
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/299096e0-2f30-39c1-8e77-4fa18c746b04.roa
File: 299096e0-2f30-39c1-8e77-4fa18c746b04.roa (raw, json)
Hash identifier: jU+0jiaFBWMZkWcj2Lbp7oHupFxcIkthDNFUnPlNnUA=
Subject key identifier: C6:EB:B4:2A:1C:5E:9A:B0:52:A7:81:19:1C:F5:33:29:9E:FE:52:C1
Certificate issuer: /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial: 010D0C9F4328584E9A7FD2CB81B7110E153CB880
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/299096e0-2f30-39c1-8e77-4fa18c746b04.roa
Signing time: Fri 24 Jul 2026 09:00:12 +0000
ROA not before: Fri 24 Jul 2026 09:00:12 +0000
ROA not after: Thu 22 Oct 2026 09:00:12 +0000
asID: 30103
IP address blocks: 149.137.20.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:9a:7f:d2:cb:81:b7:11:0e:15:3c:b8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
Validity
Not Before: Jul 24 09:00:12 2026 GMT
Not After : Oct 22 09:00:12 2026 GMT
Subject: CN=7711d16e-5fc7-4958-b136-a76696f51c33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:5f:90:56:60:2a:7d:78:5a:69:21:99:d4:61:
6e:96:1e:fe:53:61:5a:e4:28:48:d8:f1:00:b4:79:
11:01:1a:d5:83:4b:9d:61:f3:54:13:df:6b:86:56:
16:3c:80:3e:4e:2d:b9:18:24:99:3b:55:1f:56:a9:
98:0e:93:de:bf:54:58:b3:7f:fd:fa:48:b4:de:29:
ed:fb:9b:85:55:63:e2:16:1b:e0:4a:b4:c0:42:6d:
6c:5d:33:ab:3c:33:7f:3b:02:fc:48:5b:67:ca:eb:
c5:c3:a3:af:a0:d2:ac:2a:3c:d5:42:00:5b:4d:82:
ef:d8:29:7d:56:e5:59:39:bf:af:8c:e7:d2:21:72:
4c:7b:27:c8:32:4e:ef:0c:70:a8:fc:71:dc:3f:3a:
6c:51:c3:46:5b:f2:09:bd:41:db:76:ff:bb:8a:c2:
dc:2a:33:46:a2:b4:29:6d:68:93:c7:b5:0a:43:e8:
a1:17:58:39:95:18:71:59:22:bb:d4:70:88:98:59:
5d:d2:55:e6:51:9c:10:96:05:ca:07:54:63:f6:88:
59:3d:2f:c2:fc:b1:b6:12:ab:69:44:93:f8:e4:78:
2a:69:22:b5:c7:d6:9e:16:37:6c:14:4c:35:53:9e:
c7:0a:63:3b:33:74:13:1f:9f:18:f4:45:89:b2:5d:
8a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:EB:B4:2A:1C:5E:9A:B0:52:A7:81:19:1C:F5:33:29:9E:FE:52:C1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/299096e0-2f30-39c1-8e77-4fa18c746b04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
X509v3 Authority Key Identifier:
keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
sbgp-ipAddrBlock: critical
IPv4:
149.137.20.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:14:60:b9:d4:70:62:93:a0:8e:41:64:e3:1e:ab:e3:5f:d2:
03:d2:f0:ee:e8:46:bf:ee:77:24:27:f6:7d:4d:e1:ab:ff:93:
36:11:12:b0:27:ed:dc:8c:46:a5:5f:fb:5c:1c:30:72:55:81:
bb:5f:9a:2c:54:2f:cd:a3:92:e1:ac:53:7e:0b:3f:20:7a:9a:
04:30:15:fe:60:2e:af:83:b6:f0:61:54:eb:d3:6e:82:07:d8:
bb:a9:64:24:92:20:33:f5:8a:be:22:9d:c3:97:ec:fb:27:de:
43:a0:93:9c:f8:0c:dd:1d:a6:94:b5:f5:ef:60:d7:7f:b6:e0:
88:96:07:56:1c:3d:6d:51:a7:02:83:c8:0a:51:18:7c:91:3d:
a8:57:99:b3:c5:48:9d:18:29:5a:2f:ea:52:b5:bf:4c:d6:6b:
25:39:87:1d:cd:3b:5a:a5:a8:fb:c3:d6:e5:4b:c3:36:a9:e1:
86:fa:07:c2:6b:b6:39:74:a9:cd:9f:2f:8a:5e:34:78:f6:99:
70:ac:a0:a0:e7:05:c7:a2:4f:4e:66:ba:ef:e3:28:4f:7e:1e:
9e:b2:1e:fa:7a:38:51:d4:13:72:2a:05:73:76:06:a8:49:98:
08:41:a3:b7:36:01:c3:f2:6b:a7:81:a8:72:a8:c8:6b:1e:07:
4a:5e:26:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:50:27 2026 by rpki-client