
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1f2ade06-7847-3459-9e0c-91ce8610a411.roa
File: 1f2ade06-7847-3459-9e0c-91ce8610a411.roa (raw, json)
Hash identifier: ER2OEWWO1yyMTnbSj3rQZBmgksGcI7h6iYkBPSDkeoY=
Subject key identifier: D8:D4:FE:8B:28:8D:E3:71:4C:7D:82:99:56:78:5A:CA:9F:5B:68:87
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584F11A1608877AA9B9D529F2E80
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1f2ade06-7847-3459-9e0c-91ce8610a411.roa
Signing time: Sat 05 Sep 2026 01:00:12 +0000
ROA not before: Sat 05 Sep 2026 01:00:12 +0000
ROA not after: Fri 04 Dec 2026 02:00:12 +0000
asID: 31898
IP address blocks: 132.226.208.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 04 Oct 2026 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:11:a1:60:88:77:aa:9b:9d:52:9f:2e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Sep 5 01:00:12 2026 GMT
Not After : Dec 4 02:00:12 2026 GMT
Subject: CN=ecba7638-a750-47d0-8e9e-b774cf148c01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ef:36:8c:2a:12:e8:3c:ea:01:55:6d:e5:f6:
59:e2:a4:20:ae:38:19:0e:14:0d:92:b8:38:a1:ff:
fa:c4:d1:d3:27:b0:0c:d9:a7:2a:bb:71:88:07:32:
53:79:2c:1a:ee:9b:99:cf:7e:f2:83:62:17:c5:dd:
c9:8d:61:f6:9d:72:b5:ff:37:9a:38:2b:77:65:15:
0a:99:3c:33:0e:92:e8:a6:a7:a9:ad:63:eb:8f:ad:
8e:41:98:3e:aa:63:6a:f7:18:5b:4a:5c:6d:1a:0a:
13:ac:65:99:c2:7b:75:11:7c:24:47:98:ed:2b:20:
08:89:ef:fc:3e:76:d7:8b:20:83:16:ba:0f:5b:5d:
16:32:2e:9c:b5:85:08:b2:a8:9f:13:ba:76:11:f0:
25:99:60:af:b1:00:fa:63:d9:b3:41:b4:59:d2:99:
67:90:99:dd:b6:8a:cb:2f:c7:cb:ce:af:6d:eb:68:
11:5c:7b:ca:b2:dc:04:c9:4b:fa:82:d9:27:f1:cb:
5b:b3:74:f1:f3:eb:69:36:3e:72:aa:67:84:5b:27:
2e:cf:15:38:70:a8:a4:35:01:d5:f2:b7:e5:b3:d5:
9e:e9:c1:96:64:33:2d:53:5a:c9:d3:8b:01:fc:75:
4f:7a:70:d7:4b:52:e2:90:91:1b:f6:31:c9:3b:4a:
ef:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:D4:FE:8B:28:8D:E3:71:4C:7D:82:99:56:78:5A:CA:9F:5B:68:87
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/1f2ade06-7847-3459-9e0c-91ce8610a411.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
132.226.208.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:50:11:6b:b2:91:aa:4f:72:68:e5:24:d7:a2:0a:8d:af:c8:
6d:e2:4c:bc:2c:78:61:ad:c9:2f:c6:e2:ad:56:41:1c:11:0f:
dc:15:e4:b3:f0:2c:24:f7:99:de:c1:b0:9a:57:d0:74:50:db:
8d:4f:cc:93:48:79:3c:4d:0d:86:ce:45:e5:c5:25:5d:3b:4a:
75:26:5e:54:22:66:fb:31:5c:f6:c0:60:df:a9:24:cc:82:3e:
a0:b1:bf:4a:16:1c:77:e7:58:bd:6b:16:a5:a0:84:04:0d:85:
1f:da:70:dd:4d:00:12:77:d8:26:1c:9d:94:8d:5d:1f:ac:4f:
1a:2b:cd:53:7d:51:0a:70:5d:7d:19:97:1e:c7:67:22:8a:a0:
4a:a5:44:04:75:3c:3a:69:4a:bd:4c:2a:88:db:2c:4b:34:c8:
58:2d:97:f8:f4:60:14:e9:fc:bb:d5:98:27:06:f3:91:23:3f:
be:5c:4c:d2:87:28:8d:a9:c1:80:79:cb:0b:38:2a:3f:1c:41:
20:78:dd:78:dd:0c:46:ec:e4:97:ca:bd:ee:1d:e8:04:52:7b:
50:36:c6:d3:c6:8c:b7:fc:b3:5a:30:01:89:96:ab:fa:0c:d4:
81:0b:f4:6f:3a:ce:eb:a3:d0:b6:9c:87:de:06:5c:07:bd:b0:
07:13:7f:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 16:20:54 2026 by rpki-client