
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/24b20201-385a-38c8-90b4-64fc391327a2.roa
File: 24b20201-385a-38c8-90b4-64fc391327a2.roa (raw, json)
Hash identifier: eE+I39FExUrJbQrWCtvAD/CoWEO6ivzozwJarhBSGRo=
Subject key identifier: 36:7C:16:7E:51:1E:60:E2:E9:34:7B:6C:17:71:DC:13:D9:94:D0:95
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584CAFBC791CD8279305C91B5C80
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/24b20201-385a-38c8-90b4-64fc391327a2.roa
Signing time: Thu 29 Jan 2026 14:00:40 +0000
ROA not before: Thu 29 Jan 2026 14:00:40 +0000
ROA not after: Wed 29 Apr 2026 13:00:40 +0000
asID: 31898
IP address blocks: 129.153.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Feb 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:af:bc:79:1c:d8:27:93:05:c9:1b:5c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Jan 29 14:00:40 2026 GMT
Not After : Apr 29 13:00:40 2026 GMT
Subject: CN=54fd811b-7f82-4566-8fb3-9eca4933fe79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:fb:e5:3e:4e:2f:d6:e1:0f:c5:db:32:9f:8e:
a0:83:81:32:d2:6d:49:49:b4:29:a6:a3:24:19:b1:
87:88:b0:e4:1d:32:e3:2c:1f:b8:72:c7:63:8e:d9:
fc:0e:11:15:cb:f5:b3:82:99:d2:12:e4:cb:25:8f:
f3:5b:3c:bd:a5:c6:cb:5c:41:23:2f:f5:c4:ad:40:
d1:e9:5e:fd:08:cd:08:61:e5:58:fa:38:35:d0:20:
7f:47:bb:a5:3a:54:43:1b:f4:86:e3:59:b0:21:d8:
39:ad:a3:53:af:61:41:d6:bb:e8:53:85:45:1b:5b:
b7:b4:34:bc:b6:d2:89:10:58:94:f0:79:58:83:6f:
69:58:02:1a:17:ce:b3:bf:da:e5:c5:1a:60:81:44:
22:50:d2:de:bf:38:81:c0:af:d9:b7:56:43:28:f3:
82:7e:93:f2:29:b7:24:e2:d5:92:0a:b3:b0:06:74:
f3:fa:3b:ee:d0:dc:fc:fd:f1:e1:f3:f0:b8:0f:64:
36:ca:ba:37:89:f4:c3:84:9f:6d:52:6c:c9:5d:8b:
93:d7:ab:dc:46:6e:d5:b5:55:88:7a:d7:53:a5:4e:
79:1d:08:ce:64:8c:5f:3a:0f:49:83:42:6a:9a:4f:
6b:cf:04:8a:f4:dc:f5:e7:a3:c1:17:68:a8:98:26:
bc:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:7C:16:7E:51:1E:60:E2:E9:34:7B:6C:17:71:DC:13:D9:94:D0:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/24b20201-385a-38c8-90b4-64fc391327a2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
129.153.192.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:ad:6c:36:2b:de:73:b7:50:67:d6:6a:08:a9:fc:50:22:25:
a7:8b:0a:b8:da:e5:f7:c5:3e:b7:f5:98:f2:83:d2:e0:86:e2:
c7:d5:50:45:f3:83:73:aa:e2:4f:10:8e:18:37:79:41:21:6e:
6a:1b:1a:39:b1:5b:2c:34:2d:b3:cf:68:3f:73:58:d0:f9:c6:
01:c4:af:6c:41:bf:ea:49:30:89:75:8c:77:76:98:92:1d:3d:
00:33:ad:c4:ea:99:06:6b:f8:ce:d3:b0:8f:9e:1b:6f:b0:54:
27:3e:84:14:d2:66:f8:ee:28:fc:79:19:fd:fd:ee:57:32:64:
27:f0:5f:6a:8d:55:e4:7e:cd:3f:17:8f:e2:59:9e:b3:59:2e:
5b:78:bb:e5:63:6c:44:8b:5f:bb:bf:c6:86:df:6d:08:62:0c:
40:f4:c5:d0:a9:71:cb:16:bf:d6:e1:69:83:49:88:1b:52:3b:
27:2e:8f:58:22:97:ff:94:75:99:08:fb:2f:21:20:3c:f6:ec:
50:42:a6:e8:41:2e:09:c0:c8:d4:99:9d:21:fa:4f:64:06:08:
24:13:24:03:62:49:07:1c:93:07:ce:4f:7c:85:d8:10:b4:c5:
4b:de:97:98:6a:7a:1e:08:c2:57:21:e6:5f:b6:ef:9e:bd:e8:
a5:5b:6c:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 03:29:31 2026 by rpki-client