
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/c4cf7853-e016-3444-9ee5-2ddbb6b2d080.roa
File: c4cf7853-e016-3444-9ee5-2ddbb6b2d080.roa (raw, json)
Hash identifier: ZbSUo2CiSoIM5KR/gEQXR2UKmupsGlhITkJUqGwU+nQ=
Subject key identifier: 69:D7:95:93:16:BD:52:C7:CA:8D:77:88:0B:47:3C:93:B2:60:78:4D
Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0
Certificate serial: 010D0C9F4328584F3E47D4C362B04C4580C825C0
Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/c4cf7853-e016-3444-9ee5-2ddbb6b2d080.roa
Signing time: Mon 21 Sep 2026 01:00:11 +0000
ROA not before: Mon 21 Sep 2026 01:00:11 +0000
ROA not after: Sun 20 Dec 2026 02:00:11 +0000
asID: 14618
IP address blocks: 129.41.172.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 23 Sep 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:3e:47:d4:c3:62:b0:4c:45:80:c8:25:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0
Validity
Not Before: Sep 21 01:00:11 2026 GMT
Not After : Dec 20 02:00:11 2026 GMT
Subject: CN=150fbd18-e99e-440b-85c3-865408a1ee75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fe:ea:75:ee:3f:4e:b7:e9:a4:cd:5b:57:83:
e1:89:9b:f6:9e:a7:a3:3e:40:cd:c2:0b:d6:25:cf:
c6:fe:a2:e8:f5:20:19:bd:76:f2:3a:c0:26:0d:88:
41:ea:c9:8e:32:44:47:36:0d:fd:f0:55:d1:4a:bd:
72:9a:8e:a6:b5:ba:f2:f9:9a:da:48:fa:15:07:63:
a3:10:63:98:39:89:ad:af:65:89:e3:2c:d8:14:c4:
03:54:36:a6:31:63:2c:2e:61:1b:55:35:f9:04:fd:
a9:2c:bd:bc:19:59:7f:74:dc:09:83:4f:d9:4c:61:
cf:7e:92:94:bb:2c:b5:90:54:74:90:1b:e3:83:f0:
87:eb:a8:22:8f:cb:30:df:c1:4b:26:e2:c0:6b:10:
80:2c:2c:2f:74:a6:bf:21:d7:4b:fd:33:a3:fa:32:
0f:78:c8:f7:06:5c:ba:5e:af:27:56:9c:dd:1a:42:
d1:85:a6:c6:aa:56:f0:3d:e8:bc:07:76:91:b4:7c:
5b:f2:83:ba:60:7e:f1:20:0e:9b:e9:c0:9a:b6:a2:
65:80:24:51:e3:2b:84:ae:a6:08:3a:07:d4:65:6e:
be:95:4a:09:66:54:59:e3:e3:be:82:89:c8:ef:46:
66:47:61:6d:c4:cc:2e:b2:1c:a8:8a:0f:d0:4a:44:
0e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:D7:95:93:16:BD:52:C7:CA:8D:77:88:0B:47:3C:93:B2:60:78:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/c4cf7853-e016-3444-9ee5-2ddbb6b2d080.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl
X509v3 Authority Key Identifier:
keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
sbgp-ipAddrBlock: critical
IPv4:
129.41.172.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:32:26:13:e3:fd:79:45:7a:76:b3:d9:14:84:e6:80:0e:e2:
b2:22:a5:f5:11:b6:cb:0a:51:5d:54:f0:5e:5b:e5:27:e3:c3:
29:4b:33:47:26:c9:c2:2c:3e:6b:b4:1a:55:64:ed:63:66:ba:
d4:a5:53:5f:ec:d0:31:42:41:14:38:71:62:69:32:85:89:ff:
46:fa:14:29:7c:d8:e3:4b:2d:66:5b:55:7c:18:f6:a9:c0:6e:
d3:ee:71:9f:d0:89:2b:8c:fc:99:89:a0:ee:46:c2:08:da:83:
87:40:64:f7:bd:8f:cb:8b:9d:2a:07:0c:15:fe:9a:75:34:ed:
9c:01:9b:12:8e:52:68:da:91:c6:ad:33:b8:31:56:9a:39:9a:
62:87:64:15:e7:14:99:00:1f:c2:a9:fb:09:61:34:02:42:c3:
7e:ce:0f:88:06:8f:50:a1:6d:0e:1a:4a:54:b8:b1:19:73:63:
3e:59:97:60:09:5e:69:2f:29:59:c3:b5:51:db:06:ae:98:7b:
da:11:f5:74:98:8c:c1:9c:93:9d:5d:6a:a7:9e:2e:be:b7:01:
d4:af:49:cb:b4:1f:0c:f7:4e:58:69:8c:8b:25:96:a5:de:44:
51:fa:e7:d0:bb:07:97:8c:b6:3f:f1:75:ab:f0:23:fe:63:15:
21:db:06:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:31:47 2026 by rpki-client