
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/49687e2e-2575-328d-b3fe-277601587b8e.roa
File: 49687e2e-2575-328d-b3fe-277601587b8e.roa (raw, json)
Hash identifier: 2NmHYeD28jml5bKSaQDhP4V4fMEXAK1SxexPeVPrDxY=
Subject key identifier: 8D:F4:82:45:52:84:0B:A8:7D:1C:BC:F2:F8:3E:BC:09:37:D5:AE:BA
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584CAA270448E64183E1772D67C0
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/49687e2e-2575-328d-b3fe-277601587b8e.roa
Signing time: Tue 27 Jan 2026 14:00:36 +0000
ROA not before: Tue 27 Jan 2026 14:00:36 +0000
ROA not after: Mon 27 Apr 2026 13:00:36 +0000
asID: 31898
IP address blocks: 129.91.4.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Feb 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:aa:27:04:48:e6:41:83:e1:77:2d:67:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Jan 27 14:00:36 2026 GMT
Not After : Apr 27 13:00:36 2026 GMT
Subject: CN=7cd457ea-94fe-4125-bc1b-9fe7207b7662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:64:90:51:b7:45:b0:d4:dc:c7:f5:1b:6f:40:
4c:9c:8c:76:a9:fc:1b:49:c1:d1:1f:49:c2:ce:7b:
81:aa:ca:e2:be:60:38:c9:f5:80:b6:44:36:a4:e3:
49:33:49:72:b5:72:cb:bf:4e:56:26:36:15:8b:c2:
c2:fd:32:a3:da:c5:fd:15:2f:8b:b1:1b:c4:2a:96:
2a:56:6e:52:e2:83:58:6f:09:27:9f:64:b1:d5:ee:
23:75:40:4c:b5:92:94:03:e3:02:4e:aa:e4:c4:66:
ca:ca:c3:4b:f8:42:f0:5f:ef:04:6f:f4:f0:51:23:
49:72:41:dc:84:10:88:e2:4a:f2:47:14:fa:66:b6:
94:ab:69:c5:3d:b8:d1:5f:b2:68:23:9e:64:0b:a7:
dc:74:e4:c4:a2:be:c5:e8:09:12:4c:7e:bb:5a:90:
d1:0f:23:d0:ab:70:d5:fc:eb:d0:c9:27:1a:8d:dc:
75:ab:6a:db:8c:89:01:b7:2e:5e:97:d0:f2:8a:4d:
c7:57:e1:a9:83:70:43:dc:1e:e9:71:7d:b8:1b:c3:
0b:d9:a8:cc:43:2d:1d:bf:2e:bc:d5:8a:9c:cb:bb:
b9:cd:11:28:d4:68:b6:13:e4:92:84:e1:83:d5:30:
87:ee:82:8f:20:ba:15:fe:2b:15:c8:0c:71:93:4b:
51:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:F4:82:45:52:84:0B:A8:7D:1C:BC:F2:F8:3E:BC:09:37:D5:AE:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/49687e2e-2575-328d-b3fe-277601587b8e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
129.91.4.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:2b:cd:b0:7d:d2:16:a8:a4:2e:bc:41:11:e5:6f:a3:da:a3:
ca:09:f8:15:56:1b:a2:ba:d2:9d:58:54:54:a5:ae:eb:a0:14:
54:41:ab:da:26:0a:96:c3:73:32:84:45:03:81:04:8a:9f:2d:
9c:96:0d:b4:bb:8b:ce:24:6a:c1:ef:4b:f0:da:fb:d8:7f:cd:
85:f8:eb:d9:da:88:b2:73:4b:02:d3:46:0b:db:2f:47:70:c8:
7b:68:99:be:fe:b0:d1:2f:9e:ef:9d:2b:21:59:c7:85:9e:34:
0b:b3:b0:e6:44:e5:b6:a7:08:25:29:1b:a6:e0:c5:ae:0b:4b:
33:90:63:eb:04:b4:d0:b5:51:91:0d:b4:8e:54:b9:3c:3d:f4:
3b:f5:87:63:68:22:65:31:60:f3:5b:4b:a6:6b:ae:a9:ef:ac:
72:d4:45:75:56:24:6d:ed:60:15:e5:dc:ec:42:7f:e5:34:aa:
03:88:51:da:ec:43:8b:6b:fb:22:6a:7d:52:a2:26:15:9d:21:
ae:70:bb:b8:32:fe:b9:18:5e:87:74:0c:f9:17:4e:1a:6b:70:
46:87:89:52:d3:5e:18:05:0b:02:f7:f6:fc:be:88:d6:97:19:
f5:21:a4:96:8d:43:1d:43:a0:10:1b:9b:1f:9a:0b:64:9b:da:
7a:ba:55:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 03:26:33 2026 by rpki-client