
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/50859c60-607a-3711-adec-0a0ebf73d696.roa
File: 50859c60-607a-3711-adec-0a0ebf73d696.roa (raw, json)
Hash identifier: et056i2ssIX066EioOS5VAYEVqt4odN1i/JUFLuG/uY=
Subject key identifier: FB:76:F8:45:BC:F2:E9:5D:6F:5B:1A:45:26:48:0B:09:4A:CD:55:DE
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584E6F3EC24C061CA9EA73B185C0
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/50859c60-607a-3711-adec-0a0ebf73d696.roa
Signing time: Wed 08 Jul 2026 21:00:12 +0000
ROA not before: Wed 08 Jul 2026 21:00:12 +0000
ROA not after: Tue 06 Oct 2026 21:00:12 +0000
asID: 31898
IP address blocks: 129.159.240.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 14 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:6f:3e:c2:4c:06:1c:a9:ea:73:b1:85:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Jul 8 21:00:12 2026 GMT
Not After : Oct 6 21:00:12 2026 GMT
Subject: CN=35292ee8-1a22-47be-889c-e17e63869cbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:62:5c:bc:e2:41:f8:61:9d:93:ad:89:65:ae:
06:7a:6f:3e:75:f6:45:56:01:43:67:ac:f7:fa:8a:
bb:5c:0b:b7:8e:95:86:38:40:e2:c0:24:2e:b1:1d:
14:d1:d1:30:c2:c0:60:c3:00:ad:d0:7a:7c:73:43:
06:20:42:ad:0b:4d:87:9e:c8:be:01:41:97:df:24:
52:8b:25:25:0b:be:18:ce:1f:25:0f:63:1d:00:96:
a9:48:63:a6:f5:c3:05:d0:21:b0:6a:7c:d2:d4:78:
2d:58:e8:60:bd:10:6b:d2:f1:0e:d7:a2:91:0c:71:
55:f4:32:ff:74:b2:3e:b4:e5:34:e9:db:5a:59:fe:
24:97:ec:0e:e3:8d:ef:cb:be:c6:36:2b:cb:ab:6e:
c8:31:52:70:35:8e:6a:2c:d1:4e:0d:96:40:1d:0e:
ba:c4:a9:01:d4:16:5b:0b:50:11:71:15:e6:11:79:
68:6e:a3:24:cc:c9:34:8e:be:03:39:58:a0:a0:b4:
87:04:24:9c:f3:d4:50:1b:4a:98:da:31:ae:da:2d:
a2:f9:c7:65:20:60:29:3a:86:6c:48:95:4f:7f:1d:
04:30:eb:05:0f:17:dd:a5:06:c4:13:fa:b0:9a:f3:
09:56:bc:75:47:1c:eb:6e:ef:81:f0:ad:46:8f:76:
b8:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:76:F8:45:BC:F2:E9:5D:6F:5B:1A:45:26:48:0B:09:4A:CD:55:DE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/50859c60-607a-3711-adec-0a0ebf73d696.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
129.159.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:c1:5c:15:a6:94:26:7f:de:19:52:aa:db:53:9f:98:5f:3d:
f6:a8:71:2c:9b:1e:4b:f1:c2:f1:85:01:ee:e8:2f:da:87:b1:
f7:15:32:d3:16:90:d2:e1:18:35:7a:a1:3c:bf:9b:26:39:bf:
f3:7a:19:19:6c:41:ae:b5:ff:77:97:27:1c:d7:db:31:bd:d7:
bf:d1:74:f3:f1:69:c8:a6:e2:16:02:10:5d:b6:29:46:07:20:
17:10:fc:41:c5:32:1b:07:9c:b6:6b:56:e7:bd:58:06:60:cd:
f0:3c:93:65:06:58:a5:42:89:b3:c7:56:52:35:07:5f:37:71:
f7:6d:aa:49:3e:c6:a6:cb:6f:9e:63:89:2c:65:cc:c6:d4:7e:
49:fe:1b:74:64:e5:b3:a1:a2:c9:4d:95:1b:50:ea:45:02:97:
34:5f:3e:52:e1:3c:07:56:7a:34:ec:a3:9a:c2:75:bd:9c:10:
87:2e:46:71:51:1a:c9:47:5b:bd:78:dd:e7:47:49:ef:aa:0f:
9b:7e:ed:af:a0:29:fe:34:fc:56:df:79:a9:5c:d8:c8:bd:2d:
d1:dc:c4:ff:a6:71:96:18:0a:13:81:d0:5d:b4:ec:ce:2b:af:
1b:cc:d0:45:d4:41:d7:82:33:ad:67:87:a4:e1:11:52:b1:db:
d3:6f:9b:51
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5vPsJMBhyp6nOxhcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk
MzUyOTJlZTgtMWEyMi00N2JlLTg4OWMtZTE3ZTYzODY5Y2JiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhGJcvOJB+GGdk62JZa4Gem8+dfZFVgFDZ6z3
+oq7XAu3jpWGOEDiwCQusR0U0dEwwsBgwwCt0Hp8c0MGIEKtC02Hnsi+AUGX3yRS
iyUlC74Yzh8lD2MdAJapSGOm9cMF0CGwanzS1HgtWOhgvRBr0vEO16KRDHFV9DL/
dLI+tOU06dtaWf4kl+wO443vy77GNivLq27IMVJwNY5qLNFODZZAHQ66xKkB1BZb
C1ARcRXmEXlobqMkzMk0jr4DOVigoLSHBCSc89RQG0qY2jGu2i2i+cdlIGApOoZs
SJVPfx0EMOsFDxfdpQbEE/qwmvMJVrx1Rxzrbu+B8K1Gj3a4+QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPt2+EW88uldb1saRSZICwlKzVXeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNTA4NTljNjAtNjA3YS0z
NzExLWFkZWMtMGEwZWJmNzNkNjk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEgZ/wMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADjBXBWmlCZ/3hlSqttTn5hfPfaocSybHkvxwvGFAe7oL9qHsfcVMtMW
kNLhGDV6oTy/myY5v/N6GRlsQa61/3eXJxzX2zG917/RdPPxacim4hYCEF22KUYH
IBcQ/EHFMhsHnLZrVue9WAZgzfA8k2UGWKVCibPHVlI1B183cfdtqkk+xqbLb55j
iSxlzMbUfkn+G3Rk5bOhoslNlRtQ6kUClzRfPlLhPAdWejTso5rCdb2cEIcuRnFR
GslHW7143edHSe+qD5t+7a+gKf40/Fbfealc2Mi9LdHcxP+mcZYYChOB0F207M4r
rxvM0EXUQdeCM61nh6ThEVKx29Nvm1E=
-----END CERTIFICATE-----
Generated at Mon Jul 13 02:50:54 2026 by rpki-client