
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/c98c7da6-ee48-3ea8-9b11-8dec71c8737f.roa
File: c98c7da6-ee48-3ea8-9b11-8dec71c8737f.roa (raw, json)
Hash identifier: XbGa1P0RSLVy524r4qbeaugBb0hdORraFXghxVO1pFs=
Subject key identifier: 61:18:AB:0E:78:93:F7:F0:70:34:B5:33:F9:6E:B3:FF:10:AC:D9:B0
Certificate issuer: /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial: 010D0C9F4328584B8EACE570136DB38B3A9884C0
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/c98c7da6-ee48-3ea8-9b11-8dec71c8737f.roa
Signing time: Sat 18 Oct 2025 01:00:30 +0000
ROA not before: Sat 18 Oct 2025 01:00:30 +0000
ROA not after: Fri 16 Jan 2026 02:00:30 +0000
asID: 2734
IP address blocks: 66.128.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:8e:ac:e5:70:13:6d:b3:8b:3a:98:84:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Validity
Not Before: Oct 18 01:00:30 2025 GMT
Not After : Jan 16 02:00:30 2026 GMT
Subject: CN=8a2f2bcf-56bb-429f-9818-5b113af19e3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:22:f6:16:a1:a9:56:46:10:11:48:e6:41:d7:
7f:55:70:c7:74:66:d7:a2:40:10:6a:d8:58:b4:9e:
f9:91:db:35:f4:73:c6:13:13:46:a1:0f:e6:68:0d:
6c:a2:6f:8c:3f:99:4c:71:71:23:37:53:f5:ab:63:
ad:30:8d:1c:cf:00:d9:c9:ae:66:0a:9c:8f:b7:ac:
cc:53:aa:34:e3:66:8c:de:58:40:c2:6a:e9:11:2d:
1d:8f:8f:f0:ae:c5:11:c0:35:fc:ab:c8:fc:10:ed:
af:42:fb:e5:93:40:0b:5d:4e:7b:9a:e8:97:b2:37:
ef:30:13:66:45:29:84:28:34:bc:fc:21:25:7c:ea:
fe:ef:3a:e5:df:70:bb:9c:03:d2:cc:9c:92:2e:a7:
9c:63:47:f0:a7:36:29:95:53:f1:37:58:06:6b:7b:
4e:cb:9d:c7:d3:98:4d:85:17:48:61:0d:ea:7a:1b:
a2:1f:29:62:27:b9:96:2d:b9:a0:d7:21:7b:97:d5:
97:24:dc:5c:ce:45:d1:37:0b:07:e9:27:67:c0:02:
de:11:f9:b3:ff:2c:af:b1:a2:9e:d5:c1:99:13:b2:
79:cc:0d:f5:ac:fa:54:c6:40:98:0d:64:a9:98:3e:
d8:f7:08:cb:17:86:6e:c2:f3:fe:d4:09:07:83:be:
a3:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:18:AB:0E:78:93:F7:F0:70:34:B5:33:F9:6E:B3:FF:10:AC:D9:B0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/c98c7da6-ee48-3ea8-9b11-8dec71c8737f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
X509v3 Authority Key Identifier:
keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
sbgp-ipAddrBlock: critical
IPv4:
66.128.147.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:ce:06:66:27:e0:49:e8:4e:ac:60:af:1c:9a:91:8b:79:27:
98:e8:c9:c5:e9:21:58:1e:68:1e:da:f3:fb:58:6c:98:1d:5d:
77:d8:36:89:06:54:cd:13:22:59:19:7f:49:06:a9:94:67:d3:
27:a0:d1:5f:bd:bf:16:62:85:71:d3:df:a8:f9:4a:4d:94:a2:
44:eb:11:ec:74:b9:3e:b5:47:2e:a8:6f:c0:00:5d:b0:a1:6c:
b7:19:4c:a6:16:2a:12:30:5d:68:ca:77:a5:8a:a1:cd:2a:93:
13:20:c3:b4:ff:ce:ca:d8:29:91:a2:0f:c9:ed:13:66:47:1f:
73:4e:ae:89:7e:e7:30:99:7f:e6:31:49:6f:b4:ac:5e:75:84:
12:d1:f8:42:e3:17:03:c6:bd:69:f4:fe:2b:07:e9:e7:93:33:
50:3c:95:b7:0c:0b:81:8b:2f:83:74:94:92:c7:2f:e0:24:d8:
6e:3f:b2:f1:f0:df:52:17:16:c8:62:46:9a:0f:82:c0:d7:5a:
32:b4:d9:b6:ff:78:24:b1:a2:e6:d4:05:d1:80:7d:93:d7:77:
ea:d4:bc:d2:89:0c:d7:24:73:59:39:6f:af:17:79:e5:36:28:
d7:f1:9b:b8:94:e5:ce:b9:b0:74:76:ed:30:28:1d:b6:eb:af:
f6:ae:aa:11
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrOVwE22zizqYhMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjlmNWU0OTYtOGZmOC00MDFmLWFkMjctYTFiNjI0Zjkw
MTRhMB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk
OGEyZjJiY2YtNTZiYi00MjlmLTk4MTgtNWIxMTNhZjE5ZTNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyyL2FqGpVkYQEUjmQdd/VXDHdGbXokAQathY
tJ75kds19HPGExNGoQ/maA1som+MP5lMcXEjN1P1q2OtMI0czwDZya5mCpyPt6zM
U6o042aM3lhAwmrpES0dj4/wrsURwDX8q8j8EO2vQvvlk0ALXU57muiXsjfvMBNm
RSmEKDS8/CElfOr+7zrl33C7nAPSzJySLqecY0fwpzYplVPxN1gGa3tOy53H05hN
hRdIYQ3qehuiHyliJ7mWLbmg1yF7l9WXJNxczkXRNwsH6SdnwALeEfmz/yyvsaKe
1cGZE7J5zA31rPpUxkCYDWSpmD7Y9wjLF4ZuwvP+1AkHg76jpwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGEYqw54k/fwcDS1M/lus/8QrNmwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yOWY1
ZTQ5Ni04ZmY4LTQwMWYtYWQyNy1hMWI2MjRmOTAxNGEvYzk4YzdkYTYtZWU0OC0z
ZWE4LTliMTEtOGRlYzcxYzg3MzdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjlmNWU0OTYtOGZmOC00MDFmLWFk
MjctYTFiNjI0ZjkwMTRhLzI5ZjVlNDk2LThmZjgtNDAxZi1hZDI3LWExYjYyNGY5
MDE0YS5jcmwwHwYDVR0jBBgwFoAUsHS8ugFMyPdv9/jKlpR/Lims27EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8yOWY1ZTQ5Ni04ZmY4LTQwMWYtYWQyNy1hMWI2
MjRmOTAxNGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQoCTMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACzOBmYn4EnoTqxgrxyakYt5J5joycXpIVgeaB7a8/tYbJgdXXfYNokG
VM0TIlkZf0kGqZRn0yeg0V+9vxZihXHT36j5Sk2UokTrEex0uT61Ry6ob8AAXbCh
bLcZTKYWKhIwXWjKd6WKoc0qkxMgw7T/zsrYKZGiD8ntE2ZHH3NOrol+5zCZf+Yx
SW+0rF51hBLR+ELjFwPGvWn0/isH6eeTM1A8lbcMC4GLL4N0lJLHL+Ak2G4/svHw
31IXFshiRpoPgsDXWjK02bb/eCSxoubUBdGAfZPXd+rUvNKJDNckc1k5b68XeeU2
KNfxm7iU5c65sHR27TAoHbbrr/auqhE=
-----END CERTIFICATE-----
Generated at Wed Nov 5 02:35:42 2025 by rpki-client