
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/131ba7b9-70a5-4e7e-bba4-1a5c20488c71/8cc41718-2034-3c44-83fb-ca6397306f14.roa
File: 8cc41718-2034-3c44-83fb-ca6397306f14.roa (raw, json)
Hash identifier: QqJ7/M/5et5vLCyzkOGn36tefYNq1+ReIEki6m8X5B0=
Subject key identifier: 83:0B:45:94:DF:B1:DB:63:71:98:DD:7D:3C:2F:F1:D3:00:52:3C:78
Certificate issuer: /CN=131ba7b9-70a5-4e7e-bba4-1a5c20488c71
Certificate serial: 010D0C9F4328584F119D15BE2EAE64FA39ED0A00
Authority key identifier: 6B:06:10:68:E1:5D:E0:00:FD:69:81:15:1C:7C:43:C4:F9:46:A0:92
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/131ba7b9-70a5-4e7e-bba4-1a5c20488c71.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/131ba7b9-70a5-4e7e-bba4-1a5c20488c71/8cc41718-2034-3c44-83fb-ca6397306f14.roa
Signing time: Sat 05 Sep 2026 01:00:12 +0000
ROA not before: Sat 05 Sep 2026 01:00:12 +0000
ROA not after: Fri 04 Dec 2026 02:00:12 +0000
asID: 198949
IP address blocks: 128.61.0.0/16 maxlen: 24
130.207.0.0/16 maxlen: 24
143.215.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/131ba7b9-70a5-4e7e-bba4-1a5c20488c71/131ba7b9-70a5-4e7e-bba4-1a5c20488c71.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/131ba7b9-70a5-4e7e-bba4-1a5c20488c71/131ba7b9-70a5-4e7e-bba4-1a5c20488c71.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/131ba7b9-70a5-4e7e-bba4-1a5c20488c71.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 21 Sep 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:11:9d:15:be:2e:ae:64:fa:39:ed:0a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=131ba7b9-70a5-4e7e-bba4-1a5c20488c71
Validity
Not Before: Sep 5 01:00:12 2026 GMT
Not After : Dec 4 02:00:12 2026 GMT
Subject: CN=a0bb640a-a1f8-4293-b75e-818eb259ac44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5f:06:94:54:47:6f:b1:bc:dc:9e:29:3e:8d:
2b:c0:14:86:32:90:cb:24:4d:18:4b:11:d4:64:b8:
49:d3:71:3d:a4:75:57:eb:cd:24:5f:38:80:89:98:
c1:11:fe:5d:14:28:88:a8:d9:cf:a2:7e:68:f5:41:
af:1c:c4:a8:59:b9:2a:3d:51:87:ca:b8:67:d7:6c:
4e:74:0c:47:ef:ae:66:a0:89:c3:dd:fe:8a:ba:db:
99:72:63:2a:01:9f:d3:7d:d6:cc:84:40:1b:9f:5f:
4e:e2:31:1b:7e:ae:b4:f5:2b:c3:2e:f0:2f:23:d2:
0c:2c:df:20:b8:44:c6:b4:be:e8:be:94:b7:f4:c8:
a6:61:b1:5f:6a:2b:01:df:61:c9:f0:44:38:74:54:
e3:d3:91:0c:6d:a3:59:c1:35:77:56:23:83:8a:50:
57:39:fa:f3:e4:da:fb:99:81:1a:9c:05:bc:c2:f7:
f7:e4:02:fa:17:b2:09:bb:bd:ef:4b:1e:7e:e3:8e:
30:89:e2:9f:ca:8d:dc:fc:75:db:92:ab:99:b8:53:
69:1e:d2:f4:88:97:6d:5c:f2:a4:13:11:59:a1:73:
10:8b:fa:49:08:b0:48:55:66:18:36:f9:ef:7b:fd:
c4:89:5d:23:8c:ff:ca:d4:97:a1:8b:05:e7:3f:a5:
c7:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:0B:45:94:DF:B1:DB:63:71:98:DD:7D:3C:2F:F1:D3:00:52:3C:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/131ba7b9-70a5-4e7e-bba4-1a5c20488c71/8cc41718-2034-3c44-83fb-ca6397306f14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/131ba7b9-70a5-4e7e-bba4-1a5c20488c71/131ba7b9-70a5-4e7e-bba4-1a5c20488c71.crl
X509v3 Authority Key Identifier:
keyid:6B:06:10:68:E1:5D:E0:00:FD:69:81:15:1C:7C:43:C4:F9:46:A0:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/131ba7b9-70a5-4e7e-bba4-1a5c20488c71.cer
sbgp-ipAddrBlock: critical
IPv4:
128.61.0.0/16
130.207.0.0/16
143.215.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:21:3c:6d:4b:d7:08:a8:ef:50:b1:d0:ab:32:e5:cb:22:c3:
a5:03:82:f9:b1:68:e2:95:4a:b8:9e:5b:6f:b3:d5:f4:39:76:
46:ce:21:16:5f:84:e6:db:9a:5c:a6:65:fc:a0:62:0d:f3:d4:
29:c6:64:5f:14:51:02:5d:d3:ee:dc:b2:61:2c:92:c6:16:ca:
7d:b6:bc:09:e8:96:c5:f4:64:63:80:39:d0:da:ff:bd:5e:0c:
27:5c:b6:f6:1b:28:06:58:08:e4:ff:51:8c:0d:f4:72:71:f4:
2b:9b:c0:66:e7:a3:3b:09:7b:1b:2f:b2:1b:82:4b:ff:b8:7f:
28:e5:e7:e0:1b:87:bc:b1:3e:7f:ea:6b:f8:c2:30:cd:2e:e6:
c3:e6:c2:60:89:c0:d8:08:3f:ab:84:29:3d:ee:73:79:de:8c:
42:65:77:58:ba:4f:d8:da:18:81:6d:78:35:4d:07:9e:eb:27:
d4:a7:15:13:4d:f6:b2:2f:94:ab:e5:bc:68:41:2d:ae:69:9a:
e1:a0:26:b4:f1:95:5a:29:36:cf:64:ef:b1:08:46:be:bd:b1:
57:59:f3:ae:b0:6a:18:32:9a:dd:dd:cd:72:bf:a5:df:62:72:
cb:6c:3f:a8:2d:ca:f5:62:6d:b4:a3:7d:df:12:6b:cd:ca:dc:
fa:34:0e:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:06:00 2026 by rpki-client