
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6085afda-92ea-3a98-afe7-df16e71c8738.roa
File: 6085afda-92ea-3a98-afe7-df16e71c8738.roa (raw, json)
Hash identifier: som/WYG3jL1NNkV/u5f1iQcmpPFKnfU4eDUwMaMGXlo=
Subject key identifier: 88:DB:AC:38:78:9C:12:6C:DD:7E:C8:38:8D:36:7D:06:E7:F7:F4:13
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584CA75C63E6FC163A4C1F42E880
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6085afda-92ea-3a98-afe7-df16e71c8738.roa
Signing time: Mon 26 Jan 2026 14:00:41 +0000
ROA not before: Mon 26 Jan 2026 14:00:41 +0000
ROA not after: Sun 26 Apr 2026 13:00:41 +0000
asID: 31898
IP address blocks: 149.130.128.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Feb 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:a7:5c:63:e6:fc:16:3a:4c:1f:42:e8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Jan 26 14:00:41 2026 GMT
Not After : Apr 26 13:00:41 2026 GMT
Subject: CN=dfb03d03-0560-490a-b77c-f7de016d4e1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b6:21:08:ca:a6:f8:a3:5d:02:54:94:c4:df:
63:74:3d:55:45:ca:cd:5f:2c:a1:d6:5e:12:26:cc:
68:f9:ba:dd:10:70:c3:e3:d3:61:de:a7:c9:af:f0:
a4:da:1e:bf:53:32:4f:e6:15:8b:ea:43:c9:9c:c0:
00:04:ba:f2:a3:d7:a9:23:ec:c7:dd:6c:bd:c9:e2:
6b:ca:69:b8:39:85:6a:12:ec:28:7a:92:58:a2:b1:
9e:ea:a8:cc:22:7c:c2:4a:9f:a3:20:18:48:69:8e:
23:73:5b:52:cb:6d:3d:c1:10:78:31:23:2d:31:78:
99:9f:f0:fe:35:ab:09:47:d0:6a:35:b9:56:9d:47:
da:af:6b:00:c4:36:7d:5c:70:b2:9b:b5:13:6c:7c:
4e:92:9d:5b:c2:a6:01:06:58:59:b9:1a:3a:83:ae:
b1:6f:71:4a:fa:0f:5a:7d:ed:b7:3e:ed:a7:a7:6f:
a8:18:41:d1:75:b7:27:50:1e:bd:8a:e3:1b:09:b5:
aa:e8:33:ea:dd:af:87:7c:4b:5b:64:5c:3b:e3:df:
7c:0b:5a:e7:75:4d:07:a6:ab:6f:a1:32:57:ec:74:
cc:68:a9:d5:a9:6e:ad:90:83:f6:6f:c3:14:94:32:
0e:77:29:84:86:63:3a:7d:51:25:80:c7:af:e2:ed:
9b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:DB:AC:38:78:9C:12:6C:DD:7E:C8:38:8D:36:7D:06:E7:F7:F4:13
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/6085afda-92ea-3a98-afe7-df16e71c8738.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
149.130.128.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:0a:fa:d8:19:f4:bd:1a:50:70:d8:84:a0:69:54:99:de:74:
61:2e:b3:50:e8:34:17:ed:16:19:98:2a:b4:bb:22:36:08:9a:
ea:a5:3e:a5:3a:42:0e:ab:14:78:fe:ef:39:f2:15:1b:b3:2d:
33:d8:f7:49:37:b1:ba:f3:8e:0f:e8:a8:1f:82:45:62:b7:9d:
2a:0a:b2:f4:4b:2d:7e:ac:ef:b5:6d:bb:72:e7:00:05:29:19:
63:2f:d7:7f:96:d1:da:6f:f1:14:67:de:f9:e5:1a:0d:35:21:
ca:e8:4b:b0:6d:2c:28:ce:58:67:e9:aa:0c:62:86:dc:d6:d3:
98:ff:1e:98:8e:72:ed:53:54:00:76:16:af:04:5f:0c:e3:80:
09:c0:1f:19:a8:74:a0:69:e9:81:a3:28:e1:28:6e:db:23:c1:
cb:1e:7a:00:3d:00:06:09:88:66:8d:dc:e3:b0:c8:db:d3:33:
f5:65:49:f8:ef:fb:24:02:39:e4:cf:ec:29:1e:15:1e:44:85:
37:bc:f9:eb:cd:b1:6a:4a:04:71:ee:3e:e7:6d:67:27:23:39:
57:fb:07:6b:25:d2:9d:e3:21:10:9d:6e:37:8c:a6:98:50:c9:
50:40:c8:c9:c6:f8:38:6b:fe:4e:1c:42:a1:fb:67:80:05:1b:
cb:7f:bc:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 03:27:46 2026 by rpki-client