
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5ae932d6-6f49-3f87-9fd1-6720bb0228ce.roa
File: 5ae932d6-6f49-3f87-9fd1-6720bb0228ce.roa (raw, json)
Hash identifier: 6iKZEEnDg7K4tc0CUdijW2t5JqHUqWgiF0jxGB0iaAs=
Subject key identifier: B3:52:B0:FD:AA:57:A7:66:E6:02:5B:14:4D:D4:01:9C:C8:81:15:C3
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584E4F1F31CCF237AD18B0E7C400
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5ae932d6-6f49-3f87-9fd1-6720bb0228ce.roa
Signing time: Sat 27 Jun 2026 09:00:12 +0000
ROA not before: Sat 27 Jun 2026 09:00:12 +0000
ROA not after: Fri 25 Sep 2026 09:00:12 +0000
asID: 31898
IP address blocks: 193.122.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 14 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:4f:1f:31:cc:f2:37:ad:18:b0:e7:c4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Jun 27 09:00:12 2026 GMT
Not After : Sep 25 09:00:12 2026 GMT
Subject: CN=b7e03516-a078-4664-bb5e-913c1585dc99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:63:f5:5c:8e:33:e3:7a:f6:62:d8:f1:50:6e:
65:4f:ca:5d:ba:5e:5e:f9:e1:4a:b8:c5:56:31:42:
9f:a4:d2:bb:4c:ee:2b:79:81:ea:47:2f:c0:e6:c5:
df:d1:14:54:7a:4c:ad:64:98:71:31:78:f5:7f:ab:
5f:52:7a:50:36:09:64:07:4c:e0:35:4e:cd:00:ed:
37:7d:12:95:08:f7:4f:88:26:b0:0d:12:9b:4f:6f:
06:29:a6:d2:2f:cb:0f:97:53:87:58:3c:9d:ef:63:
83:1e:3b:e1:b2:70:df:d2:49:20:31:f3:97:6f:ab:
41:eb:f7:b3:42:19:58:3e:34:91:60:13:04:3d:e6:
fd:67:87:9f:09:69:98:41:e9:57:d2:fe:19:e1:c5:
a3:41:ba:2a:76:a4:e6:72:99:5a:01:8a:ee:9e:ac:
d6:98:d7:21:66:a3:3a:13:13:ca:d8:50:1a:50:c4:
8f:3f:9c:62:fd:42:9c:a7:13:1c:1b:18:cd:15:b3:
e9:95:12:5e:a3:a4:2a:2b:76:45:0d:91:68:9e:26:
33:67:d3:7e:33:a4:51:9d:4f:5a:e5:31:e9:31:23:
9d:1b:20:39:b4:aa:66:d6:98:2a:d7:ee:d3:f1:2a:
95:54:f5:0c:9e:8f:f5:b5:19:56:78:30:f0:73:ea:
36:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:52:B0:FD:AA:57:A7:66:E6:02:5B:14:4D:D4:01:9C:C8:81:15:C3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/5ae932d6-6f49-3f87-9fd1-6720bb0228ce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
193.122.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:ba:29:2f:9f:de:22:d3:cf:7d:d0:6f:bb:e0:20:23:72:b5:
05:74:21:ae:dd:8e:e3:4f:b2:79:c2:d1:6b:36:68:33:cd:b4:
2e:f0:08:81:26:46:7d:c6:21:48:75:0d:19:df:2b:41:8b:1a:
a1:8b:13:e7:2a:ff:f7:5d:6d:a8:58:f3:7f:f4:f6:3d:46:7b:
59:60:32:28:ca:7c:08:58:c3:10:77:90:8d:32:d8:15:68:f8:
66:20:f3:02:b6:7a:d4:5d:1f:75:6d:29:b9:e6:86:a0:f6:46:
6a:b3:7a:3b:ee:af:12:cd:ee:a0:cd:66:bb:ba:97:0e:32:8b:
d7:2c:35:45:d7:da:b0:14:30:86:9c:61:0d:78:84:2d:9b:35:
61:c0:e4:80:94:05:8f:c3:47:fd:da:25:9d:a6:48:69:d9:e2:
70:6f:3d:93:a1:00:06:04:03:96:33:b9:4a:ef:cb:0a:90:84:
b7:24:39:06:98:5e:2d:6f:ad:16:c3:1e:80:a8:ab:a4:5e:65:
48:cc:5a:13:f9:2c:a4:db:82:e4:63:2c:2f:ee:06:8e:9e:13:
cb:cc:46:30:27:c2:a8:79:88:bc:3b:f9:8e:b4:ac:c1:4a:2f:
10:60:88:b8:c3:9d:24:4d:94:9f:ba:eb:68:d7:b7:1c:a3:9b:
10:07:65:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 02:53:05 2026 by rpki-client