
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/21676b13-d821-3210-afaf-f5fd2bd412bc.roa
File: 21676b13-d821-3210-afaf-f5fd2bd412bc.roa (raw, json)
Hash identifier: 0rlPR9AVydBklNrQqtK4SFPQZgoQpdo4sYP36HNegyc=
Subject key identifier: 95:D1:71:FA:81:C7:2F:28:73:82:39:73:2F:7F:F4:07:89:80:9E:33
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584EF1822D28D07918E6A8F75080
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/21676b13-d821-3210-afaf-f5fd2bd412bc.roa
Signing time: Mon 24 Aug 2026 13:00:12 +0000
ROA not before: Mon 24 Aug 2026 13:00:12 +0000
ROA not after: Sun 22 Nov 2026 14:00:12 +0000
asID: 31898
IP address blocks: 129.213.132.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 29 Aug 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:f1:82:2d:28:d0:79:18:e6:a8:f7:50:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Aug 24 13:00:12 2026 GMT
Not After : Nov 22 14:00:12 2026 GMT
Subject: CN=b822aaae-7dbd-46f7-b727-8701ac642a42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:36:74:eb:b3:f3:74:18:17:74:69:d5:a8:ec:
92:7b:25:3d:ef:f0:cd:55:43:14:0d:b5:d2:b9:48:
e4:ab:26:c8:c5:a3:d6:51:52:2b:3d:44:8f:8e:5b:
22:ba:5c:84:9f:33:ea:00:16:87:3e:1c:fb:6e:87:
54:02:42:37:81:80:dd:8b:94:ee:74:c8:be:f3:6f:
12:8d:7c:bf:2b:02:d4:f9:94:ed:99:ec:d7:30:7e:
3d:0e:9b:c6:46:f8:7b:b2:48:ae:1e:29:46:dc:91:
b1:aa:36:fc:1a:d9:06:16:90:ab:bd:93:c8:21:85:
57:54:97:62:00:54:e7:3f:0c:46:6c:72:c6:01:a0:
31:08:d5:60:03:1e:ad:e4:c7:d7:df:d7:35:2c:4f:
88:38:8c:3c:fc:18:64:ba:57:86:99:f0:d5:66:1b:
1c:3f:27:07:b6:90:92:a6:d5:7d:b4:bb:2e:c2:85:
bd:aa:86:bd:d5:90:20:69:36:f9:eb:7a:2c:3a:8f:
21:51:20:37:59:00:4e:2c:8a:44:ed:6e:1c:5c:ce:
a3:0d:d9:f1:3a:d1:96:08:01:a3:03:e3:a2:49:6a:
89:93:89:dd:58:fd:9b:c7:f6:82:8d:d5:ec:65:b2:
e3:3e:d5:aa:cf:4a:d3:dd:b3:ff:98:6c:e3:c6:e4:
6d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:D1:71:FA:81:C7:2F:28:73:82:39:73:2F:7F:F4:07:89:80:9E:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/21676b13-d821-3210-afaf-f5fd2bd412bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
129.213.132.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:02:ea:bf:e7:17:0c:02:88:b6:84:2d:f1:3b:07:23:73:59:
5c:5a:d3:db:3a:66:e6:31:e4:cc:62:09:42:91:d1:80:81:62:
a5:c0:32:91:6a:fd:8d:f0:34:ea:4a:be:ce:08:38:91:42:91:
04:c7:e0:11:0a:4a:4d:d7:ce:ad:91:96:18:2a:5a:6c:e4:39:
b5:39:56:ad:e7:2e:ea:da:16:4f:57:ea:58:59:c2:7e:ed:92:
29:72:d5:94:d3:3f:45:bc:0a:e2:30:2d:4b:fc:31:ba:b6:e0:
e3:aa:80:4a:62:3a:bb:94:e9:7d:f9:17:9a:9b:65:89:1d:00:
fd:06:3f:d0:06:d9:b3:58:3b:77:64:40:bc:15:b2:10:e2:d5:
1c:52:b6:8a:b7:1f:fd:4e:16:ce:bd:20:2a:95:30:46:e9:72:
d5:3d:7b:7e:04:4a:14:4b:95:ad:2d:f6:37:fc:e8:6b:73:85:
33:43:70:a3:de:ac:56:07:ff:0c:e4:12:10:39:a5:94:06:d8:
e6:3b:ca:5e:de:0f:d2:3a:e3:fa:9d:29:a0:b8:cd:b1:3f:0c:
7c:ba:2f:ad:35:ad:65:73:55:5e:76:31:1e:f7:3c:b9:72:f5:
3b:f1:80:f8:41:05:5f:41:2e:73:b8:49:da:30:91:7d:5e:07:
48:0b:07:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 12:33:41 2026 by rpki-client