
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/463eb926-1d00-3196-b72a-aa5e42a7152f.roa
File: 463eb926-1d00-3196-b72a-aa5e42a7152f.roa (raw, json)
Hash identifier: T9VGa8dUjDlE3MmlIbjRRki7VUSCTSp5QkVtiV7Iajg=
Subject key identifier: BF:D9:00:8E:90:9B:A5:D2:93:70:87:54:12:84:40:A0:C0:14:1E:70
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584F13023D38ACD8FA589D2BF8C0
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/463eb926-1d00-3196-b72a-aa5e42a7152f.roa
Signing time: Sat 05 Sep 2026 13:00:12 +0000
ROA not before: Sat 05 Sep 2026 13:00:12 +0000
ROA not after: Fri 04 Dec 2026 14:00:12 +0000
asID: 31898
IP address blocks: 129.146.18.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 22 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:13:02:3d:38:ac:d8:fa:58:9d:2b:f8:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Sep 5 13:00:12 2026 GMT
Not After : Dec 4 14:00:12 2026 GMT
Subject: CN=f3cf3858-1f62-4de4-a7ba-ae1178e0089a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:e1:d9:9a:7a:f4:db:0d:f8:8d:2c:9a:4c:4b:
07:0d:88:8e:71:fa:cb:f8:c4:d0:17:09:b3:82:80:
fe:31:b0:89:30:72:5e:b4:df:a2:35:15:31:b0:49:
a5:1e:4a:c7:61:01:79:a3:02:c2:17:d5:4a:6a:a9:
93:e0:51:4f:b7:c2:1e:57:b0:a4:1a:5e:c8:59:68:
d8:32:f1:b9:8b:82:dc:75:e1:06:17:b8:b9:12:67:
0a:98:57:40:a7:dc:41:69:85:b5:dd:e2:44:48:95:
1b:ab:7a:e7:24:a5:d4:59:45:5c:a0:08:7e:a1:ea:
24:8c:3c:d5:11:97:59:d3:dd:88:aa:8c:c8:e0:41:
db:6b:a0:ea:0b:96:fe:2d:5d:8c:f4:9e:83:f3:30:
bc:7a:61:be:62:56:3b:79:51:1f:ce:33:52:b4:0c:
47:fe:28:0e:3b:44:94:20:c2:83:26:86:bb:95:59:
02:24:c8:fd:54:36:d2:ae:03:c1:63:db:bf:d7:df:
47:cc:a1:fc:42:db:3c:87:d8:c8:cf:46:f0:d5:bc:
e2:b2:9a:98:e0:37:94:e7:d2:8f:81:49:f2:f3:f9:
38:c0:94:7e:dd:6a:ae:dc:c2:9d:b8:50:06:5c:d3:
f5:70:df:f4:b0:59:04:5a:64:c2:27:35:17:34:8a:
45:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:D9:00:8E:90:9B:A5:D2:93:70:87:54:12:84:40:A0:C0:14:1E:70
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/463eb926-1d00-3196-b72a-aa5e42a7152f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
129.146.18.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:2e:78:db:a7:94:28:0c:ac:5b:b5:6b:3f:1b:f5:4a:2c:f9:
bb:3b:33:4a:d5:37:06:b2:d4:ac:c9:a2:a2:52:2b:ef:99:30:
fe:cc:9e:20:03:34:8e:af:86:a6:10:4b:75:44:00:ac:69:4e:
72:24:75:8d:b6:04:62:44:d6:4f:4d:6d:8d:0e:c1:3a:49:8b:
17:ec:00:b5:8a:23:c8:2e:66:9c:6a:1d:8c:03:ae:98:84:68:
a1:61:b5:bd:92:3d:7d:b5:a1:bb:c5:28:3a:14:55:29:0e:05:
c0:70:42:cb:b8:f7:b3:7d:7f:67:c8:48:bc:e3:52:b4:14:4c:
42:77:95:fc:62:e8:45:b4:e8:61:29:90:74:9e:84:05:b6:3c:
8a:5b:63:70:8b:4d:53:0b:7b:8f:0c:ac:d5:8b:47:05:13:bd:
7e:1d:cc:5a:e5:4b:30:12:3d:b9:f1:77:8b:f8:0e:dd:a9:b7:
44:8a:c7:38:d9:9e:3e:59:4e:5f:d7:43:1b:b4:a2:ca:28:44:
2e:f3:bd:39:95:ad:70:8a:f7:bd:ce:fd:ca:ef:ca:cf:ee:ea:
e4:ae:14:6b:7d:00:05:a3:d0:53:c7:d5:e6:90:8b:81:76:05:
d2:77:2e:01:e4:70:17:2c:38:8e:a1:2c:60:f5:da:aa:b6:d3:
22:6f:00:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:37:57 2026 by rpki-client