
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/b29597f3-7b1c-3921-acc7-0dc6e7614877.roa
File: b29597f3-7b1c-3921-acc7-0dc6e7614877.roa (raw, json)
Hash identifier: Y5Vx2VeJrhkGZ3EYqcM54q+rWR1lKIJ4b7HPPrdMA0M=
Subject key identifier: 21:F6:10:E9:69:71:85:4A:B3:98:24:C8:06:EA:9A:5F:30:C5:67:7F
Certificate issuer: /CN=0f950b17-8345-41e7-bf75-5481729a0012
Certificate serial: 010D0C9F4328584D7F00EC797A24119E66096C00
Authority key identifier: 56:3C:2B:FC:3E:FC:B4:79:C4:82:D7:6A:DE:DE:73:30:B0:B3:B6:60
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/b29597f3-7b1c-3921-acc7-0dc6e7614877.roa
Signing time: Mon 13 Apr 2026 19:51:06 +0000
ROA not before: Mon 13 Apr 2026 19:51:06 +0000
ROA not after: Sun 12 Jul 2026 19:51:06 +0000
asID: 32723
IP address blocks: 67.210.32.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/0f950b17-8345-41e7-bf75-5481729a0012.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/0f950b17-8345-41e7-bf75-5481729a0012.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:7f:00:ec:79:7a:24:11:9e:66:09:6c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f950b17-8345-41e7-bf75-5481729a0012
Validity
Not Before: Apr 13 19:51:06 2026 GMT
Not After : Jul 12 19:51:06 2026 GMT
Subject: CN=415a506c-b72e-472d-87d5-dcf6c19ce1d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:05:1d:78:b6:f1:5a:d8:0c:85:5d:01:8e:f4:
e3:5b:30:41:99:a3:6c:1c:42:bb:d4:63:df:3f:59:
f9:b9:07:36:63:a0:c8:9c:ad:a2:c8:b2:96:ea:18:
a4:fa:c2:85:17:9c:94:66:3b:8d:82:3a:91:06:1d:
3f:73:3b:b8:2e:a9:2c:3f:91:c5:2d:cb:11:29:7e:
87:d2:c5:e8:4d:c5:0e:ad:81:a6:7f:84:0a:8a:37:
09:13:c4:52:76:a3:c1:b4:cd:6c:f0:ec:3b:32:08:
58:b1:8d:f8:49:ff:ed:cc:cd:06:d3:7f:9c:21:04:
65:9a:ef:39:db:ce:c4:25:31:a9:4e:78:ae:c2:30:
1e:16:d5:08:23:00:3a:66:2e:41:66:e3:92:78:21:
9b:66:fc:74:8b:38:ab:f7:f9:9f:86:6a:d5:71:7f:
87:b5:6b:22:69:88:c5:a2:6b:66:f4:be:6a:0a:b0:
82:04:a4:d0:e7:9c:23:75:d6:a8:27:6a:99:ba:a8:
8e:61:61:9a:ca:17:06:4d:8e:ed:31:ca:9f:ae:3e:
84:44:49:21:fd:08:32:f3:d3:08:eb:f4:f2:cc:9b:
fd:bf:bb:3e:30:7d:63:b7:59:89:1a:78:04:94:28:
d0:53:02:8f:41:b6:9d:62:9d:aa:dc:5f:ac:bf:fb:
f5:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:F6:10:E9:69:71:85:4A:B3:98:24:C8:06:EA:9A:5F:30:C5:67:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/b29597f3-7b1c-3921-acc7-0dc6e7614877.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012/0f950b17-8345-41e7-bf75-5481729a0012.crl
X509v3 Authority Key Identifier:
keyid:56:3C:2B:FC:3E:FC:B4:79:C4:82:D7:6A:DE:DE:73:30:B0:B3:B6:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0f950b17-8345-41e7-bf75-5481729a0012.cer
sbgp-ipAddrBlock: critical
IPv4:
67.210.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bb:aa:2a:c8:d6:87:9e:2f:c6:f8:68:2c:b2:d5:08:5d:00:d3:
a7:57:9f:98:aa:3e:0f:cf:9f:3d:d1:71:f5:55:72:59:0d:88:
07:e7:dd:d9:c1:64:2d:ed:af:49:63:d3:b8:2d:fc:11:ee:b9:
5f:62:1a:5c:63:83:49:58:67:3b:45:9e:3c:53:d2:62:36:15:
56:ed:d6:62:fd:ec:e0:20:2d:14:11:5f:ab:aa:7a:d9:0e:a6:
98:ab:44:99:c4:84:34:80:08:9f:1e:2f:3f:79:7f:a1:56:73:
bb:91:10:77:53:0f:d5:d9:b4:7a:a0:49:3b:07:5b:c1:43:85:
ee:db:60:ea:8a:d6:16:e2:af:fd:67:d7:72:ff:2a:bd:83:dc:
43:6c:8a:b2:0a:fa:b9:25:d9:98:52:59:79:4b:5e:21:85:c1:
21:50:45:5e:1b:6b:25:9c:95:0a:3f:13:b0:82:0a:f1:1f:fd:
12:a1:8b:54:92:12:75:80:29:a4:f1:7b:fd:6e:d9:10:a5:b8:
b2:db:36:f0:fe:00:bf:87:7d:dd:c5:db:60:d7:46:a7:46:27:
b6:e0:e0:9c:50:ab:83:52:c0:c9:e7:d4:19:73:c8:12:e8:6b:
fd:cf:7b:9b:7c:d5:af:f6:e1:5a:db:98:30:30:09:bd:d4:cc:
9f:5b:9c:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 07:29:52 2026 by rpki-client