
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27960a41-3597-4b9a-8e79-80ae635ce8ff/0d245965-f93b-398c-ae46-d494039afdb2.roa
File: 0d245965-f93b-398c-ae46-d494039afdb2.roa (raw, json)
Hash identifier: YBiraQD/sdCHYSDX2QoUfKZcAW4j0y+C4eUQ6NHilNE=
Subject key identifier: DB:77:36:2E:11:17:06:50:40:2B:1F:FD:DA:64:1F:54:61:4E:ED:A3
Certificate issuer: /CN=27960a41-3597-4b9a-8e79-80ae635ce8ff
Certificate serial: 010D0C9F4328584D60E50A6EFD4D81FE2CBC8340
Authority key identifier: 28:0C:7E:95:36:A5:A6:AA:39:A9:D5:04:E5:8D:2A:23:AC:C9:21:70
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27960a41-3597-4b9a-8e79-80ae635ce8ff.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27960a41-3597-4b9a-8e79-80ae635ce8ff/0d245965-f93b-398c-ae46-d494039afdb2.roa
Signing time: Fri 03 Apr 2026 01:00:24 +0000
ROA not before: Fri 03 Apr 2026 01:00:24 +0000
ROA not after: Thu 02 Jul 2026 01:00:24 +0000
asID: 5719
IP address blocks: 129.49.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27960a41-3597-4b9a-8e79-80ae635ce8ff/27960a41-3597-4b9a-8e79-80ae635ce8ff.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27960a41-3597-4b9a-8e79-80ae635ce8ff/27960a41-3597-4b9a-8e79-80ae635ce8ff.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27960a41-3597-4b9a-8e79-80ae635ce8ff.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:60:e5:0a:6e:fd:4d:81:fe:2c:bc:83:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27960a41-3597-4b9a-8e79-80ae635ce8ff
Validity
Not Before: Apr 3 01:00:24 2026 GMT
Not After : Jul 2 01:00:24 2026 GMT
Subject: CN=d0ed3364-7c51-48a7-887e-b147ed3ddf44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fe:42:d2:c9:cd:f6:90:67:1d:16:ce:93:95:
9e:01:41:44:8e:30:4a:e2:73:cc:34:49:d3:cd:1b:
3b:38:57:61:27:1b:f8:c0:6d:66:85:f5:ef:59:38:
62:c1:c3:24:40:d6:ff:49:06:c8:5b:70:c6:9c:78:
af:c3:fa:7c:17:06:35:33:db:e9:93:bb:65:a9:4c:
c4:ce:ea:8d:44:de:3a:82:4c:36:52:20:01:03:5d:
29:27:31:2c:3f:b6:a9:9b:c8:88:7b:c2:94:44:bd:
39:1e:35:ce:68:42:a1:b0:b7:c7:36:ef:3a:a8:ee:
44:e3:ab:52:9d:3c:b9:57:b7:31:df:b1:7c:3c:bc:
e5:aa:a4:5a:3b:6a:7f:ca:54:8a:f7:51:bb:45:79:
a7:92:09:5a:7a:e9:50:a1:6f:79:a1:99:bc:2b:c8:
a3:0c:24:97:95:9d:79:6f:c1:27:83:0e:e8:2c:1f:
f4:aa:04:f5:35:f2:ed:59:b7:db:74:cc:60:f8:99:
27:4c:d3:5f:23:1b:bb:24:65:02:77:88:11:27:b1:
26:d8:87:4f:23:5b:27:7c:5e:a0:23:91:ed:db:3a:
2e:ca:e2:87:82:6e:df:01:01:2e:d4:f5:0a:c4:9c:
fd:fd:85:2b:5c:cb:2a:33:fd:9b:6c:7a:ef:77:3e:
c3:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:77:36:2E:11:17:06:50:40:2B:1F:FD:DA:64:1F:54:61:4E:ED:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27960a41-3597-4b9a-8e79-80ae635ce8ff/0d245965-f93b-398c-ae46-d494039afdb2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27960a41-3597-4b9a-8e79-80ae635ce8ff/27960a41-3597-4b9a-8e79-80ae635ce8ff.crl
X509v3 Authority Key Identifier:
keyid:28:0C:7E:95:36:A5:A6:AA:39:A9:D5:04:E5:8D:2A:23:AC:C9:21:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/27960a41-3597-4b9a-8e79-80ae635ce8ff.cer
sbgp-ipAddrBlock: critical
IPv4:
129.49.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:93:8c:dc:5d:f4:66:d4:5a:bb:53:cb:02:13:51:42:3d:80:
d8:65:c4:26:31:17:fa:57:f8:58:36:2c:59:97:f6:b6:df:3c:
0e:8d:bb:1a:82:eb:e7:dd:6b:b5:30:6a:3a:05:79:bd:f2:b2:
25:0a:07:87:32:a6:25:b2:de:73:9c:77:b9:99:54:c0:83:55:
b1:88:b8:fd:2a:0d:71:97:e8:45:2e:a6:5b:bb:1d:bf:70:e1:
77:05:fb:6a:59:40:a9:07:8e:62:8e:c0:ef:9c:5f:c1:fe:70:
e4:64:b6:73:fc:7c:0f:c2:ff:97:0d:c9:a5:fe:e2:d0:f6:b5:
65:f3:99:d2:c9:85:fb:8c:16:52:7c:e8:ef:29:53:26:58:6e:
22:29:33:34:fc:3b:50:75:da:aa:0e:f3:c9:e4:07:e4:55:f3:
8b:7f:a0:66:c5:fc:2f:bb:13:c5:ae:74:c6:59:28:8b:5e:50:
a0:a3:2e:c9:cc:ef:9b:4c:db:f6:38:b9:75:2b:e1:1d:7a:56:
49:c4:26:80:ff:2d:79:c3:f4:3a:aa:18:2f:d8:c9:38:d1:bc:
54:e7:18:d2:95:54:4c:fd:5b:86:23:77:dc:76:81:a8:6d:9b:
e4:50:8a:c3:ff:c0:0c:60:41:ea:9b:e9:76:eb:4a:fa:b2:b4:
dc:e7:d3:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:01:43 2026 by rpki-client