
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/1d8a4a16-99fc-3e6c-baa3-235457a94ebf.roa
File: 1d8a4a16-99fc-3e6c-baa3-235457a94ebf.roa (raw, json)
Hash identifier: a72aBkeqYHJLoloczN30UUsuoU6DP4wcJV8VF1+MXH8=
Subject key identifier: D2:07:FC:AF:B0:EA:B4:B1:46:4F:11:F9:2C:22:DA:AD:B2:B6:42:FA
Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0
Certificate serial: 010D0C9F4328584CDB02053C879D3C620CF65F80
Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/1d8a4a16-99fc-3e6c-baa3-235457a94ebf.roa
Signing time: Sat 14 Feb 2026 02:00:32 +0000
ROA not before: Sat 14 Feb 2026 02:00:32 +0000
ROA not after: Fri 15 May 2026 01:00:32 +0000
asID: 19795
IP address blocks: 129.41.172.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:db:02:05:3c:87:9d:3c:62:0c:f6:5f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0
Validity
Not Before: Feb 14 02:00:32 2026 GMT
Not After : May 15 01:00:32 2026 GMT
Subject: CN=4bc6dbd1-e0cc-4a9b-8d8d-b9a7293c0940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:c4:d8:8b:23:2b:5b:87:5d:66:ec:9f:df:df:
f4:6b:f2:b2:02:c4:46:83:f4:0b:e2:75:63:b9:7a:
67:64:be:07:f1:f1:27:9f:43:04:4a:6f:43:2c:83:
44:94:0f:d6:82:aa:0f:10:31:1a:80:33:23:91:49:
e2:4a:19:26:8b:7f:e7:a6:47:6b:ed:87:87:86:e1:
a9:be:45:48:9c:31:c4:27:c9:be:61:38:f2:a5:7f:
1d:b5:e3:c9:fd:49:37:f1:aa:15:5d:e2:0f:be:80:
a1:65:88:0a:90:35:4c:a3:1c:12:88:54:8c:5b:6f:
32:af:55:06:7d:a2:e2:9d:3e:10:29:14:08:8e:8e:
a3:3c:d5:28:6d:49:41:f7:09:61:97:43:2a:d1:a1:
42:9a:46:26:b7:a2:1f:75:6b:4e:32:1d:91:e3:99:
d8:d0:19:01:52:b7:aa:8b:83:f8:f5:a7:44:86:ac:
3a:ef:84:f8:f3:80:f0:0e:36:3a:f3:43:ff:42:82:
aa:72:9e:40:99:4e:44:88:80:20:12:68:b8:77:55:
dd:8d:7a:b5:f9:79:16:86:46:9d:64:59:23:c4:90:
18:39:46:3e:74:9e:80:42:6d:bf:18:e4:db:89:a3:
89:60:2b:b6:ef:4c:66:ad:6e:f8:c6:d1:93:b4:df:
a2:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:07:FC:AF:B0:EA:B4:B1:46:4F:11:F9:2C:22:DA:AD:B2:B6:42:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/1d8a4a16-99fc-3e6c-baa3-235457a94ebf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl
X509v3 Authority Key Identifier:
keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
sbgp-ipAddrBlock: critical
IPv4:
129.41.172.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:8e:cf:ca:07:e0:1b:36:e5:7e:c8:03:23:55:2c:e0:52:74:
de:23:de:d0:a7:a7:73:1f:9d:51:a5:d7:b8:5a:a8:39:fe:fa:
ea:c1:6d:37:8e:06:36:12:d4:0e:30:07:b5:06:8b:80:c3:a5:
94:4c:46:63:10:f1:04:b0:c3:74:07:45:5e:1c:9f:c2:b1:b9:
46:9e:71:6c:e8:0a:f8:70:e3:b3:a4:f9:03:de:6b:b7:89:6d:
02:78:28:5c:11:10:ff:e1:6a:a4:01:00:ca:3a:d0:e6:ab:95:
3e:40:39:08:6d:59:59:30:cd:1e:10:73:69:07:43:04:db:d2:
8c:3c:f6:d3:f1:e6:8b:52:20:2b:70:be:0f:db:15:54:a1:2f:
6f:a7:d2:0d:0c:58:fc:27:bd:90:3f:2a:53:f2:2d:ac:f6:67:
68:c8:06:53:6a:32:a3:b2:fe:bc:76:57:2f:b5:b6:35:20:78:
09:57:1d:9d:57:91:44:4c:66:ae:cb:57:5d:f0:ea:f7:2b:cf:
8b:a2:0e:45:46:15:83:98:33:00:71:5f:d1:5c:95:56:74:2e:
90:45:9f:78:4f:86:23:4d:bb:ef:30:03:f7:ab:87:9e:fb:0c:
c4:7b:fa:d1:03:ee:0b:f7:28:2e:59:0c:cf:67:53:13:ba:30:
38:0f:44:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:13:56 2026 by rpki-client