
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9e673f2a-1dbe-32e9-9b51-578abbc51fa1.roa
File: 9e673f2a-1dbe-32e9-9b51-578abbc51fa1.roa (raw, json)
Hash identifier: pb7+++UyEaE4NtzkoHxsStZE5dm3Q+uXghaZ0M9giqk=
Subject key identifier: FD:F9:31:62:6C:E4:A9:BA:45:2D:E5:C2:59:21:4A:8F:D3:63:46:45
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584CAB8C464B64F76859511BC000
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9e673f2a-1dbe-32e9-9b51-578abbc51fa1.roa
Signing time: Wed 28 Jan 2026 02:00:29 +0000
ROA not before: Wed 28 Jan 2026 02:00:29 +0000
ROA not after: Tue 28 Apr 2026 01:00:29 +0000
asID: 31898
IP address blocks: 168.129.184.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Feb 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ab:8c:46:4b:64:f7:68:59:51:1b:c0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Jan 28 02:00:29 2026 GMT
Not After : Apr 28 01:00:29 2026 GMT
Subject: CN=4824be3e-878a-487c-b1da-664d5171669e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:20:79:e2:4d:c9:be:a4:8a:b4:7c:69:68:cd:
11:5b:3d:85:2f:4e:2c:35:1c:a6:41:1d:c2:bb:d3:
71:a2:fd:90:41:11:10:cc:13:af:14:13:a5:55:1c:
09:c0:eb:39:cc:2f:7b:c3:bf:74:38:8a:ef:10:61:
f4:d3:25:a2:7d:e9:23:cc:81:ef:4c:01:bf:ea:15:
dc:23:5c:11:02:04:ba:a7:08:31:bc:d8:a1:c0:c4:
2d:35:6a:8f:02:d2:14:f3:03:dd:91:f1:ad:fe:68:
1c:9d:2c:61:46:3d:46:21:54:48:7a:ea:ab:e9:97:
6e:f0:6e:86:d8:79:38:51:a8:ad:a0:79:99:04:95:
85:ac:18:8a:ca:c7:eb:fe:30:ee:95:ff:e2:55:5e:
f7:04:88:f6:ea:58:ab:a7:80:23:ec:f9:c2:78:c7:
ce:af:93:5c:84:b1:ab:f4:99:42:5e:71:a4:1f:93:
c1:bc:4f:c4:0e:cc:31:c9:ed:a3:9b:46:10:e1:64:
78:30:92:7a:cb:47:d2:8b:67:39:21:5b:c6:2c:bc:
5e:89:6a:25:2e:f2:b3:26:22:45:36:d5:45:03:f9:
87:93:65:7b:60:bc:36:87:ac:1e:c4:49:7c:e0:e3:
f0:50:af:9f:f5:77:64:ca:6c:b0:79:91:6b:4c:fb:
1d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:F9:31:62:6C:E4:A9:BA:45:2D:E5:C2:59:21:4A:8F:D3:63:46:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9e673f2a-1dbe-32e9-9b51-578abbc51fa1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
168.129.184.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:75:82:47:f9:98:d5:e3:73:b4:fd:6d:6a:18:47:47:0b:2a:
61:9c:15:1f:8e:9c:93:48:99:4e:90:bf:cb:e9:b0:61:79:d5:
8d:1b:ab:b0:19:00:a4:90:df:d3:e3:51:12:66:a7:e5:cb:83:
56:f9:c7:01:48:72:65:55:5b:ba:0e:8e:97:81:92:7c:b7:a9:
c5:8c:1b:60:40:43:cf:c2:13:dd:0a:7b:d5:f6:39:06:85:ad:
e1:03:50:61:3d:6d:c2:da:e5:1f:a6:06:f4:58:4a:7e:38:c6:
2e:fa:8f:01:39:48:c0:8b:77:8b:09:81:d4:76:c0:be:f8:18:
e5:a3:5f:c0:40:eb:40:26:79:14:90:cf:ac:e5:4d:2e:fc:ca:
03:90:76:fb:0c:1e:17:f8:bd:73:dd:24:71:06:0c:4e:d9:54:
27:99:10:d4:fb:a2:8d:2a:9b:a8:ac:28:35:5c:b5:43:db:14:
1c:7f:6d:c2:92:10:5d:5c:b5:99:bc:14:09:f5:67:78:bd:fb:
f2:60:f6:e4:ca:db:8c:f0:ea:b9:0d:5e:48:7a:ef:18:aa:e9:
7c:d5:d5:a3:c6:c5:3c:2e:73:fc:b9:1b:6d:3b:4c:0c:dd:e1:
f1:a1:21:a0:6b:25:18:22:f3:f8:56:d8:6d:2d:34:c3:91:92:
c0:95:3c:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 03:32:05 2026 by rpki-client