
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d29c11ab-c477-4c3c-8a5d-aa4ac4233132/c844b065-2a1a-31c2-88f6-22f75ccc8a82.roa
File: c844b065-2a1a-31c2-88f6-22f75ccc8a82.roa (raw, json)
Hash identifier: 9h4SKfVYetKQiT5uh/H/ChJC81ovd9xHUohPjxi5RoE=
Subject key identifier: 52:74:01:49:92:5A:10:F7:D8:D8:F8:06:21:4C:FD:13:E8:23:7C:7B
Certificate issuer: /CN=d29c11ab-c477-4c3c-8a5d-aa4ac4233132
Certificate serial: 010D0C9F4328584D773A7DC1CD07E61C197BC600
Authority key identifier: CE:33:02:1B:7C:ED:F3:76:C3:A0:82:31:3C:FC:D5:6C:F0:E8:89:BC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d29c11ab-c477-4c3c-8a5d-aa4ac4233132.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d29c11ab-c477-4c3c-8a5d-aa4ac4233132/c844b065-2a1a-31c2-88f6-22f75ccc8a82.roa
Signing time: Sat 11 Apr 2026 01:00:24 +0000
ROA not before: Sat 11 Apr 2026 01:00:24 +0000
ROA not after: Fri 10 Jul 2026 01:00:24 +0000
asID: 394149
IP address blocks: 199.185.184.0/23 maxlen: 23
2620:121:9000::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d29c11ab-c477-4c3c-8a5d-aa4ac4233132/d29c11ab-c477-4c3c-8a5d-aa4ac4233132.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d29c11ab-c477-4c3c-8a5d-aa4ac4233132/d29c11ab-c477-4c3c-8a5d-aa4ac4233132.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d29c11ab-c477-4c3c-8a5d-aa4ac4233132.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:77:3a:7d:c1:cd:07:e6:1c:19:7b:c6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d29c11ab-c477-4c3c-8a5d-aa4ac4233132
Validity
Not Before: Apr 11 01:00:24 2026 GMT
Not After : Jul 10 01:00:24 2026 GMT
Subject: CN=c70c0115-41a0-4a56-9596-c9c4fa456403
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2a:9a:2d:13:d5:e8:0a:de:fa:a6:97:60:47:
f3:4f:81:4c:cc:4b:49:2c:9f:96:7c:ff:b0:de:ae:
51:91:ee:94:5c:1d:89:17:04:8d:f6:a6:55:7a:9c:
eb:23:93:98:1d:00:56:1a:76:ed:5d:71:1e:9b:8b:
bf:e0:99:df:ee:16:bb:8b:ff:04:0c:23:1a:a3:d7:
1b:95:00:d7:b9:47:90:7b:0a:4a:1b:3e:4d:93:23:
75:1c:31:7a:9a:e2:bc:78:d8:33:f0:55:fc:15:f4:
69:89:bf:76:3d:76:cb:33:1f:c3:55:b0:9b:b0:50:
8e:18:c0:90:fa:e6:71:ce:73:27:fe:bd:f9:fc:66:
54:37:b2:b8:e2:05:df:ab:ef:3e:54:f6:b3:72:d1:
17:84:f8:66:6d:fb:c6:79:f8:be:c9:91:cc:ec:fd:
61:98:1d:8c:c2:c0:ed:f4:bc:2a:c5:4d:e9:a1:41:
7d:fb:75:39:e1:8a:8a:42:56:99:54:8b:b6:64:88:
e2:02:e0:c2:63:af:39:4b:03:71:eb:60:7b:f3:3e:
de:f7:ab:16:fa:5e:b5:9f:f8:7c:89:7c:44:22:03:
86:d5:fe:36:cc:79:9e:ec:c2:fe:e0:81:89:32:7a:
23:2f:c3:72:c1:c8:38:92:30:e5:01:c5:a6:7b:db:
86:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:74:01:49:92:5A:10:F7:D8:D8:F8:06:21:4C:FD:13:E8:23:7C:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d29c11ab-c477-4c3c-8a5d-aa4ac4233132/c844b065-2a1a-31c2-88f6-22f75ccc8a82.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d29c11ab-c477-4c3c-8a5d-aa4ac4233132/d29c11ab-c477-4c3c-8a5d-aa4ac4233132.crl
X509v3 Authority Key Identifier:
keyid:CE:33:02:1B:7C:ED:F3:76:C3:A0:82:31:3C:FC:D5:6C:F0:E8:89:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d29c11ab-c477-4c3c-8a5d-aa4ac4233132.cer
sbgp-ipAddrBlock: critical
IPv4:
199.185.184.0/23
IPv6:
2620:121:9000::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d9:f9:22:f8:a7:b7:b5:87:b1:0d:10:03:d6:91:74:b4:c4:93:
f3:78:a5:87:30:05:fb:51:e1:84:cd:1b:29:ed:c0:9a:31:68:
34:55:cb:20:da:4d:1d:f8:4f:3d:da:5b:ec:e3:d4:a4:a0:53:
7e:c9:63:9f:7c:ac:64:32:89:e8:f1:8a:ba:08:c1:83:c6:7c:
60:dc:f3:32:69:bf:3a:4e:82:37:0f:d7:d0:6e:b3:8a:0a:14:
df:e8:cd:36:1b:a8:dd:69:5e:9a:d7:30:12:7b:0a:3e:63:95:
bb:d6:25:fa:d2:17:e9:ac:32:88:5e:ca:aa:86:af:3f:7f:94:
12:cd:8c:5f:d1:a3:a2:f1:09:b5:83:e7:bc:9b:58:18:9a:a6:
b5:65:c5:97:04:dd:ec:00:16:c5:67:5b:13:f1:34:04:a4:37:
08:eb:43:7a:ac:c6:98:73:86:3e:91:1b:fe:e1:23:c2:db:57:
33:f5:0a:e4:c6:f3:e7:91:81:9f:c1:0a:3d:95:82:13:7c:1a:
97:a5:9e:59:73:19:74:c3:79:29:01:6e:43:df:86:17:97:1b:
db:a6:35:e6:db:32:b3:13:92:af:35:0a:3b:0b:fd:15:d6:3f:
f3:ba:78:a7:04:ff:09:cf:e5:c0:2a:c7:83:e4:66:59:64:df:
4b:7c:7e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:20:14 2026 by rpki-client