
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b0020376-0cd1-398b-8222-d9d832024913.roa
File: b0020376-0cd1-398b-8222-d9d832024913.roa (raw, json)
Hash identifier: c0bauElFPvP2Yh+8VphuOlBNar6+k9npBNROct08ySc=
Subject key identifier: 78:32:F9:40:0E:61:EE:FB:8A:A1:FF:46:F7:37:A7:49:3B:03:AB:FE
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584CAFBC6E5DA70C84C492BCB120
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b0020376-0cd1-398b-8222-d9d832024913.roa
Signing time: Thu 29 Jan 2026 14:00:40 +0000
ROA not before: Thu 29 Jan 2026 14:00:40 +0000
ROA not after: Wed 29 Apr 2026 13:00:40 +0000
asID: 31898
IP address blocks: 129.146.8.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Feb 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:af:bc:6e:5d:a7:0c:84:c4:92:bc:b1:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Jan 29 14:00:40 2026 GMT
Not After : Apr 29 13:00:40 2026 GMT
Subject: CN=188fbb38-7695-44c7-a236-ba477e5e067e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a5:b1:f1:21:f6:6a:bc:2d:e1:ab:8a:7c:09:
73:f3:a6:c5:3e:b9:e1:c4:31:8e:41:ba:68:8d:5f:
49:cc:f9:37:78:76:77:dd:38:b7:8f:f8:20:19:90:
1b:30:6b:08:34:b3:c7:3f:d3:dd:8f:42:00:6b:1b:
c4:7e:55:11:5f:4c:91:48:b8:db:d2:ed:f3:97:b9:
b7:05:63:de:e2:74:45:25:b7:92:f4:26:69:0f:e3:
f2:21:5e:43:d8:a8:45:d5:a7:4e:0d:d8:1a:82:03:
6f:cf:c7:e9:7e:1c:59:4b:3b:b6:21:68:9f:54:4a:
32:8d:ba:d7:e6:29:76:41:59:3e:8a:25:25:50:87:
8c:a0:99:93:89:76:4f:ef:e9:3c:48:6b:81:44:e7:
ca:b7:72:43:9c:02:3b:85:45:9b:fa:fa:4c:61:5b:
19:01:38:48:15:3c:e6:bd:a7:b1:01:c0:f1:33:e8:
54:5d:1c:4e:5b:27:a6:c1:18:93:38:7c:4a:78:5d:
bb:7f:2c:a9:e1:d6:e5:9b:9b:03:b5:10:27:98:12:
23:74:7c:b5:f2:ee:d5:fd:c6:a5:49:60:32:b7:a5:
96:d4:eb:b4:ff:ca:32:bc:16:f8:56:52:93:ec:ad:
9c:fc:92:f2:1a:be:7d:0d:6e:d8:65:b3:f0:37:19:
70:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:32:F9:40:0E:61:EE:FB:8A:A1:FF:46:F7:37:A7:49:3B:03:AB:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b0020376-0cd1-398b-8222-d9d832024913.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
129.146.8.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:8d:b1:2c:fd:45:2c:95:e1:9a:f6:b0:7a:fc:ef:51:31:ce:
49:dd:75:03:2e:02:1f:e4:77:45:c4:6d:1a:33:1d:33:e0:7a:
31:fe:3f:1a:c1:fd:c1:7c:3a:54:63:d4:51:3e:2d:66:83:4d:
35:47:57:30:31:db:60:d9:0e:42:0e:ba:42:b5:f5:d4:4a:a0:
39:04:51:51:75:94:94:05:0e:db:8c:27:4a:31:34:f4:32:0d:
9d:80:75:19:41:c3:7f:2e:8a:f6:cc:6b:6f:9a:b1:ec:81:3b:
5f:2d:74:b0:e0:fe:4f:3e:4e:df:de:e0:b3:42:dd:42:1f:c5:
00:a5:4b:41:2e:8c:8a:10:82:08:2f:72:cc:e1:18:91:9b:f3:
48:90:5a:47:10:2f:93:37:e5:03:eb:c6:f9:21:0e:da:c9:06:
ab:0f:64:d6:2b:e9:10:c5:f8:fc:8b:61:b2:88:7f:08:42:4b:
2d:78:e1:05:d6:09:a7:22:e4:80:74:d6:ec:8b:d5:b6:fd:0d:
83:47:ef:bb:97:22:8d:d1:6e:b5:fb:83:27:aa:c8:b5:37:8e:
f1:c7:2a:17:bb:d2:e4:06:fc:28:ba:92:62:f6:b1:2a:02:9e:
e1:90:0e:dc:8f:2f:b2:9e:7f:46:1d:a9:1c:6c:f8:9e:f5:3e:
ba:fc:40:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 03:26:28 2026 by rpki-client