
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d09b6a9f-bb19-327f-bf80-437fbf99ae93.roa
File: d09b6a9f-bb19-327f-bf80-437fbf99ae93.roa (raw, json)
Hash identifier: JizJ9iw70dA3BACsYIWnqqUP4/BpppykNfyh/7WU2hY=
Subject key identifier: 06:FA:7F:07:F2:44:9E:5F:AB:26:17:6A:D7:D9:C5:41:18:0A:37:59
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584E6DD4C0DF8B65D0CBC2C38A80
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d09b6a9f-bb19-327f-bf80-437fbf99ae93.roa
Signing time: Wed 08 Jul 2026 09:00:12 +0000
ROA not before: Wed 08 Jul 2026 09:00:12 +0000
ROA not after: Tue 06 Oct 2026 09:00:12 +0000
asID: 31898
IP address blocks: 129.151.128.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 14 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:6d:d4:c0:df:8b:65:d0:cb:c2:c3:8a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Jul 8 09:00:12 2026 GMT
Not After : Oct 6 09:00:12 2026 GMT
Subject: CN=6d2d648f-fb15-4858-b947-ecbf14311311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:96:b0:3e:62:8d:56:4f:58:98:c3:32:ff:85:
9e:78:6c:2c:0c:d3:e9:18:79:c7:96:95:5c:83:03:
24:b9:3f:56:cf:46:d9:c5:2c:69:c7:e5:4c:a8:f3:
e9:c5:53:61:a8:57:cd:70:09:e8:4d:00:9f:e7:83:
dd:4c:0f:de:73:7f:77:90:0c:57:50:3f:12:71:73:
a3:53:24:ab:db:e7:46:57:e0:e6:f7:d2:99:5f:f4:
a2:bc:b1:85:47:1c:b3:24:98:91:7c:6e:f0:9f:20:
18:92:68:d3:c6:52:59:ec:ad:75:aa:ed:07:66:02:
b4:81:97:0e:af:80:c0:fb:0d:15:91:58:29:5c:b4:
ca:3d:bb:72:b0:f7:2d:5c:cf:ad:de:d3:11:88:5a:
86:c8:97:6d:02:0c:f8:13:af:cb:2b:0d:1e:7e:6b:
8c:ad:ee:6f:f0:b9:26:58:89:db:d5:cb:97:e6:bc:
5d:09:ad:79:ba:f4:2c:ed:1c:e7:fc:c0:de:4e:74:
ab:b5:9c:c2:4c:56:34:f3:a7:42:ae:e5:68:dd:bb:
01:c8:a7:3c:30:c6:1e:5c:eb:f3:a8:89:aa:4d:d9:
0d:a2:60:26:7f:f2:15:fc:d8:59:a6:0d:b5:5f:9d:
e7:5d:40:72:55:32:46:80:5e:b1:10:52:f9:71:ac:
06:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:FA:7F:07:F2:44:9E:5F:AB:26:17:6A:D7:D9:C5:41:18:0A:37:59
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d09b6a9f-bb19-327f-bf80-437fbf99ae93.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
129.151.128.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:d3:63:ff:0e:6b:f1:66:7c:f6:1f:c3:51:b2:5c:f7:86:a1:
6e:ee:e2:3a:4f:30:d9:9d:eb:11:75:d3:33:aa:3d:d1:1f:b6:
24:de:ce:49:fb:1c:f3:1f:cf:23:f9:b3:17:54:b2:2d:68:15:
67:cb:ee:c8:dc:f5:e7:4f:73:c0:6f:04:1c:8f:6e:3f:3e:4e:
f4:f1:14:ef:89:a8:a3:46:53:b4:27:9a:e5:75:b6:4a:75:14:
56:3a:08:8d:24:71:94:8c:4e:79:90:10:57:1f:47:2b:27:e1:
8c:e0:b9:c1:84:3d:f4:1f:28:fc:e6:4c:26:33:9b:81:c9:f9:
b6:b6:dd:f7:c8:6c:a1:ab:35:0d:cf:e3:b3:5c:81:65:97:03:
be:fa:f7:93:30:de:6e:f3:dd:32:11:cd:31:c7:2d:e2:31:b4:
d8:86:49:90:15:c4:83:87:9a:45:39:73:fd:43:28:7b:c3:2e:
fc:c6:03:d1:56:18:5d:6b:9f:84:fa:ff:c1:d1:b0:c0:3c:6b:
5b:95:00:ff:05:7d:9d:ce:d4:00:be:81:14:a6:fc:28:99:0e:
6d:1d:93:5e:91:c6:82:0d:79:ef:91:2b:24:84:b8:7f:5b:82:
4c:50:7b:4e:b7:35:69:1a:1e:7f:81:bc:0b:14:6f:a7:b1:ec:
28:02:0a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 02:52:04 2026 by rpki-client