
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/36d28d8a-6795-3085-bde6-a93fcc335348.roa
File: 36d28d8a-6795-3085-bde6-a93fcc335348.roa (raw, json)
Hash identifier: 2K6JgQDk9PvMkBZX1zk61xTUy51M+1IHuV2nV7pwCkQ=
Subject key identifier: A6:92:C8:AB:2A:36:C8:E5:C4:6F:10:81:24:16:D1:1C:D6:E2:AA:40
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584CAE5E804C90A86C6578397080
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/36d28d8a-6795-3085-bde6-a93fcc335348.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 31898
IP address blocks: 130.61.98.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Feb 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:5e:80:4c:90:a8:6c:65:78:39:70:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=c5eb4abc-938f-4414-b2e4-98ad18c395a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3c:cd:f1:cb:94:48:f3:97:80:38:87:9d:52:
9a:e7:3d:ec:62:0c:38:39:f7:0c:47:1e:fa:14:a8:
41:4c:bb:b6:67:d7:be:86:6c:77:52:b2:88:c0:64:
84:73:5d:6c:df:94:55:63:ef:59:37:e1:9e:ec:16:
42:72:24:f6:9a:a5:fe:1f:f0:45:04:6c:69:3e:90:
6d:18:27:89:c2:65:f8:54:d2:ca:cb:42:c3:70:7e:
28:37:df:10:d5:c2:80:9f:4b:31:7c:d0:7b:82:80:
60:1f:ae:a7:c2:66:72:d2:9f:6b:4f:eb:89:b9:60:
a6:e8:a9:31:4d:6b:64:fc:15:fc:f3:96:78:a2:c8:
80:85:a8:6e:b4:a2:ef:99:ed:04:67:f9:f9:22:42:
fe:ec:f1:6f:cb:f5:1f:0a:1e:b5:8e:27:03:29:7c:
c4:08:fc:1f:86:d1:b8:3f:cf:26:d9:a3:50:11:2a:
be:94:fc:a8:94:df:ae:fb:d0:f7:97:48:5b:d6:26:
9b:24:92:c6:f7:ee:76:fd:dd:5e:a8:a6:d2:03:15:
d2:0b:c7:76:dc:6f:b0:61:4d:30:52:cc:00:83:4b:
37:d8:49:2e:2d:8b:f4:d3:57:02:fe:c9:e7:f2:7a:
2d:9b:b1:ff:27:9f:7a:d3:b1:58:d3:4d:11:65:b6:
6b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:92:C8:AB:2A:36:C8:E5:C4:6F:10:81:24:16:D1:1C:D6:E2:AA:40
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/36d28d8a-6795-3085-bde6-a93fcc335348.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
130.61.98.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:4a:1a:92:06:9a:a8:8f:94:c8:91:a0:77:cc:7d:71:e3:4e:
7f:63:e3:5c:f1:d9:d2:a3:4f:a4:72:94:1c:b5:8b:72:b1:a6:
66:56:07:6d:a7:2a:79:33:74:4c:42:48:3c:bb:54:49:6c:f1:
3f:b8:84:6f:1e:46:c8:f7:56:9f:68:37:b9:21:06:9c:e2:08:
5b:e4:fa:64:5b:83:1b:c5:fa:65:e4:00:52:67:7a:be:24:f1:
78:a0:be:88:51:59:3a:a2:e3:9b:a1:5d:89:df:bb:17:c5:dc:
9b:f5:37:15:aa:42:72:b0:49:aa:80:52:1a:9b:19:e2:ea:72:
83:3f:a0:35:60:59:8e:26:ca:6e:bc:b5:7d:27:69:c2:c3:19:
22:1b:0d:16:cd:6f:cb:8b:a3:27:31:88:c2:c2:44:93:04:d8:
73:7d:22:23:18:f8:66:a9:b5:a2:e5:00:cb:da:c5:e6:b6:f0:
3e:9b:eb:77:11:59:8a:9e:15:11:1e:f1:43:6e:43:cb:78:04:
02:a6:ce:fd:a9:6d:bf:cc:5e:de:ac:87:23:62:17:3c:ee:74:
64:49:11:83:8d:70:82:b4:b8:cc:b6:65:e3:06:83:d2:9e:e4:
28:d5:12:3f:9d:9d:88:06:12:08:3d:3e:79:06:d0:34:15:51:
b7:95:55:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 03:27:48 2026 by rpki-client