
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a6379d20-6f01-316b-89b3-5a589ab59002.roa
File: a6379d20-6f01-316b-89b3-5a589ab59002.roa (raw, json)
Hash identifier: RXUHDsU9uM1qQ1dHA2PTDbKok4jFZ68mApr3goOR7eY=
Subject key identifier: CD:A8:72:A4:0F:62:58:80:D3:6B:BF:69:12:26:AF:DA:7D:F5:36:DB
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584EED523F8AB32410A0DE5683C0
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a6379d20-6f01-316b-89b3-5a589ab59002.roa
Signing time: Sun 23 Aug 2026 01:00:12 +0000
ROA not before: Sun 23 Aug 2026 01:00:12 +0000
ROA not after: Sat 21 Nov 2026 02:00:12 +0000
asID: 31898
IP address blocks: 129.146.192.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 29 Aug 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:ed:52:3f:8a:b3:24:10:a0:de:56:83:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Aug 23 01:00:12 2026 GMT
Not After : Nov 21 02:00:12 2026 GMT
Subject: CN=1df73908-38ef-4e3f-ae94-fafe8e0d4a84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:62:50:55:1d:4a:63:b1:0a:cc:9e:8b:fd:f5:
72:7a:e9:1e:91:cf:00:96:3d:80:85:3a:0f:19:0b:
ef:f7:81:3b:0e:5a:76:27:d7:83:3a:7d:83:a1:ec:
3a:25:bd:b6:94:87:2f:a3:4f:75:b9:a5:f6:bc:f3:
a3:c5:41:6b:4e:56:22:90:13:5e:88:c1:0b:13:12:
b9:e3:91:b1:05:2b:e7:27:1e:cf:9e:da:a5:91:da:
5c:41:a6:1f:bb:eb:5d:56:a9:55:c3:11:1f:a5:c5:
54:ba:ec:0a:d7:07:2d:0f:34:20:61:48:2b:e4:68:
06:4d:0d:d9:0d:d7:5b:4e:6e:90:da:42:c7:ae:af:
df:c4:42:8e:6c:3b:6b:79:f3:de:a6:df:95:00:74:
93:81:b8:71:37:5b:0c:b6:36:7a:f3:80:49:68:5b:
df:77:98:49:b3:8f:02:9b:54:ac:59:77:a0:ee:5f:
d4:87:b3:75:a7:8a:99:4a:30:ae:2e:77:35:0d:6c:
4b:41:d6:b7:ac:8f:92:6b:bf:75:e3:4b:63:e4:6b:
78:1f:3d:42:24:8e:3d:d8:eb:37:2e:7d:46:a3:ef:
4e:ab:ca:c2:ef:c5:c2:2f:d3:ed:05:06:0a:4d:7d:
44:5f:a7:dd:9e:22:3c:4e:9b:fb:94:c2:7c:05:46:
97:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:A8:72:A4:0F:62:58:80:D3:6B:BF:69:12:26:AF:DA:7D:F5:36:DB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/a6379d20-6f01-316b-89b3-5a589ab59002.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
129.146.192.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:48:61:b6:09:5c:b7:72:db:f4:07:0d:3e:35:99:b8:e2:0f:
a4:86:c4:98:a7:4c:b7:c3:72:3f:7c:ab:13:94:d1:bd:3d:3b:
2f:f4:ef:0a:f5:59:52:92:fd:1e:7a:d4:38:2c:c4:98:f9:c9:
22:bd:d5:9b:df:50:70:d8:22:58:96:12:09:63:47:03:41:72:
44:1c:42:46:10:bc:f5:9f:56:25:4c:55:a7:09:92:72:98:d7:
94:db:e1:9e:9a:97:58:96:46:fc:57:0c:cb:e9:8c:9d:5f:6f:
49:e2:e2:10:0b:b1:54:fa:25:3c:30:2f:da:91:7a:49:c6:bd:
f7:57:74:95:8f:20:fd:dd:c6:3a:01:e0:98:c4:52:8a:63:e8:
8e:6d:6e:9c:d9:f0:a7:a2:5c:52:c4:bc:a6:2e:77:7e:e8:03:
62:ef:8d:71:20:89:94:03:b8:8c:a6:9b:8f:5f:f5:f0:63:d4:
24:c8:88:39:c5:7d:76:26:46:ff:6c:ab:d4:cd:1d:48:4d:f9:
f8:49:b6:b5:58:fe:b6:2c:75:1d:9f:2b:0d:8f:4c:ad:38:8c:
0f:41:60:2c:e9:c3:a2:34:5d:df:55:35:75:39:60:c9:2b:a7:
e3:3a:bd:e7:b3:41:93:76:bd:bf:64:b7:df:7b:d2:14:00:47:
40:0b:4d:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 07:13:27 2026 by rpki-client