d8:2c:93:cb:7b:b1:
ec:df:b8:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 12:31:49 2026 by rpki-client