
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2df29342-5617-35c3-931f-39813eb37d1e.roa
File: 2df29342-5617-35c3-931f-39813eb37d1e.roa (raw, json)
Hash identifier: j2O9H8agkXfVd+hemb39uviHBpJ4ddn06nrCyEQWsKc=
Subject key identifier: 31:47:EB:CE:4A:33:21:6C:97:80:48:16:D7:FC:97:CA:43:24:73:EC
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584CAE5EB9AB21F1EC60BBC502E0
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2df29342-5617-35c3-931f-39813eb37d1e.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 31898
IP address blocks: 130.61.80.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Feb 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:5e:b9:ab:21:f1:ec:60:bb:c5:02:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=e646420f-7231-46f7-bd47-95647c5d47ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:13:2d:4e:d8:f9:37:39:fe:ac:60:4a:db:e2:
1a:c0:86:f9:c7:db:c5:a5:47:d6:ba:a3:c9:a0:4f:
4c:30:c8:28:f2:40:fa:cc:fe:b7:ee:85:bf:c9:19:
d3:66:a2:8a:99:53:0f:90:ca:43:82:c4:22:39:b7:
b6:b4:e3:1a:59:8a:35:2b:9f:12:7a:07:94:52:c1:
49:45:be:4e:71:c9:99:01:a0:14:d0:c9:13:a2:09:
94:00:3f:96:48:95:56:b4:e7:f0:af:f4:eb:fe:5c:
5d:04:d8:74:d8:0e:8c:ca:5f:47:5e:4b:e7:76:48:
06:52:51:33:3c:15:89:1f:32:ef:92:58:6d:cd:b0:
c0:5a:e1:3b:bd:8a:bf:ef:84:14:ed:88:d2:39:8d:
74:5d:e2:f9:23:00:34:ed:ae:48:fd:2e:22:64:3a:
0c:72:da:a4:7f:5d:56:3a:0d:5e:68:5e:f1:42:b1:
85:8d:07:35:1f:56:f4:47:3c:a7:8c:d4:30:35:a3:
97:72:96:ae:b2:3e:29:28:a4:b5:76:7f:a4:0a:96:
3e:94:32:9d:b3:13:e0:06:49:e4:f8:e2:81:ed:03:
db:85:b7:ed:2e:f3:12:d3:5b:26:f5:89:00:40:a3:
a9:22:cd:75:38:b5:19:c8:ae:67:60:cf:29:a5:f0:
34:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:47:EB:CE:4A:33:21:6C:97:80:48:16:D7:FC:97:CA:43:24:73:EC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/2df29342-5617-35c3-931f-39813eb37d1e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
130.61.80.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:04:6f:2f:ee:74:be:8f:55:bf:e0:64:85:57:15:58:41:8e:
15:cc:9e:d3:aa:a7:0e:37:e5:31:16:d0:68:66:2b:84:fc:45:
5f:94:74:6b:04:90:61:70:17:e1:02:b1:92:13:e4:dd:e7:34:
3f:f6:d4:f5:09:7c:13:d1:42:66:10:83:c8:eb:f9:e2:bd:e3:
33:ce:b1:58:b2:69:ba:2d:b4:6f:b7:41:f3:72:6e:f9:0f:4c:
df:a3:b9:0f:4c:02:4e:ec:c4:73:e3:d8:e6:e0:ec:68:d1:dd:
24:fd:1e:b1:7e:e5:44:32:94:e6:a4:0b:79:02:f2:61:40:d8:
de:2a:d5:06:4c:72:d2:6e:c6:84:e9:b1:97:03:c0:6e:c4:08:
0d:a0:7a:43:8f:62:6e:f9:77:29:27:cf:f3:b6:51:e2:ec:7e:
2b:e2:93:50:49:86:56:dd:eb:89:40:c8:ca:c8:71:62:6a:59:
2e:f0:76:a6:30:e7:ac:1d:1c:13:58:e5:51:c6:bc:4f:d1:15:
78:dd:e2:fd:39:10:43:1c:f6:b7:b8:d3:74:ce:23:02:18:50:
a9:3c:fc:39:60:73:2d:6c:ab:dc:c2:92:91:3e:7f:37:17:5a:
d3:3c:c0:1f:7e:8e:47:a4:ac:dd:e6:bf:d9:2e:a8:a3:7e:8f:
e3:95:4f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 03:29:15 2026 by rpki-client