
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/72a7f2e1-dd2e-3207-8207-2d7ce4a217a2.roa
File: 72a7f2e1-dd2e-3207-8207-2d7ce4a217a2.roa (raw, json)
Hash identifier: gmHOMm96LQtUmv6TOpJo3+3LTi6utpBlDSrAGZe2jb4=
Subject key identifier: A8:C4:75:FF:43:A0:E4:50:2C:4C:5E:35:F7:9A:0A:70:B5:71:04:2E
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584CAFBC6EA1FD10E7E28475E800
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/72a7f2e1-dd2e-3207-8207-2d7ce4a217a2.roa
Signing time: Thu 29 Jan 2026 14:00:40 +0000
ROA not before: Thu 29 Jan 2026 14:00:40 +0000
ROA not after: Wed 29 Apr 2026 13:00:40 +0000
asID: 31898
IP address blocks: 129.146.160.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Feb 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:af:bc:6e:a1:fd:10:e7:e2:84:75:e8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Jan 29 14:00:40 2026 GMT
Not After : Apr 29 13:00:40 2026 GMT
Subject: CN=566cf66a-5940-4e4d-a7c9-8fe84727666f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:29:77:6c:3f:c5:c9:50:dd:fd:93:7e:c5:72:
91:e1:f2:d3:fc:85:03:b6:ba:15:40:c8:a2:08:77:
50:e3:fb:c9:db:57:f0:06:c5:b3:c2:f5:53:e1:ad:
93:73:d2:cf:fe:3f:67:1e:c0:b5:0b:97:dc:2a:87:
9b:ea:24:69:20:72:e2:b2:18:f6:3c:d6:d6:0c:3f:
b5:9c:a7:8c:44:3e:5e:87:f3:46:6a:77:3f:dd:72:
37:87:9c:bc:86:ff:a5:df:1f:61:f8:97:0b:a2:60:
33:35:57:f9:5e:e6:08:25:b8:b2:43:30:3b:68:93:
21:ff:79:f9:01:41:4d:e0:5f:89:36:62:15:50:37:
81:78:2c:70:f9:3d:31:f3:e5:0c:56:6d:37:40:d6:
7c:3b:74:34:49:a9:03:e9:5e:f2:fe:3c:65:d3:a4:
d9:b7:fd:9d:43:8f:30:f1:cc:82:31:94:be:23:38:
b3:a0:80:80:4d:0f:87:de:ee:8f:72:a6:3a:13:6f:
dc:44:48:65:4b:d5:cc:00:af:42:37:a1:0e:ca:d8:
00:d0:dd:40:2b:00:65:0e:fd:83:c4:17:72:90:de:
d9:79:af:9d:b1:41:19:f1:ea:32:07:2b:04:a1:59:
fe:26:91:c1:75:1b:3f:ab:e7:d8:cd:f1:3e:98:38:
1c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:C4:75:FF:43:A0:E4:50:2C:4C:5E:35:F7:9A:0A:70:B5:71:04:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/72a7f2e1-dd2e-3207-8207-2d7ce4a217a2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
129.146.160.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:4e:0b:a9:fa:1b:76:3b:42:ef:38:f7:b0:e0:88:e4:3a:33:
ca:69:55:a9:78:94:63:cc:9d:bf:a9:f5:8b:75:92:22:87:bb:
8e:26:55:d1:47:a9:a2:fa:55:c5:1d:68:85:11:f4:cf:eb:9e:
3f:bf:67:fe:b6:6e:e4:18:cd:a8:60:99:3f:fd:90:99:85:83:
44:d1:ad:d8:d4:65:43:92:fd:e9:3e:97:c9:00:84:0d:2d:6e:
c8:2f:a0:45:14:7e:0f:9e:31:2f:a8:f5:70:23:20:83:f4:97:
0a:6c:6c:24:69:e6:8c:fd:6a:77:30:0f:6b:08:be:ff:a0:59:
73:3b:b2:9b:e6:01:7f:84:8e:65:4c:fe:1e:2d:60:dd:be:5d:
49:06:68:08:86:45:76:0d:1f:77:84:18:3d:1d:ba:10:2f:39:
f7:eb:20:1e:e2:ae:43:10:ff:6e:52:b3:fe:cc:92:8d:4f:bb:
03:b4:8d:91:ed:ef:21:46:89:28:03:51:25:a6:cb:2f:cc:a8:
5f:93:bd:06:95:b6:60:89:2c:99:db:88:e9:d6:08:fc:7c:73:
83:5e:4a:b3:67:61:35:cf:e6:a2:0f:0c:b2:e1:ac:73:71:ac:
76:73:de:54:0e:7c:93:46:5e:df:19:d7:93:76:e8:8d:7c:cb:
38:a8:19:4c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyvvG6h/RDn4oR16AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI2MDEyOTE0MDA0MFoXDTI2MDQyOTEzMDA0MFowLzEtMCsGA1UEAxMk
NTY2Y2Y2NmEtNTk0MC00ZTRkLWE3YzktOGZlODQ3Mjc2NjZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkil3bD/FyVDd/ZN+xXKR4fLT/IUDtroVQMii
CHdQ4/vJ21fwBsWzwvVT4a2Tc9LP/j9nHsC1C5fcKoeb6iRpIHLishj2PNbWDD+1
nKeMRD5eh/NGanc/3XI3h5y8hv+l3x9h+JcLomAzNVf5XuYIJbiyQzA7aJMh/3n5
AUFN4F+JNmIVUDeBeCxw+T0x8+UMVm03QNZ8O3Q0SakD6V7y/jxl06TZt/2dQ48w
8cyCMZS+IzizoICATQ+H3u6PcqY6E2/cREhlS9XMAK9CN6EOytgA0N1AKwBlDv2D
xBdykN7Zea+dsUEZ8eoyBysEoVn+JpHBdRs/q+fYzfE+mDgcFwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKjEdf9DoORQLExeNfeaCnC1cQQuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNzJhN2YyZTEtZGQyZS0z
MjA3LTgyMDctMmQ3Y2U0YTIxN2EyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgZKgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHNOC6n6G3Y7Qu8497DgiOQ6M8ppVal4lGPMnb+p9Yt1kiKHu44mVdFH
qaL6VcUdaIUR9M/rnj+/Z/62buQYzahgmT/9kJmFg0TRrdjUZUOS/ek+l8kAhA0t
bsgvoEUUfg+eMS+o9XAjIIP0lwpsbCRp5oz9ancwD2sIvv+gWXM7spvmAX+EjmVM
/h4tYN2+XUkGaAiGRXYNH3eEGD0duhAvOffrIB7irkMQ/25Ss/7Mko1PuwO0jZHt
7yFGiSgDUSWmyy/MqF+TvQaVtmCJLJnbiOnWCPx8c4NeSrNnYTXP5qIPDLLhrHNx
rHZz3lQOfJNGXt8Z15N26I18yzioGUw=
-----END CERTIFICATE-----
Generated at Thu Feb 26 03:26:30 2026 by rpki-client