
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/c98c7da6-ee48-3ea8-9b11-8dec71c8737f.roa
File: c98c7da6-ee48-3ea8-9b11-8dec71c8737f.roa (raw, json)
Hash identifier: DU+BISV4s8N6Sl4RbNh1LRvlQZUWCOOPZLX3mt/ndAE=
Subject key identifier: 89:EA:DA:8E:73:25:DD:52:C0:6B:CC:03:1D:FB:E0:34:72:79:17:3C
Certificate issuer: /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial: 010D0C9F4328584D4D5A6D325BBC65606CB54800
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/c98c7da6-ee48-3ea8-9b11-8dec71c8737f.roa
Signing time: Fri 27 Mar 2026 01:00:31 +0000
ROA not before: Fri 27 Mar 2026 01:00:31 +0000
ROA not after: Thu 25 Jun 2026 01:00:31 +0000
asID: 2734
IP address blocks: 66.128.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:4d:5a:6d:32:5b:bc:65:60:6c:b5:48:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Validity
Not Before: Mar 27 01:00:31 2026 GMT
Not After : Jun 25 01:00:31 2026 GMT
Subject: CN=0bdde5c9-1f88-4b01-bde7-44abd8851159
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:a8:52:7f:fa:75:39:91:51:b4:f7:83:82:97:
ad:22:ec:09:f2:1b:22:c4:1e:ff:e4:70:3d:7d:28:
6b:9e:bc:e5:cb:a7:16:c9:16:fa:27:f6:49:f7:d9:
bc:4a:b1:fe:22:47:a9:7a:a8:88:11:61:ca:f8:be:
0f:50:a1:72:1c:4c:97:19:4b:d0:da:8c:d9:d2:68:
d9:46:29:6d:9b:54:1c:57:37:eb:51:07:5d:6b:20:
31:76:73:c7:6f:7a:06:f2:8e:c4:a8:e3:e8:42:b7:
d3:0f:ca:e1:0d:a0:a9:1b:8a:f0:f8:f6:4b:6d:f6:
9f:3f:d7:6b:2b:69:60:a6:62:1f:13:22:64:84:17:
41:db:57:a8:23:40:d0:34:7e:60:e3:2e:11:e1:ea:
04:19:7c:5e:bf:e3:06:68:c7:08:29:2a:06:cc:fe:
7d:06:eb:34:e6:b3:88:67:ee:3b:d6:da:0d:f0:a3:
02:11:ef:d9:b9:72:bd:ba:f0:7b:90:a0:bc:ba:6f:
9c:1f:03:99:48:65:e6:dc:f2:e0:6c:33:c4:bf:75:
54:19:0a:ad:ba:69:1a:04:cc:d2:ad:ed:07:fe:07:
c5:24:55:ec:80:60:99:61:02:c8:29:40:81:e3:50:
b8:46:4c:5e:50:42:85:2c:2f:c9:b3:14:e6:6e:a1:
2f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:EA:DA:8E:73:25:DD:52:C0:6B:CC:03:1D:FB:E0:34:72:79:17:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/c98c7da6-ee48-3ea8-9b11-8dec71c8737f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
X509v3 Authority Key Identifier:
keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
sbgp-ipAddrBlock: critical
IPv4:
66.128.147.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:e5:01:b1:9a:77:14:25:62:70:e0:fe:0a:25:ca:8c:6f:90:
c1:e0:26:22:e4:da:4f:79:33:d6:e8:ef:4c:e9:26:1e:8e:bf:
d4:e6:f7:f8:9e:38:1e:86:6f:87:35:64:eb:fa:d3:c2:ca:1b:
d6:6c:d7:2b:1a:72:e8:52:c7:8c:e7:c2:2c:62:26:bd:f0:5a:
de:fd:6c:83:df:a1:93:bb:e9:81:70:cf:1e:45:9f:30:c2:4b:
1f:e4:cc:76:94:6f:75:69:98:92:00:24:56:c7:06:48:26:bb:
4c:77:a2:4f:19:57:58:27:20:6b:24:ae:03:f3:1c:62:4e:46:
45:5d:01:7b:4d:ef:6f:aa:da:40:38:a4:3d:ea:54:55:e7:9b:
b1:df:8a:14:c6:be:5c:cc:56:60:d4:88:29:54:ae:50:fe:60:
9e:82:d1:c3:1a:10:6a:88:ba:5b:31:bb:09:e8:f6:1e:8a:e7:
62:ca:19:ff:cc:db:d7:2d:98:ca:01:96:f9:7a:d6:bb:7c:6b:
8b:91:6c:8c:7f:fd:45:f7:be:7e:5a:21:66:25:56:8f:8c:11:
84:2d:77:f4:94:8b:cd:59:83:9d:6a:7a:86:f9:45:7f:0c:86:
05:b5:19:7b:5c:df:19:91:2e:e3:95:8e:19:75:46:2c:00:84:
ce:45:e8:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:02:50 2026 by rpki-client