
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/bd1326c4-4806-37c2-bc53-dcb628200a80.roa
File: bd1326c4-4806-37c2-bc53-dcb628200a80.roa (raw, json)
Hash identifier: eOMhdiIeebcbLQagK1NhV/FQzLzOAGrw3K6gnymgzBY=
Subject key identifier: D9:F6:B5:6B:46:79:A0:63:50:8A:F8:FB:7C:9B:69:BA:AC:C1:8B:3B
Certificate issuer: /CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Certificate serial: 010D0C9F4328584CA5F71B4AC270502B3AFD8B40
Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/bd1326c4-4806-37c2-bc53-dcb628200a80.roa
Signing time: Mon 26 Jan 2026 02:00:32 +0000
ROA not before: Mon 26 Jan 2026 02:00:32 +0000
ROA not after: Sun 26 Apr 2026 01:00:32 +0000
asID: 14618
IP address blocks: 52.129.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:a5:f7:1b:4a:c2:70:50:2b:3a:fd:8b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Validity
Not Before: Jan 26 02:00:32 2026 GMT
Not After : Apr 26 01:00:32 2026 GMT
Subject: CN=f34a6894-b57a-461e-a801-e9faf95be47a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:3d:82:1e:e7:38:f1:50:1a:23:5f:19:46:11:
73:3e:a7:2a:fd:99:a7:b1:4e:a4:e9:b9:77:12:9b:
bc:b7:f6:4d:a4:6e:ec:24:75:3b:4a:89:0d:29:2e:
2f:65:f6:ca:18:33:8f:98:72:08:bf:12:2c:5d:ab:
09:2a:c5:36:e3:18:bf:ab:e1:3c:88:11:c4:e6:d7:
20:29:37:15:f6:90:f1:d2:96:5d:92:84:88:79:62:
ec:8e:c1:db:e2:cd:84:16:6c:96:13:a1:39:ef:fd:
db:3f:a1:26:33:2c:3c:38:e2:5e:64:25:bd:02:44:
87:1e:07:55:ce:f3:90:2e:02:16:dd:af:80:22:be:
b3:08:0a:20:94:22:1b:a8:ec:64:05:41:69:c1:bd:
7a:81:10:40:f2:c6:0a:6c:d9:4b:80:30:10:07:ff:
36:0a:63:4d:9f:8d:c1:0e:90:2d:f8:68:0a:ef:a8:
c7:b6:6d:77:2f:06:02:1a:17:63:0d:15:48:65:47:
0d:d8:f5:9f:15:97:ec:56:ea:0e:a0:cf:1e:0f:1b:
56:00:0e:c7:fc:71:0c:1f:5c:f0:e7:5f:bd:87:8b:
65:2c:3f:a1:f6:ee:5f:d3:eb:6f:83:51:5f:f9:12:
b7:1b:21:a5:c5:b1:88:0f:89:81:05:f6:23:6a:50:
af:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:F6:B5:6B:46:79:A0:63:50:8A:F8:FB:7C:9B:69:BA:AC:C1:8B:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/bd1326c4-4806-37c2-bc53-dcb628200a80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl
X509v3 Authority Key Identifier:
keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
sbgp-ipAddrBlock: critical
IPv4:
52.129.96.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:3a:39:60:fc:f2:00:e1:01:21:8c:c0:a4:cd:6e:c7:5c:db:
c5:c8:35:39:49:30:7b:31:f0:da:6d:da:af:ae:b0:a2:0d:e5:
45:a3:6d:b7:17:00:ca:06:f2:1f:e3:0a:de:5e:82:84:f9:07:
b0:9b:42:a3:7d:8f:23:63:93:5f:37:d3:fd:5a:4c:7d:10:3d:
86:68:09:26:a2:2d:f5:54:20:3b:72:ec:76:a6:0f:cd:1b:e4:
d4:90:a8:da:ef:98:68:4b:87:22:08:83:dd:9f:e9:87:c6:5e:
95:22:57:39:3f:73:7c:7e:c8:84:02:79:73:a8:52:d1:7d:c6:
18:22:80:c6:76:3b:d2:5c:05:f3:d8:8e:06:ef:d7:a7:73:71:
c8:47:14:4c:d8:24:e3:8d:7b:82:7b:a8:c7:b1:a0:db:fb:4f:
be:73:bd:58:32:66:75:4a:f6:06:92:5c:a6:d9:41:7d:95:4e:
ee:ce:98:8a:3d:7e:b5:d8:2f:7b:a4:6c:35:fb:77:95:c0:13:
77:67:af:5a:99:0c:eb:5e:20:79:6d:5f:d6:92:ea:1b:02:fa:
17:f9:55:ab:22:1c:ed:c5:4c:25:43:2a:81:9c:ac:41:79:d7:
c9:18:ae:f7:b8:05:92:7a:52:fe:d5:87:5b:39:20:c1:75:1b:
d4:b3:9d:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:15:49 2026 by rpki-client