
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/cf476e00-d8fa-36b2-99cc-2e20ec0ac24e.roa
File: cf476e00-d8fa-36b2-99cc-2e20ec0ac24e.roa (raw, json)
Hash identifier: TnJSATI+cg8UIFqwtnSUVply+PSUKXNTASgMs6Hc9Ao=
Subject key identifier: 8E:55:EA:CF:DD:D0:08:4F:77:ED:9F:A5:23:DF:2A:B4:DD:EF:E4:4C
Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial: 010D0C9F4328584D703FDC85522821D0FE367340
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/cf476e00-d8fa-36b2-99cc-2e20ec0ac24e.roa
Signing time: Wed 08 Apr 2026 13:00:33 +0000
ROA not before: Wed 08 Apr 2026 13:00:33 +0000
ROA not after: Tue 07 Jul 2026 13:00:33 +0000
asID: 11055
IP address blocks: 129.101.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 10 Apr 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:70:3f:dc:85:52:28:21:d0:fe:36:73:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Validity
Not Before: Apr 8 13:00:33 2026 GMT
Not After : Jul 7 13:00:33 2026 GMT
Subject: CN=703fb675-3a3a-4462-86de-5f992abfa8ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ae:77:6a:c3:f4:33:ad:d2:cf:db:1a:16:22:
e3:ea:ad:99:41:12:b8:dc:21:05:c9:fb:94:d2:0b:
ce:b7:cc:f3:68:74:e3:24:31:c8:ad:3b:b0:50:fa:
0f:70:52:20:06:71:44:94:67:66:5f:ba:0d:8e:72:
0e:9a:ce:38:87:1f:91:e5:90:ec:5d:7f:60:25:0e:
06:d6:78:7d:df:3c:03:0b:9e:df:94:62:5d:6d:ee:
b0:f0:bf:e9:33:fd:fd:aa:90:7c:f8:64:ff:f7:a1:
be:5f:d1:e5:a9:38:38:84:24:96:9a:e2:d3:42:9a:
ce:7f:1c:56:1a:cd:94:33:d2:14:73:32:b8:38:b0:
14:aa:b6:37:2d:9c:b0:66:df:83:5f:bc:9d:d1:0f:
9b:9c:fe:e7:64:f7:c8:04:ad:8b:88:7b:36:08:57:
33:c2:0f:41:73:0d:6a:17:42:a2:8d:fb:07:44:7f:
cd:b1:21:77:28:d5:1a:19:5e:36:24:0e:32:5e:87:
3f:65:48:b6:e2:d0:48:26:fb:7a:e5:67:73:a4:32:
75:87:2a:78:02:11:98:a8:c1:04:c6:82:be:89:67:
02:b8:cc:7c:66:d9:5a:0a:b2:a3:7e:af:b8:60:c4:
0b:af:5b:e6:6e:fc:d9:44:79:6a:ca:91:81:c4:bd:
93:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:55:EA:CF:DD:D0:08:4F:77:ED:9F:A5:23:DF:2A:B4:DD:EF:E4:4C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/cf476e00-d8fa-36b2-99cc-2e20ec0ac24e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
X509v3 Authority Key Identifier:
keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
sbgp-ipAddrBlock: critical
IPv4:
129.101.63.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:83:d9:93:cb:bd:d4:a9:04:7b:c9:02:8c:14:0d:81:0c:a6:
b9:ea:cb:a1:14:54:84:84:a4:1f:99:d1:9e:f3:f9:7d:2b:ca:
ec:0e:15:13:88:8a:69:e2:5a:56:24:47:79:76:6c:c2:25:bf:
d8:b5:29:08:0c:ce:97:07:f3:30:16:3a:98:47:c8:e2:50:26:
b6:85:1e:8b:0c:2c:9e:86:e4:7c:a0:4d:2d:ac:eb:d9:4a:2c:
fe:42:ff:1f:e8:93:e2:b3:b1:18:65:9e:e3:aa:6c:81:ef:53:
84:e2:39:fc:1c:35:e1:54:6f:c1:0f:eb:cf:00:79:fa:4f:37:
7c:24:d7:10:4f:ab:5a:f3:ae:45:da:11:49:8b:1f:79:77:3e:
89:e2:a7:0b:af:62:0a:00:c3:d6:9e:7a:0c:75:24:ed:85:f9:
a7:33:be:28:07:86:82:9a:64:18:69:ee:61:6f:33:a2:dd:95:
2a:72:e0:28:16:ec:ba:06:7f:6b:e6:6a:e1:30:49:29:94:d8:
2f:d1:15:8f:9d:8e:49:b9:b9:30:73:75:b8:60:2a:5e:2e:e5:
fe:2a:a4:51:75:b9:3f:43:d3:f8:30:e4:a7:4e:33:93:13:43:
cb:4c:8c:43:0e:fc:54:db:49:91:bc:00:e5:c8:85:49:a5:04:
fa:35:2f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 08:26:33 2026 by rpki-client