
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bb13af40-73f2-3d00-ac9b-2cb65982fcb4.roa
File: bb13af40-73f2-3d00-ac9b-2cb65982fcb4.roa (raw, json)
Hash identifier: VqcWuuHTItHxr2Dee9b+az0SZHjy8IK4RnOOCV7aMHo=
Subject key identifier: 69:03:B7:20:5C:17:E8:3D:9A:C1:24:8E:B8:18:AF:5C:AB:58:14:6A
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584CAFBC842B24A3A93FEE6828C0
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bb13af40-73f2-3d00-ac9b-2cb65982fcb4.roa
Signing time: Thu 29 Jan 2026 14:00:40 +0000
ROA not before: Thu 29 Jan 2026 14:00:40 +0000
ROA not after: Wed 29 Apr 2026 13:00:40 +0000
asID: 31898
IP address blocks: 129.150.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Feb 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:af:bc:84:2b:24:a3:a9:3f:ee:68:28:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Jan 29 14:00:40 2026 GMT
Not After : Apr 29 13:00:40 2026 GMT
Subject: CN=6e852c3e-3af6-44ff-ae44-051289232f9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:54:25:b1:8e:63:87:5b:51:2b:63:f5:82:0a:
6a:1a:5c:c5:d9:e5:d2:ee:9c:7d:86:00:ac:22:d6:
f9:e4:3a:e4:eb:12:39:74:62:66:71:fc:03:b8:1e:
3e:9e:3d:90:81:3f:43:7b:1a:30:87:04:4f:fa:3f:
33:ce:bb:1a:75:0c:6d:04:ef:04:bc:b5:c6:c1:86:
bf:a5:a8:6a:d2:75:72:f2:1c:b4:30:a6:21:82:1d:
90:68:10:81:cf:ca:f1:dc:d8:ec:75:66:f5:8e:81:
bd:57:7a:ce:9c:e1:4d:75:8b:eb:06:6f:15:9f:5d:
90:be:ea:55:88:b2:65:9c:6f:2f:2a:e5:d6:7d:45:
b6:cb:0f:1c:85:fa:61:aa:9e:4e:b4:d0:a5:ea:c4:
1b:0b:6a:ee:5a:39:bd:f3:3a:08:87:57:2d:21:09:
7e:41:7b:0d:b9:69:2b:f2:c4:ef:b5:c2:6a:10:ac:
4e:49:da:fd:6c:86:09:79:5b:ce:5c:40:44:b9:33:
3d:d5:72:88:db:a9:11:5e:d1:96:67:15:46:8d:f4:
73:b8:e2:3d:79:b1:fd:b8:f1:ef:fa:49:bb:7c:d6:
b4:78:e3:42:9f:db:83:c3:80:12:85:6a:64:66:14:
21:6f:7f:c1:6b:ee:c8:64:d3:d8:95:9b:e3:ee:72:
95:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:03:B7:20:5C:17:E8:3D:9A:C1:24:8E:B8:18:AF:5C:AB:58:14:6A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/bb13af40-73f2-3d00-ac9b-2cb65982fcb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
129.150.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:87:0c:3d:8c:62:53:4a:de:ed:34:8c:a6:ca:0e:60:f5:af:
34:56:6a:dd:8c:31:62:20:a9:0e:8e:69:9f:49:09:5f:00:81:
95:61:90:b5:90:67:0c:ac:98:9a:f0:59:ac:fe:2a:52:56:69:
dc:29:3d:cc:8f:b2:68:fe:c4:33:f1:e6:4d:88:f8:3e:ea:23:
98:61:14:a4:18:c4:9c:df:22:d2:9a:13:78:72:0e:a1:01:be:
19:8e:11:7b:25:ac:26:54:da:f0:4f:3b:45:fa:0c:79:99:32:
ee:78:07:08:19:21:d0:48:f3:14:90:ef:aa:e6:d3:66:4d:e4:
41:4a:6d:52:85:72:aa:11:97:65:55:5c:96:60:51:d9:63:a6:
e5:e4:c0:9d:1b:a7:fd:25:6e:4d:bf:4b:e5:08:f1:aa:7f:6b:
2c:04:f2:62:b7:0d:c9:8f:1a:4a:6b:7a:54:c8:a3:3c:c8:9c:
4c:dd:6a:ae:36:ad:a1:91:a7:48:c1:46:63:1f:79:72:f6:8a:
87:ec:b0:bf:54:33:df:80:ef:15:61:05:c6:60:ca:ef:9f:6e:
6b:fa:3a:3a:6b:97:19:b5:52:99:84:fd:98:3e:b2:d7:32:56:
ff:4d:6c:ea:7d:2a:20:9a:aa:46:ce:36:1c:d2:ab:af:63:67:
e5:98:4f:66
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyvvIQrJKOpP+5oKMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI2MDEyOTE0MDA0MFoXDTI2MDQyOTEzMDA0MFowLzEtMCsGA1UEAxMk
NmU4NTJjM2UtM2FmNi00NGZmLWFlNDQtMDUxMjg5MjMyZjlmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlQlsY5jh1tRK2P1ggpqGlzF2eXS7px9hgCs
Itb55Drk6xI5dGJmcfwDuB4+nj2QgT9DexowhwRP+j8zzrsadQxtBO8EvLXGwYa/
pahq0nVy8hy0MKYhgh2QaBCBz8rx3NjsdWb1joG9V3rOnOFNdYvrBm8Vn12QvupV
iLJlnG8vKuXWfUW2yw8chfphqp5OtNCl6sQbC2ruWjm98zoIh1ctIQl+QXsNuWkr
8sTvtcJqEKxOSdr9bIYJeVvOXEBEuTM91XKI26kRXtGWZxVGjfRzuOI9ebH9uPHv
+km7fNa0eONCn9uDw4AShWpkZhQhb3/Ba+7IZNPYlZvj7nKVEQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGkDtyBcF+g9msEkjrgYr1yrWBRqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYmIxM2FmNDAtNzNmMi0z
ZDAwLWFjOWItMmNiNjU5ODJmY2I0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHgZaAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG+HDD2MYlNK3u00jKbKDmD1rzRWat2MMWIgqQ6OaZ9JCV8AgZVhkLWQ
ZwysmJrwWaz+KlJWadwpPcyPsmj+xDPx5k2I+D7qI5hhFKQYxJzfItKaE3hyDqEB
vhmOEXslrCZU2vBPO0X6DHmZMu54BwgZIdBI8xSQ76rm02ZN5EFKbVKFcqoRl2VV
XJZgUdljpuXkwJ0bp/0lbk2/S+UI8ap/aywE8mK3DcmPGkprelTIozzInEzdaq42
raGRp0jBRmMfeXL2iofssL9UM9+A7xVhBcZgyu+fbmv6Ojprlxm1UpmE/Zg+stcy
Vv9NbOp9KiCaqkbONhzSq69jZ+WYT2Y=
-----END CERTIFICATE-----
Generated at Thu Feb 26 03:26:29 2026 by rpki-client