
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f184204f-2f0c-32b4-9bef-47f7ae1ba79b.roa
File: f184204f-2f0c-32b4-9bef-47f7ae1ba79b.roa (raw, json)
Hash identifier: DX5OOZm/lZ8j4sijSgKD8P8H4gTEjC5BZ53AsaMSziE=
Subject key identifier: 29:39:30:3D:3B:6E:BB:4D:8E:A6:E1:5D:92:2F:4C:BF:F9:00:2D:EE
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584EC20C61A17097D83A34AE9600
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f184204f-2f0c-32b4-9bef-47f7ae1ba79b.roa
Signing time: Fri 07 Aug 2026 13:00:11 +0000
ROA not before: Fri 07 Aug 2026 13:00:11 +0000
ROA not after: Thu 05 Nov 2026 14:00:11 +0000
asID: 31898
IP address blocks: 129.153.48.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 29 Aug 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:c2:0c:61:a1:70:97:d8:3a:34:ae:96:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Aug 7 13:00:11 2026 GMT
Not After : Nov 5 14:00:11 2026 GMT
Subject: CN=3ce83025-97cb-4b74-a557-b5656c8f259e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:68:ee:5d:8f:e0:71:b1:88:7a:77:7e:bb:27:
17:e0:9c:cc:a6:bc:81:a2:8c:b3:b1:18:58:57:dc:
99:3b:e9:b1:22:76:cf:d0:b6:d5:91:30:44:a2:0b:
77:6f:b7:13:ec:57:ba:8b:e7:45:a2:47:9e:da:c4:
e4:8b:fb:15:4e:1c:b9:91:20:db:68:f5:8b:db:47:
a0:20:13:d8:f5:e5:e5:60:8a:ef:0c:b0:03:73:d1:
57:47:08:52:cc:ce:a0:80:16:60:37:9e:fa:e6:52:
f6:54:f1:e7:10:c4:ad:53:6a:98:67:cb:08:45:42:
d9:b3:32:27:52:94:11:12:b0:60:d2:92:60:8f:49:
f9:cc:61:d6:b4:34:74:c8:74:ae:07:d1:63:55:65:
55:ec:8f:19:7b:86:0a:d6:6e:0d:72:67:3c:15:01:
eb:24:67:04:92:04:d1:9b:a9:87:4d:d2:66:93:14:
f5:a5:ac:1b:09:ca:c7:4f:9e:83:c6:0c:32:95:e8:
1d:13:30:ea:7d:76:cc:80:ff:3a:95:ba:fb:12:41:
b3:7e:a9:44:a0:f6:ff:84:7d:ae:9e:e5:18:ae:a0:
d2:8c:3d:40:31:06:1c:4b:ff:32:39:91:fe:ba:41:
f6:1a:46:9e:d3:4c:0a:af:61:85:4b:3c:ef:c2:b5:
b3:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:39:30:3D:3B:6E:BB:4D:8E:A6:E1:5D:92:2F:4C:BF:F9:00:2D:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f184204f-2f0c-32b4-9bef-47f7ae1ba79b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
129.153.48.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:07:ad:73:49:53:1e:a5:0c:41:95:2f:bb:f0:79:15:4f:86:
4a:dd:0e:a6:70:8a:86:55:e4:ef:50:19:b7:af:87:fc:75:8f:
63:48:16:0c:4f:6f:c1:b2:9b:19:e7:84:0a:20:ba:7f:62:39:
31:93:94:d6:99:2b:38:42:af:9c:14:92:d4:e4:8e:ab:87:4a:
ba:b0:d7:50:f9:01:83:72:6f:22:eb:91:5f:bd:91:ef:87:05:
22:e1:1b:7e:74:07:32:a5:e4:c0:91:d8:f4:de:d6:5a:aa:1d:
b0:48:30:91:53:ef:63:53:c8:bd:b6:a1:ea:a3:36:99:ee:c0:
5f:6e:7c:1e:b8:51:a2:c3:a7:8f:e4:c1:1e:fc:21:c5:3b:23:
8e:5d:75:ce:d8:6f:d1:53:1a:18:75:36:6f:4a:62:ed:d4:b7:
e8:89:92:e1:40:95:4e:1b:61:3e:9e:9d:ac:f9:34:73:71:c4:
5b:d8:b5:60:65:57:6c:a2:39:67:68:b4:ce:2f:e4:60:08:b3:
6b:7d:f5:ec:2d:a1:99:70:d8:f1:9d:70:f6:62:83:8a:7b:a7:
4a:86:a2:17:b4:65:fc:66:0f:6c:85:36:fd:75:cd:1d:36:b3:
22:94:0c:22:40:d1:5f:8b:80:5b:06:fe:71:af:78:94:3a:a9:
d1:c8:52:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 09:37:12 2026 by rpki-client