
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d94e9b6a-5660-37c1-a645-c558a1b39c66.roa
File: d94e9b6a-5660-37c1-a645-c558a1b39c66.roa (raw, json)
Hash identifier: w5b41iRxCDcK77NiPTzP5VHTZrfWJShua4cvabpJg6o=
Subject key identifier: F8:6B:0B:7D:B4:4F:9C:DC:DB:AC:57:6E:7C:80:1E:DC:ED:8E:F2:EB
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584D8AC552CB53EBA84AB6CB08C0
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d94e9b6a-5660-37c1-a645-c558a1b39c66.roa
Signing time: Sat 18 Apr 2026 01:00:24 +0000
ROA not before: Sat 18 Apr 2026 01:00:24 +0000
ROA not after: Fri 17 Jul 2026 01:00:24 +0000
asID: 31898
IP address blocks: 129.149.96.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:8a:c5:52:cb:53:eb:a8:4a:b6:cb:08:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Apr 18 01:00:24 2026 GMT
Not After : Jul 17 01:00:24 2026 GMT
Subject: CN=692a350e-4f7c-4770-b302-99c11b11136e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:12:e3:da:24:1c:66:e9:5e:e0:06:ab:51:15:
91:ff:ac:83:f4:4c:cb:46:f6:28:ac:4b:d8:6f:c7:
e2:42:c7:d4:da:13:69:b3:80:9c:38:cb:a3:25:ef:
43:94:71:25:a9:e5:df:aa:8a:8e:df:6b:ae:ea:bd:
63:37:30:1a:54:3e:02:ea:f0:87:fe:51:06:55:30:
69:8a:cf:0d:22:f5:54:5c:c4:c5:fb:cd:14:35:4b:
42:72:f2:8d:e1:ef:aa:b5:be:a8:9d:72:85:56:d9:
f8:d5:76:35:79:50:a2:20:d6:e1:d9:6b:47:fd:f6:
e8:36:f1:9d:d7:13:17:bd:92:30:4a:01:2a:63:ef:
f5:27:dd:1b:c9:99:e1:1c:a4:51:27:58:1f:d2:13:
ea:16:57:3e:fc:3b:2e:1a:21:87:59:2d:e1:3e:72:
d0:a9:df:dd:a7:dc:c7:ee:de:3f:f4:7d:da:e6:af:
67:e3:c6:9f:1e:29:ef:08:ac:06:9b:b4:10:b6:01:
26:1b:22:9d:f6:20:48:7b:ca:8c:66:a2:91:72:f1:
95:59:a4:20:6c:4b:d1:7c:b5:e4:39:e6:3a:39:16:
21:5b:4c:8e:60:00:5e:f8:93:80:ec:df:57:70:9d:
19:13:b6:82:73:b0:c7:af:23:c8:10:f8:9b:43:28:
00:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:6B:0B:7D:B4:4F:9C:DC:DB:AC:57:6E:7C:80:1E:DC:ED:8E:F2:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/d94e9b6a-5660-37c1-a645-c558a1b39c66.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
129.149.96.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:38:93:87:21:9a:97:ef:30:10:20:b9:ec:6d:72:1d:6d:11:
33:c3:d3:00:13:2f:39:26:9e:4d:37:b2:2a:d9:da:64:b2:c7:
4c:50:44:11:13:b7:95:ca:73:9a:04:d5:e0:36:3e:6e:2e:45:
5e:33:86:72:bd:f2:08:17:8d:12:9b:30:54:90:44:38:c0:b8:
5a:9a:05:3d:62:9c:a7:b2:8a:15:a5:d8:8a:89:fc:da:dc:34:
33:c4:04:e7:73:c9:7a:cf:e4:23:96:e2:ea:04:42:42:8d:a7:
53:51:1d:02:b0:7a:8f:aa:d9:23:06:b0:96:63:e1:af:42:4d:
5b:73:64:25:9c:eb:ea:46:ae:fe:e1:11:04:d4:10:fb:8c:6c:
ce:b6:6b:24:62:73:77:e8:1b:cb:7b:11:de:d5:03:23:e4:b8:
b0:ce:cb:a9:95:b9:71:32:8e:b8:9a:a6:c8:ed:19:d6:00:a7:
bb:4a:59:90:a4:d7:e2:af:7b:89:db:d9:b6:c2:50:c7:24:d0:
c1:b3:0d:31:20:8e:ba:46:fa:99:bc:e8:81:f7:67:1d:5f:c8:
da:c3:7a:e5:91:ba:94:ca:1b:ed:99:0e:4f:20:8a:1b:7e:e6:
bb:f7:09:b0:a1:86:c7:6e:94:0f:9a:14:13:71:10:51:85:11:
64:4d:8e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:40:30 2026 by rpki-client