
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/1e204b9c-d198-320b-b509-fd1c19879317.roa
File: 1e204b9c-d198-320b-b509-fd1c19879317.roa (raw, json)
Hash identifier: 5vD6C1LeeTaCrrDlDvjmclEbdS25nR1TylwVypz25cI=
Subject key identifier: 9F:B4:FC:5D:6A:AB:C9:2B:73:0C:81:CA:4A:40:4C:A9:8E:34:90:B5
Certificate issuer: /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial: 010D0C9F4328584D5243583F947330AD11F1EA50
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/1e204b9c-d198-320b-b509-fd1c19879317.roa
Signing time: Sat 28 Mar 2026 19:13:19 +0000
ROA not before: Sat 28 Mar 2026 19:13:19 +0000
ROA not after: Fri 26 Jun 2026 19:13:19 +0000
asID: 2734
IP address blocks: 66.128.156.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:52:43:58:3f:94:73:30:ad:11:f1:ea:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Validity
Not Before: Mar 28 19:13:19 2026 GMT
Not After : Jun 26 19:13:19 2026 GMT
Subject: CN=f9ca9501-94fb-4a5a-8bb4-3e70bb76bb06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1a:54:9e:bb:e1:84:d6:e1:26:a9:25:d1:9c:
5c:6f:ad:24:64:a0:af:cc:a4:e9:89:bf:0d:98:b0:
79:78:33:5f:0c:e2:ae:f3:40:ba:58:c8:f0:0f:32:
b9:31:10:3c:38:c0:e9:e2:7f:ae:55:b0:b4:1d:49:
94:9c:23:d7:1c:9f:a6:5f:eb:e6:8b:fb:b0:dc:82:
d1:56:94:ce:a5:77:37:f8:a2:5f:87:67:f7:24:d0:
a4:87:b4:15:37:9d:ab:64:81:aa:7c:1a:7a:43:73:
93:22:6e:15:52:83:68:f1:32:a3:ca:f7:b3:d1:9f:
51:da:60:04:21:cb:10:33:53:9d:dd:0c:b9:1f:03:
4d:3a:2d:c8:ee:97:40:15:33:34:d3:c9:86:ed:21:
e1:4d:d3:92:e6:e0:9e:e8:6d:e8:70:80:80:1b:84:
96:2f:e8:c4:0b:bd:7d:7d:95:d4:cf:72:b1:12:96:
ba:a7:91:ec:60:ff:94:c0:fe:5f:ad:1a:34:2a:4e:
0e:63:47:0a:65:74:0b:e3:04:94:db:2d:49:f5:26:
c4:a2:60:80:2d:d3:b3:94:32:08:4b:74:c3:23:48:
35:2c:e8:a5:52:47:50:e7:bd:3e:80:98:bb:91:0b:
f8:51:7d:b0:f4:8f:9d:26:18:ca:1f:f6:d3:50:9b:
98:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:B4:FC:5D:6A:AB:C9:2B:73:0C:81:CA:4A:40:4C:A9:8E:34:90:B5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/1e204b9c-d198-320b-b509-fd1c19879317.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
X509v3 Authority Key Identifier:
keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
sbgp-ipAddrBlock: critical
IPv4:
66.128.156.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:31:45:27:ae:41:d9:6f:84:b3:ba:d6:47:83:b2:d3:ea:f4:
b4:f2:c3:5d:4a:13:56:c8:a5:5d:b1:31:32:eb:11:5b:3d:9b:
fa:25:8a:f1:5d:5c:a2:da:9e:80:06:a1:ff:90:18:fb:5c:8d:
5a:84:29:32:31:b4:c1:20:ad:49:3a:9f:fc:c8:ef:4e:ad:bb:
ca:54:04:c6:fa:59:b4:cf:c7:04:a3:1d:39:ac:91:bc:2b:2a:
15:fa:22:3d:5d:29:8c:33:a0:da:c4:3e:85:a7:12:40:52:93:
a6:33:6c:31:aa:1b:a3:42:ad:6b:11:79:dc:d9:34:f7:64:f6:
1d:0f:ef:14:bb:9a:5a:94:81:17:22:a8:b7:fd:fe:ac:2c:56:
01:cc:9c:97:09:0d:b1:51:a6:ef:8b:2a:85:ea:b3:52:9c:e3:
45:2f:20:17:cb:ba:a9:62:f5:30:8f:bf:48:79:6b:46:b0:f2:
02:25:3b:d7:34:1c:68:8c:33:c9:e8:ed:0e:f3:81:a3:62:2f:
a2:dc:eb:ea:05:b9:18:e1:e9:7a:9b:be:21:c7:f2:18:06:dd:
4e:73:7b:2e:b0:23:16:4f:84:99:a4:78:74:b9:34:32:1d:f4:
72:0c:74:29:5f:b4:eb:5b:b2:01:b2:d8:00:3d:44:0d:9b:e7:
e4:6b:4d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:39:28 2026 by rpki-client