
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/31125309-5805-34c1-9fed-5da19e518d3a.roa
File: 31125309-5805-34c1-9fed-5da19e518d3a.roa (raw, json)
Hash identifier: QZYrKEGjzY1pZxSJ9XrxdWoDNhcJ9FRC38jQFweRPHw=
Subject key identifier: A0:41:3A:6F:63:16:AF:F0:AA:7F:E4:E1:BF:DF:6B:E4:31:F3:3F:B9
Certificate issuer: /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74
Certificate serial: 010D0C9F4328584F4988BB594E3A031D624B0080
Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/31125309-5805-34c1-9fed-5da19e518d3a.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 203724
IP address blocks: 131.229.128.0/24 maxlen: 24
131.229.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:88:bb:59:4e:3a:03:1d:62:4b:00:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=654f5678-ab4c-4440-b9be-49a6c510952a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:62:26:f2:42:cb:b9:75:68:d6:8b:a3:36:d8:
5b:4e:05:4e:c7:71:a0:d4:87:3c:c2:31:e3:c8:16:
55:08:9f:c1:8d:81:81:4b:4c:ed:61:fe:ec:5e:a0:
f1:05:ad:43:59:0c:22:07:04:96:ec:a4:d7:05:65:
2d:8a:07:1e:4c:46:27:1c:b2:86:02:7b:c0:ea:34:
fa:12:d7:d5:51:08:fa:26:96:66:44:f3:60:81:5e:
05:f4:3f:e6:39:1f:c4:4c:d4:5c:e3:9c:80:bb:94:
08:68:70:ba:71:63:a4:a8:fa:ce:24:fd:30:0f:5c:
5f:4b:74:8c:89:d0:15:11:41:ea:3b:54:6e:07:08:
b9:b7:9a:f4:b1:97:af:e6:9a:90:62:cc:5c:1c:cf:
8d:f1:e0:7d:52:41:3f:6c:98:fb:f1:92:3f:a9:37:
8f:a6:7a:0a:f4:e9:39:b9:90:53:9f:c3:03:26:4b:
ef:6c:3a:7e:aa:72:ba:04:0b:7e:09:46:3f:cf:88:
18:d0:79:9a:43:61:ef:87:7e:0e:b9:3f:c7:3e:c9:
f8:bf:2b:f2:3a:d7:6a:60:28:ff:9d:36:f6:4a:a5:
2c:44:6b:54:db:a8:64:ea:be:4b:aa:94:f6:bb:83:
78:21:7c:8d:4c:0c:69:b4:f6:b0:f7:c8:77:87:6b:
a4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:41:3A:6F:63:16:AF:F0:AA:7F:E4:E1:BF:DF:6B:E4:31:F3:3F:B9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/31125309-5805-34c1-9fed-5da19e518d3a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl
X509v3 Authority Key Identifier:
keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer
sbgp-ipAddrBlock: critical
IPv4:
131.229.128.0/24
131.229.132.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:2e:00:32:54:76:84:44:6b:e0:00:20:a9:1e:69:0e:6c:9d:
47:f0:45:a0:f4:fc:96:f4:b5:90:cd:4d:95:20:04:ca:f1:6f:
1b:95:54:8a:eb:c9:06:44:35:a6:56:43:8e:ba:57:e8:3d:7f:
89:1e:72:66:a8:f5:02:be:1a:3f:35:ee:a2:49:33:8c:da:ee:
11:0f:dc:9c:6b:5d:13:e3:96:03:95:7f:48:3f:98:bb:dd:82:
ee:8b:5b:3e:0f:16:c5:41:1b:87:9f:82:b9:93:98:02:86:1d:
27:13:90:62:21:54:a9:a6:6c:14:90:17:36:c3:5b:36:e1:0e:
36:88:bb:eb:84:08:36:5c:d1:af:f0:e2:8a:76:2f:42:36:30:
77:a4:c1:9e:69:1b:bc:81:dc:ae:ba:56:b6:b1:9c:bb:1f:ee:
69:22:fc:1f:c0:fb:ec:99:23:22:8f:52:ba:1f:3e:d3:77:10:
ef:b6:9b:f2:f5:bb:a7:d0:25:af:a4:99:44:f1:6d:74:2f:21:
5a:f2:33:63:43:76:3e:0c:7c:d0:31:14:16:21:05:2e:46:ee:
db:b8:19:c0:5b:87:dd:f0:e0:29:eb:d8:72:67:e4:1c:d4:11:
2d:64:8a:28:81:ac:5f:29:b5:df:99:5f:ac:fd:cc:d8:0e:09:
d7:92:89:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 02:43:25 2026 by rpki-client