
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/98debb85-2197-3492-b7bb-b5bfcf794138.roa
File: 98debb85-2197-3492-b7bb-b5bfcf794138.roa (raw, json)
Hash identifier: ykGA+AtJosB4lfmRIU3BqY4NEHXdR/WG9DjL/NcigAg=
Subject key identifier: 4A:58:DA:C2:FC:C6:9C:AF:6A:0B:32:58:E7:F4:98:F9:2D:DE:F8:A5
Certificate issuer: /CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5
Certificate serial: 010D0C9F4328584D04E23814071545B81518B680
Authority key identifier: 03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/98debb85-2197-3492-b7bb-b5bfcf794138.roa
Signing time: Sun 01 Mar 2026 02:00:31 +0000
ROA not before: Sun 01 Mar 2026 02:00:31 +0000
ROA not after: Sat 30 May 2026 01:00:31 +0000
asID: 393657
IP address blocks: 129.19.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:04:e2:38:14:07:15:45:b8:15:18:b6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5
Validity
Not Before: Mar 1 02:00:31 2026 GMT
Not After : May 30 01:00:31 2026 GMT
Subject: CN=c0ef6847-a173-4d83-b268-6e4d83c5f886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:ec:59:79:87:b4:06:cc:66:fb:e1:79:a1:d0:
a5:39:ee:cb:9f:c3:dd:37:5f:da:2a:c5:47:2a:a5:
c1:50:08:df:89:04:c9:d3:14:79:a6:78:ad:a8:e1:
24:ba:f4:69:2e:0f:ba:b6:f5:76:24:90:90:5d:4e:
e9:60:5f:2c:5e:c8:a0:c1:98:00:a2:57:39:29:a1:
b2:05:a0:92:9d:69:8f:e9:39:e8:29:b4:76:a9:c8:
0b:16:39:b3:41:2f:98:d5:46:8f:91:64:95:87:d3:
80:42:9b:92:95:07:a0:5e:e5:ff:52:97:c7:cd:fd:
c8:68:0b:24:ad:a0:1f:29:7e:c2:42:24:d2:a9:5d:
f4:1c:95:3b:82:28:11:d7:37:81:c0:c8:cb:fe:a8:
4a:7a:cd:cb:34:f0:3a:78:4f:23:18:52:52:b1:8d:
33:a2:ce:a0:62:0c:a6:8d:18:14:ee:51:1c:25:80:
75:c0:26:76:8c:40:56:e0:ea:2c:8b:c2:5a:7d:91:
92:fe:dd:d2:e5:db:7b:e9:e5:dc:44:18:b9:9d:d6:
5a:1b:7d:1a:f6:0d:16:4f:fd:ee:c0:05:58:27:15:
5d:f2:80:65:51:5f:dc:7c:00:1e:2b:10:17:08:47:
ad:9c:2e:4c:4d:0c:31:ac:03:ce:e3:64:35:c5:a3:
7d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:58:DA:C2:FC:C6:9C:AF:6A:0B:32:58:E7:F4:98:F9:2D:DE:F8:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/98debb85-2197-3492-b7bb-b5bfcf794138.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.crl
X509v3 Authority Key Identifier:
keyid:03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer
sbgp-ipAddrBlock: critical
IPv4:
129.19.144.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:60:6f:4c:bb:b9:69:2b:d3:6f:03:75:20:d1:4b:50:e4:4f:
10:6e:b7:2f:e0:a2:24:63:eb:38:93:0d:42:1c:40:22:50:97:
ea:a3:8a:4e:13:53:a8:76:1a:ce:32:39:89:1e:5c:48:d1:2b:
ae:2b:53:00:08:01:c5:d7:d9:2b:76:94:c8:c3:b2:a3:ea:18:
46:5d:64:03:23:0c:63:52:dd:9b:fb:54:7a:02:4b:09:a4:ae:
d3:ce:65:1f:1f:54:a3:54:31:13:5c:75:a8:a9:21:a5:ee:a2:
48:a1:8f:0a:37:2a:d4:54:a6:42:b0:26:07:98:de:66:92:74:
92:b8:29:a1:c1:77:ce:77:4f:36:47:b0:49:7f:92:7b:c2:63:
0f:72:90:33:22:0c:81:03:10:dc:18:de:86:f6:ab:78:2c:ab:
42:a9:41:99:6f:1d:5e:1d:24:39:cb:7c:9c:b6:8a:b9:a3:36:
4d:82:77:b4:21:bd:bc:fc:6f:d2:25:8c:07:72:38:8a:15:e2:
2d:e6:70:77:38:e2:93:f3:77:5b:0a:d7:e8:4c:97:66:0c:7a:
36:6a:9c:29:4f:bb:4d:8c:f6:18:b5:2b:2a:41:bd:7d:77:70:
6d:c9:a7:2e:72:33:ab:06:5a:fe:e6:22:f8:92:e5:e6:cc:0e:
2b:d8:18:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:00:00 2026 by rpki-client