
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f00efb5d-f6e1-49bf-a4e3-ea5b4c75b9fa/2cde7064-9b31-3aed-8cf3-23cf1ae5a767.roa
File: 2cde7064-9b31-3aed-8cf3-23cf1ae5a767.roa (raw, json)
Hash identifier: I2t2bNE+lymg1DVs2Az5rV7SZ3fL8uHWDINqb6eP9A8=
Subject key identifier: BF:5D:1C:3E:95:0D:CB:80:B3:8A:F6:40:D5:59:8E:B8:11:60:FD:11
Certificate issuer: /CN=f00efb5d-f6e1-49bf-a4e3-ea5b4c75b9fa
Certificate serial: 010D0C9F4328584D9E50154F2402F0092E7E9300
Authority key identifier: 38:8D:E2:9E:26:A9:85:99:37:7B:0F:13:70:86:39:08:A4:F8:36:1B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f00efb5d-f6e1-49bf-a4e3-ea5b4c75b9fa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f00efb5d-f6e1-49bf-a4e3-ea5b4c75b9fa/2cde7064-9b31-3aed-8cf3-23cf1ae5a767.roa
Signing time: Sat 25 Apr 2026 01:00:24 +0000
ROA not before: Sat 25 Apr 2026 01:00:24 +0000
ROA not after: Fri 24 Jul 2026 01:00:24 +0000
asID: 14503
IP address blocks: 161.129.22.0/24 maxlen: 24
2620:13f:c000::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f00efb5d-f6e1-49bf-a4e3-ea5b4c75b9fa/f00efb5d-f6e1-49bf-a4e3-ea5b4c75b9fa.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f00efb5d-f6e1-49bf-a4e3-ea5b4c75b9fa/f00efb5d-f6e1-49bf-a4e3-ea5b4c75b9fa.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f00efb5d-f6e1-49bf-a4e3-ea5b4c75b9fa.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Apr 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:9e:50:15:4f:24:02:f0:09:2e:7e:93:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f00efb5d-f6e1-49bf-a4e3-ea5b4c75b9fa
Validity
Not Before: Apr 25 01:00:24 2026 GMT
Not After : Jul 24 01:00:24 2026 GMT
Subject: CN=4db77cd0-9d20-4bf5-87f6-58d731c00897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1b:20:8e:a1:7d:1e:44:2a:6c:f8:67:3b:a7:
6b:72:63:da:ee:a9:bb:61:22:cc:63:a3:75:7f:9e:
94:50:c3:43:fe:3c:3c:ef:84:0c:c8:a1:4f:06:f2:
89:12:4a:9f:5d:f1:88:57:60:89:61:0c:22:aa:8f:
ec:7e:09:61:9b:67:90:4c:aa:ca:57:f4:fb:4d:d3:
6e:c0:95:a1:b7:0b:f4:2c:04:df:81:65:8f:3d:77:
9d:80:6b:bb:50:c2:40:ed:41:2e:89:8a:de:bd:16:
78:fe:31:96:1c:9a:dc:a1:6a:a6:7e:2b:32:2f:81:
5f:fe:be:e0:f4:0a:f4:cb:df:73:b6:0c:f2:c2:e1:
fe:72:c3:9d:61:7c:4a:1f:b1:d4:b1:b9:50:88:00:
57:cb:27:77:a8:c0:9e:56:86:fa:ba:21:ca:0e:e0:
5d:11:f0:58:30:cb:91:7f:8a:48:5a:cf:6c:8b:33:
0d:89:71:15:0c:93:5c:39:da:e7:be:14:c3:bb:41:
f4:56:40:a1:8b:2f:9f:4e:b3:eb:0d:d4:c9:fd:fc:
2a:45:e4:28:5b:68:5b:9e:bf:d6:d4:c9:dc:ef:9b:
8c:40:b4:a6:25:0e:fd:5b:4b:1b:e2:68:73:45:09:
d4:9c:30:e6:20:f1:0a:6c:18:5f:14:80:79:79:83:
cb:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:5D:1C:3E:95:0D:CB:80:B3:8A:F6:40:D5:59:8E:B8:11:60:FD:11
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f00efb5d-f6e1-49bf-a4e3-ea5b4c75b9fa/2cde7064-9b31-3aed-8cf3-23cf1ae5a767.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f00efb5d-f6e1-49bf-a4e3-ea5b4c75b9fa/f00efb5d-f6e1-49bf-a4e3-ea5b4c75b9fa.crl
X509v3 Authority Key Identifier:
keyid:38:8D:E2:9E:26:A9:85:99:37:7B:0F:13:70:86:39:08:A4:F8:36:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f00efb5d-f6e1-49bf-a4e3-ea5b4c75b9fa.cer
sbgp-ipAddrBlock: critical
IPv4:
161.129.22.0/24
IPv6:
2620:13f:c000::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:1e:7d:4c:02:38:86:13:3a:ae:e4:40:94:04:c0:bb:88:0f:
71:3a:de:8d:42:26:7f:37:78:96:71:2e:36:01:24:47:15:d9:
8a:d1:eb:90:67:a1:ac:17:da:6f:60:99:bb:af:87:a1:11:dd:
ba:23:0c:e1:3f:22:53:79:87:16:fa:50:9e:64:06:02:81:5d:
7b:1f:19:7b:dd:c6:d5:9e:31:b0:74:a7:ae:ca:14:cc:76:2f:
af:c2:10:ec:47:cf:ef:e0:d2:14:32:0c:5c:b7:e4:e5:e5:43:
56:95:46:0d:1d:1e:de:6b:45:92:c9:d7:87:83:e2:ec:6e:75:
31:10:bf:21:d5:2f:bf:87:57:d2:7e:aa:b5:55:c0:e0:41:00:
49:22:90:ae:8d:5c:ba:19:22:f4:b1:5e:47:d7:71:7c:ce:4a:
31:62:a6:d0:cd:8e:7d:9c:ce:1e:1f:22:51:78:0e:34:07:c6:
20:37:0d:8e:26:fb:78:13:bf:33:ee:12:90:b0:fa:ad:00:92:
46:32:63:a6:21:ac:e6:07:e7:b0:c4:91:09:47:21:f0:89:8f:
61:cc:4e:95:b4:d4:b7:33:ff:15:29:b7:8d:64:8f:8f:a7:93:
b0:de:78:74:63:8a:61:f7:29:25:53:86:7a:3e:f2:05:93:d7:
f7:c6:59:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 15:32:33 2026 by rpki-client