
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d39a5c94-b47b-3e97-97eb-3a105cede22f.roa
File: d39a5c94-b47b-3e97-97eb-3a105cede22f.roa (raw, json)
Hash identifier: flrYeaw0aUR+T11KgjzbbzRU/hfQgAO1qpcD1Fx9dT8=
Subject key identifier: 97:A7:66:BB:19:D2:EF:93:68:41:9F:6E:84:64:E2:9B:A2:26:A2:E6
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584F130237F1BFEFBAEFA6FD2960
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d39a5c94-b47b-3e97-97eb-3a105cede22f.roa
Signing time: Sat 05 Sep 2026 13:00:12 +0000
ROA not before: Sat 05 Sep 2026 13:00:12 +0000
ROA not after: Fri 04 Dec 2026 14:00:12 +0000
asID: 31898
IP address blocks: 129.146.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 22 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:13:02:37:f1:bf:ef:ba:ef:a6:fd:29:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Sep 5 13:00:12 2026 GMT
Not After : Dec 4 14:00:12 2026 GMT
Subject: CN=9e9ace90-7982-4d4b-bb63-8020d9a164ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:94:cc:d7:a5:7e:5d:c1:6a:85:6f:24:33:fe:
16:6f:41:d6:57:58:45:7a:94:08:1a:ca:e2:d5:65:
45:93:b7:30:95:1d:05:6a:e1:b4:45:3f:cd:8d:70:
3a:c9:c8:88:77:a9:57:04:17:be:12:a5:c3:b6:73:
f8:39:70:88:6e:89:32:62:69:c3:a2:a3:9f:42:58:
44:5d:1e:72:8a:f0:ab:ee:59:b6:87:d7:a0:ed:63:
14:9f:84:cf:3a:ec:b5:d8:14:ce:6e:3a:36:46:98:
36:40:c0:48:57:7e:bf:af:3f:2f:b9:4e:6d:cc:51:
59:78:67:f4:c5:be:e6:43:8d:5b:f0:06:32:fa:eb:
64:d0:b7:92:5b:b6:fb:ba:5b:91:9e:6a:75:84:38:
eb:0b:22:6d:0f:d2:32:52:03:a5:a1:60:72:6d:27:
61:75:a2:86:86:ab:a0:a1:ae:48:80:4b:8a:55:4c:
14:15:d3:58:6c:ab:e1:e4:0e:ab:b3:76:ca:83:c0:
22:05:0f:d6:2c:76:ab:57:a8:39:09:b7:e9:29:7b:
d3:24:c6:61:23:76:d4:e5:0d:9b:cc:27:0d:c6:0d:
f7:03:c1:c0:6f:02:17:16:76:b3:c6:5e:da:1b:48:
ae:fe:d0:64:9a:c3:5e:ab:6c:c1:29:af:1c:6f:f6:
4b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:A7:66:BB:19:D2:EF:93:68:41:9F:6E:84:64:E2:9B:A2:26:A2:E6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d39a5c94-b47b-3e97-97eb-3a105cede22f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
129.146.12.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a0:9c:cb:34:84:8c:bb:26:0f:8d:93:a4:1c:6e:28:a2:6c:57:
a9:88:a3:fd:3b:c0:58:c9:17:9e:a7:ac:d0:05:8e:d5:2f:b3:
0a:73:83:f2:8d:c9:1e:d8:be:26:47:ec:02:ed:3e:e3:bb:09:
58:c6:35:ca:a8:21:57:e2:df:67:0a:05:36:9f:48:c2:7e:57:
0c:01:e7:a9:b9:9b:8e:3e:b0:2f:62:79:66:d6:2c:8c:34:2f:
89:22:b6:d9:c7:da:92:0e:9d:93:75:1d:6c:c2:37:bc:09:9f:
e0:e6:15:d5:5a:ba:cb:31:f2:03:03:30:29:00:61:8e:0f:f6:
1d:94:7b:98:68:54:05:4f:28:70:18:7f:c5:89:83:b6:e9:b2:
62:3a:38:7c:e1:4b:f6:2d:5d:f9:0e:49:bf:11:4d:46:4d:59:
ee:f5:80:ba:fa:93:67:19:48:12:72:69:68:29:77:24:a9:4b:
6c:63:a7:ee:82:8a:b3:29:e7:c8:6b:26:f9:6e:20:36:89:27:
49:6d:a9:76:57:86:2d:19:53:3d:d9:84:65:1d:41:ff:18:28:
03:36:b9:81:10:a4:3d:96:52:15:c5:5a:b1:d0:cb:e2:13:e6:
0f:85:97:22:83:d8:cf:3c:3c:19:b1:9b:63:0b:05:e4:1f:5d:
6d:d2:01:7b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8TAjfxv++676b9KWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh
MzFkMB4XDTI2MDkwNTEzMDAxMloXDTI2MTIwNDE0MDAxMlowLzEtMCsGA1UEAxMk
OWU5YWNlOTAtNzk4Mi00ZDRiLWJiNjMtODAyMGQ5YTE2NGJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZTM16V+XcFqhW8kM/4Wb0HWV1hFepQIGsri
1WVFk7cwlR0FauG0RT/NjXA6yciId6lXBBe+EqXDtnP4OXCIbokyYmnDoqOfQlhE
XR5yivCr7lm2h9eg7WMUn4TPOuy12BTObjo2Rpg2QMBIV36/rz8vuU5tzFFZeGf0
xb7mQ41b8AYy+utk0LeSW7b7uluRnmp1hDjrCyJtD9IyUgOloWBybSdhdaKGhqug
oa5IgEuKVUwUFdNYbKvh5A6rs3bKg8AiBQ/WLHarV6g5CbfpKXvTJMZhI3bU5Q2b
zCcNxg33A8HAbwIXFnazxl7aG0iu/tBkmsNeq2zBKa8cb/ZLoQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJenZrsZ0u+TaEGfboRk4puiJqLmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3
MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvZDM5YTVjOTQtYjQ3Yi0z
ZTk3LTk3ZWItM2ExMDVjZWRlMjJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj
YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5
YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw
NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgZIMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKCcyzSEjLsmD42TpBxuKKJsV6mIo/07wFjJF56nrNAFjtUvswpzg/KN
yR7YviZH7ALtPuO7CVjGNcqoIVfi32cKBTafSMJ+VwwB56m5m44+sC9ieWbWLIw0
L4kittnH2pIOnZN1HWzCN7wJn+DmFdVaussx8gMDMCkAYY4P9h2Ue5hoVAVPKHAY
f8WJg7bpsmI6OHzhS/YtXfkOSb8RTUZNWe71gLr6k2cZSBJyaWgpdySpS2xjp+6C
irMp58hrJvluIDaJJ0ltqXZXhi0ZUz3ZhGUdQf8YKAM2uYEQpD2WUhXFWrHQy+IT
5g+FlyKD2M88PBmxm2MLBeQfXW3SAXs=
-----END CERTIFICATE-----
Generated at Sun Sep 20 23:16:25 2026 by rpki-client