
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f0919cb6-3443-326d-b35d-158a8c68c6da.roa
File: f0919cb6-3443-326d-b35d-158a8c68c6da.roa (raw, json)
Hash identifier: Fqd99zt/Jvu1j0ydkgWlSnq62CJO3J8dmee+LuVtFOY=
Subject key identifier: 1C:25:09:50:09:E0:AD:03:A5:3C:C7:32:24:61:EE:85:89:C2:F3:14
Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Certificate serial: 010D0C9F4328584BAA97B957385E4B83429DB200
Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f0919cb6-3443-326d-b35d-158a8c68c6da.roa
Signing time: Tue 28 Oct 2025 01:00:31 +0000
ROA not before: Tue 28 Oct 2025 01:00:31 +0000
ROA not after: Mon 26 Jan 2026 02:00:31 +0000
asID: 31898
IP address blocks: 129.80.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:aa:97:b9:57:38:5e:4b:83:42:9d:b2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d
Validity
Not Before: Oct 28 01:00:31 2025 GMT
Not After : Jan 26 02:00:31 2026 GMT
Subject: CN=da33209e-a69a-4dfb-afd4-ae7525f2b9f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:eb:30:39:74:93:9b:e4:fd:7f:96:bc:45:3b:
8f:d7:bd:85:84:cf:55:c9:5b:8f:9b:40:4b:75:dc:
f6:8b:f9:ae:c5:fe:c5:25:98:8c:94:de:81:73:d0:
cf:4e:38:81:35:41:4a:93:dd:6c:c1:fe:73:b5:27:
fb:4d:69:00:b7:95:36:00:cb:61:aa:35:fb:dc:06:
e8:fa:e0:ab:bb:87:5e:3e:0f:f6:ea:15:47:f6:47:
62:2d:88:fa:e1:d9:cd:c8:ca:1e:28:fb:45:1c:62:
49:a6:73:e0:0c:6a:e9:91:0f:f4:f7:1c:fc:36:e8:
b6:0c:28:a7:34:58:bc:b0:45:b2:bb:ea:60:95:0d:
6a:45:d9:2a:83:10:13:db:eb:1e:f6:d6:96:bd:2f:
b2:40:aa:01:bc:b7:cf:84:ee:27:d1:01:11:99:d9:
29:b6:51:95:e2:98:ec:44:3a:e0:2b:c2:c1:ff:6f:
76:8f:bc:a0:ed:16:ec:52:83:b4:bd:cb:83:27:d6:
b5:3e:14:ca:3c:8c:1b:d5:cb:38:8d:49:75:2b:ae:
98:46:fd:12:e9:84:6a:14:70:d3:ad:47:84:d9:9d:
da:01:45:b7:fb:8f:d2:ea:99:9c:a4:b4:11:ad:e7:
1f:e9:84:40:70:e5:86:84:d8:ed:65:b2:42:f2:97:
63:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:25:09:50:09:E0:AD:03:A5:3C:C7:32:24:61:EE:85:89:C2:F3:14
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/f0919cb6-3443-326d-b35d-158a8c68c6da.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl
X509v3 Authority Key Identifier:
keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer
sbgp-ipAddrBlock: critical
IPv4:
129.80.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:4d:ef:8d:92:d3:11:a8:af:38:cb:c5:14:5c:9d:93:36:62:
ad:54:06:20:2c:4e:d9:dc:37:37:08:0a:ab:18:f6:ec:ca:89:
c6:8a:a4:e3:a1:28:2a:0b:80:f5:81:e0:87:f2:7d:e7:b1:d0:
12:ef:03:a8:08:a0:03:7d:27:fe:48:19:47:3c:5f:7b:39:4c:
e1:8c:e8:37:f4:0f:85:4c:9f:bf:5c:3b:d3:c9:8a:a8:bc:cf:
e7:28:ba:7e:92:c4:ea:c9:91:94:d5:00:32:eb:7d:cc:0b:82:
a5:71:57:3e:fa:38:2c:a3:86:b8:93:fa:2c:d5:39:66:ae:a0:
e0:1b:d5:bf:c1:df:17:d5:2d:b3:fe:12:52:f6:98:ae:a4:be:
b9:29:9c:9d:69:a3:fe:85:5b:b2:1c:da:77:ca:1b:67:f6:26:
2c:2f:46:9b:06:78:3b:0c:9a:80:4a:50:36:bf:ef:29:1f:b2:
36:ee:71:9d:27:6d:e0:33:f0:ca:52:90:88:a5:1e:76:1c:70:
4e:ee:1d:06:dc:b0:a5:35:88:ee:d5:ca:16:a5:4f:8f:fb:90:
40:61:d1:ff:37:7f:7c:8a:e6:81:ee:be:8e:7e:b9:4c:e9:e1:
c8:94:11:d6:e1:11:a5:f2:9f:03:6b:46:af:be:d9:6c:b4:a3:
6b:2c:71:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:51:00 2025 by rpki-client