
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/66ae1927-8ff7-3212-9180-b040515d9adc.roa
File: 66ae1927-8ff7-3212-9180-b040515d9adc.roa (raw, json)
Hash identifier: CiLJjbkC82lqdT0bbX4HIOYjNOV3yBxXFdxyePwhQsU=
Subject key identifier: 30:44:77:12:19:E1:13:BA:87:23:24:9E:F1:46:D5:6D:80:99:96:B0
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584CAE5E70E0FADCF3131955E580
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/66ae1927-8ff7-3212-9180-b040515d9adc.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 31898
IP address blocks: 132.145.232.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Feb 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:5e:70:e0:fa:dc:f3:13:19:55:e5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=f2d04801-afd6-49a2-bdce-b1209f95b8ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:05:eb:01:59:ad:b9:dd:89:25:79:de:90:f9:
08:d8:48:d9:2f:fa:02:47:c7:a2:a3:d1:38:6d:b3:
6e:b6:9b:ea:49:cc:98:f7:f0:a0:68:e4:ef:22:fb:
c6:e8:1b:34:f7:d5:48:48:c5:e0:b9:5e:e4:f8:4f:
d7:cb:38:87:d7:3e:5f:bc:dc:1f:a7:72:f9:f8:bb:
1f:42:ee:ad:73:67:16:e9:2e:af:d1:dd:b6:55:ee:
06:20:b8:f3:ad:d3:98:e4:b2:65:23:02:ea:36:61:
b2:ff:31:f2:e5:ff:9e:45:f8:73:ca:38:85:1d:4a:
cd:7c:58:28:77:eb:b3:a1:95:67:63:fd:af:0f:80:
3e:67:fd:80:f3:66:94:97:a8:aa:6c:4c:9e:bc:b9:
6a:db:b5:6e:77:98:99:be:aa:57:41:b0:8a:27:ab:
8e:23:d0:ab:85:61:e1:67:3f:ab:2f:d0:4c:a7:c7:
34:51:9a:12:f4:01:4d:6a:19:72:13:a5:fd:a0:84:
50:8a:4a:eb:50:4e:dc:9a:84:ba:9b:38:bc:75:61:
8e:2c:98:69:6d:c3:11:cb:07:59:fc:73:64:20:d1:
2a:be:35:a4:99:0f:09:09:cd:42:16:07:6f:0d:f9:
06:fa:5f:17:20:f2:fc:76:25:5b:8d:29:db:da:7b:
01:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:44:77:12:19:E1:13:BA:87:23:24:9E:F1:46:D5:6D:80:99:96:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/66ae1927-8ff7-3212-9180-b040515d9adc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
132.145.232.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:9f:7a:59:f8:a5:81:37:21:94:d0:3b:6d:2b:da:84:81:f4:
98:6b:3f:ce:36:ce:c5:01:b2:3a:a7:da:4b:4c:af:68:c1:b6:
b2:4b:60:ad:99:6a:99:37:66:4f:13:a9:4b:d9:94:8e:22:0c:
23:b0:80:f8:80:a6:a0:9a:a5:32:7a:73:79:c7:71:b0:82:b1:
97:c3:ec:cb:3b:b8:0a:c5:a5:2b:ac:df:a7:9c:4e:a9:2f:32:
fd:e0:5b:16:fe:08:68:b8:7c:7e:b8:cf:79:a9:40:5a:5a:ef:
40:b6:37:cb:f1:8b:1e:fe:89:62:b2:28:82:e7:e0:ac:0f:0b:
54:9f:97:a7:9e:01:d0:7f:4e:bc:b1:44:6f:f4:34:fd:98:93:
0b:ff:05:a9:b6:4a:d5:92:fe:11:97:f3:c5:1c:32:f5:09:5e:
47:aa:35:73:e1:fe:45:c6:08:4c:e8:51:1e:6a:30:55:1e:9e:
6e:49:54:e7:4f:e4:f5:6e:9d:0a:76:4d:69:e2:f6:46:13:06:
e2:48:63:1e:0c:22:c5:f8:fe:d1:ec:3e:25:da:f5:1a:da:29:
e3:2c:36:77:14:0d:a8:93:f8:47:26:c5:68:28:9b:c7:ad:23:
96:c8:17:de:c6:9c:85:ef:e9:02:06:d5:dd:24:78:1b:9b:94:
22:24:d4:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 03:30:54 2026 by rpki-client