
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/10d72829-b71c-3de2-ab26-1eac86caaeaf.roa
File: 10d72829-b71c-3de2-ab26-1eac86caaeaf.roa (raw, json)
Hash identifier: VT+BiI/OfVb/xpTh2A3c9VIb9pJbAkpohemiz+IefL0=
Subject key identifier: 60:FD:1F:99:02:33:7C:92:8F:9C:A0:FC:20:56:E6:E9:1E:4C:36:5A
Certificate issuer: /CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Certificate serial: 010D0C9F4328584D571FA52F3750C48C9384E978
Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/10d72829-b71c-3de2-ab26-1eac86caaeaf.roa
Signing time: Mon 30 Mar 2026 13:00:30 +0000
ROA not before: Mon 30 Mar 2026 13:00:30 +0000
ROA not after: Sun 28 Jun 2026 13:00:30 +0000
asID: 14618
IP address blocks: 52.129.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 08 Apr 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:57:1f:a5:2f:37:50:c4:8c:93:84:e9:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Validity
Not Before: Mar 30 13:00:30 2026 GMT
Not After : Jun 28 13:00:30 2026 GMT
Subject: CN=f7f4fd68-9ac9-4a5a-9618-dff5e16df989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:29:d9:45:bd:9f:bb:44:c3:72:b4:3a:ab:9d:
43:62:ef:ec:e5:8f:b1:bf:3b:21:eb:8f:b5:27:d5:
ce:9e:eb:4a:e6:f2:89:b8:46:b6:ae:2f:75:99:4f:
8d:dc:9e:a0:8a:33:5c:33:36:62:72:a3:59:93:b6:
c8:4e:6a:01:78:9d:8a:64:9d:db:8f:e3:ee:b1:83:
37:f2:26:b8:ee:60:fa:50:9b:65:cb:9e:3a:66:8f:
65:af:66:2b:ce:6b:33:4d:ac:02:27:e7:71:05:e6:
54:17:14:d5:de:fd:28:88:81:5d:e1:e1:7d:7e:b6:
be:3d:00:6b:eb:54:b1:a1:06:8c:52:b3:8b:3c:b4:
5b:cd:23:b8:48:a4:2d:03:50:a1:84:8a:65:2d:ae:
64:20:f2:db:48:6a:7c:96:bd:bd:cd:c2:e7:58:ee:
69:6c:d2:90:f4:d2:65:53:2b:e0:45:58:f8:7f:d6:
3c:08:b5:d1:c5:06:1a:81:33:47:4c:06:2d:3d:a4:
38:df:7a:60:5d:e3:18:e8:74:fc:db:f8:88:24:fd:
d0:4c:09:36:a6:5f:43:8d:a3:a2:b2:75:f7:f4:00:
f2:12:2f:7c:c3:9e:b5:50:63:66:fc:58:0c:48:77:
e9:57:55:74:51:01:8b:05:e8:62:a8:4a:34:c7:95:
23:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:FD:1F:99:02:33:7C:92:8F:9C:A0:FC:20:56:E6:E9:1E:4C:36:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/10d72829-b71c-3de2-ab26-1eac86caaeaf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl
X509v3 Authority Key Identifier:
keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
sbgp-ipAddrBlock: critical
IPv4:
52.129.99.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:94:b2:f6:9a:24:6a:b7:92:a0:a5:a3:23:b3:02:72:b3:25:
8c:24:c7:0d:57:a8:94:35:41:c8:b5:30:83:b3:62:bd:75:bc:
42:1c:32:19:05:fa:48:b6:f5:ee:58:02:44:f5:7a:ff:23:27:
f9:ee:a8:67:67:4a:f9:07:4d:d0:d8:a3:9c:c7:02:af:ff:65:
16:9b:f1:59:8b:3e:52:5f:92:a6:dc:8a:a8:37:cf:39:e8:db:
36:4e:91:57:cc:2c:9b:53:e5:c8:4e:30:58:ed:33:a3:42:1e:
3f:83:4e:64:bb:4a:0d:a0:a6:14:7b:36:50:8c:a1:26:09:67:
37:a4:73:d7:9c:3d:75:4d:fb:ba:f9:06:1f:9b:6d:48:c5:c4:
90:a5:3c:e9:77:ea:f5:28:ef:4a:81:49:d3:59:27:c5:a4:6f:
a7:7a:7f:42:95:49:e0:59:ed:c4:fd:3d:a6:2d:ee:ff:24:1f:
ae:9b:d0:31:5b:a5:8d:5c:b1:06:46:95:5b:24:6b:75:59:58:
d3:64:39:68:5a:9f:c8:da:b9:62:1a:b5:03:1e:04:68:ab:b0:
25:74:fe:b2:24:9b:b0:3f:8a:66:95:9b:9b:98:da:3e:27:9d:
97:2c:a6:c7:9d:52:b2:ce:1d:5e:f4:51:33:0a:d7:18:15:32:
14:39:03:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 10:36:05 2026 by rpki-client