
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/be6b92ec-9fbd-3fc0-b631-844035ec6d62.roa
File: be6b92ec-9fbd-3fc0-b631-844035ec6d62.roa (raw, json)
Hash identifier: rDT2qr5XH+w18l2nTw/w472IyiWWZnFZQ1RKhPPYJEo=
Subject key identifier: 8A:21:52:AB:87:69:11:69:94:EE:DE:73:66:D7:DE:67:41:83:EA:E3
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584F13024726994219D85EDA6500
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/be6b92ec-9fbd-3fc0-b631-844035ec6d62.roa
Signing time: Sat 05 Sep 2026 13:00:12 +0000
ROA not before: Sat 05 Sep 2026 13:00:12 +0000
ROA not after: Fri 04 Dec 2026 14:00:12 +0000
asID: 31898
IP address blocks: 129.146.88.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 22 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:13:02:47:26:99:42:19:d8:5e:da:65:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Sep 5 13:00:12 2026 GMT
Not After : Dec 4 14:00:12 2026 GMT
Subject: CN=9b630bd3-8277-4611-8646-d6e7989ccc91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a6:37:f4:79:0f:23:26:eb:48:1e:dd:bd:88:
da:5f:28:f1:c1:2f:e5:af:08:fe:e9:36:76:40:6b:
89:d7:bb:40:96:2d:b7:a6:65:59:62:c5:52:6b:9c:
d3:5c:0d:75:b0:51:ef:80:c0:6e:22:42:9a:a2:a8:
84:25:80:8e:1c:34:6b:73:60:3a:13:42:f5:c7:01:
1d:27:92:b6:21:bf:6d:b5:d4:e1:e1:be:3d:14:8c:
16:94:2e:44:23:f8:84:86:d9:28:2a:03:f7:5e:52:
1a:55:db:8a:c8:f9:26:d4:ca:ea:e9:ad:e4:32:1e:
b1:c8:05:83:39:89:45:e4:52:ab:2e:d4:77:a6:26:
9b:ad:1e:f6:0a:e9:9b:0a:54:63:f0:f0:9b:46:52:
ca:8f:57:ed:ce:a5:7d:66:e9:be:47:1a:20:e3:52:
46:b2:65:64:a9:73:d7:b0:ce:1f:f6:52:35:c1:01:
7a:4b:9a:94:41:e1:45:8b:4b:0b:02:15:17:d8:04:
e1:aa:fe:c3:a7:b6:c2:f5:ad:df:e6:60:4d:42:06:
92:74:5a:66:a8:7e:6b:3e:2d:fc:e9:bf:15:a0:37:
57:52:59:b1:a4:d7:c3:03:f3:80:80:e6:c4:3b:db:
ab:2f:53:f1:df:81:4d:cb:db:49:fc:3f:c3:15:e6:
73:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:21:52:AB:87:69:11:69:94:EE:DE:73:66:D7:DE:67:41:83:EA:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/be6b92ec-9fbd-3fc0-b631-844035ec6d62.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
129.146.88.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:cd:de:ca:c5:42:66:24:8d:9b:f8:9d:98:ef:36:61:dd:0b:
56:41:0d:ee:41:81:3a:16:6c:2c:31:5e:57:5f:e6:56:6c:a7:
b1:c9:dd:87:8e:f3:bc:d6:5a:fe:a9:ad:c2:3a:96:c6:81:4f:
3e:18:fc:49:ba:35:6d:7f:d5:dd:50:49:56:8e:41:59:46:d9:
39:a2:1c:21:e1:33:40:ab:18:dd:6e:9c:65:11:fb:fb:49:e8:
67:82:c9:4c:41:10:dd:9e:4e:3f:63:ce:9c:12:8a:97:53:5c:
da:02:cb:8d:69:7f:1d:3e:8f:f2:82:19:09:8a:6a:61:44:fd:
d9:52:4c:24:c6:0f:17:dd:78:da:03:00:77:8d:0c:66:e5:78:
c1:fd:f2:c0:9b:09:8b:59:17:e1:1c:0a:57:97:07:98:04:08:
6e:50:fb:8c:7b:aa:73:3b:99:7e:ed:97:12:de:69:3a:5c:a1:
6b:5a:cc:f6:cb:22:6f:e8:f9:3f:bc:f8:01:42:7b:f4:3a:64:
59:2d:df:e0:50:a3:e5:8f:37:f4:cc:e7:f0:b3:ff:5b:fd:fd:
89:aa:2d:07:11:08:ce:05:79:f9:3f:3c:aa:86:24:dd:d7:ba:
d1:41:d7:33:77:07:8b:62:aa:b2:18:f0:d6:e6:79:40:1c:eb:
7a:b1:4a:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:15:21 2026 by rpki-client