
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/29cb27c5-4e3c-342b-a9e3-44052be6fe97.roa
File: 29cb27c5-4e3c-342b-a9e3-44052be6fe97.roa (raw, json)
Hash identifier: M2ByzKmuvevUP4ZKT7yspSjYht59nGkTqTdUJNKJ2c4=
Subject key identifier: A5:D5:18:38:B3:1D:BB:6C:52:24:5C:C5:5F:B2:F0:1E:8B:61:AB:4D
Certificate issuer: /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510
Certificate serial: 010D0C9F4328584F63F80FF110597F4EEB5D7D80
Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/29cb27c5-4e3c-342b-a9e3-44052be6fe97.roa
Signing time: Sun 04 Oct 2026 13:00:13 +0000
ROA not before: Sun 04 Oct 2026 13:00:13 +0000
ROA not after: Sat 02 Jan 2027 14:00:13 +0000
asID: 27321
IP address blocks: 149.20.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 10 Oct 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:63:f8:0f:f1:10:59:7f:4e:eb:5d:7d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510
Validity
Not Before: Oct 4 13:00:13 2026 GMT
Not After : Jan 2 14:00:13 2027 GMT
Subject: CN=33e39b2e-0dc5-418e-b638-360c153d46c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b4:1d:e7:12:84:d6:6e:c4:1b:18:a0:39:83:
5b:11:c4:ff:e0:14:09:29:78:40:c5:de:98:7a:ce:
c5:90:87:74:84:71:ef:e3:ed:6f:56:bc:c6:50:a6:
e8:b6:90:8f:12:58:d3:48:c9:3a:dd:ad:9b:2d:7d:
d7:20:77:d6:c6:b8:9c:91:96:ed:ae:ec:0e:55:0b:
6e:24:ff:09:47:3b:be:6d:16:6d:69:f2:a2:1b:e7:
8f:87:86:49:29:2b:b1:cd:ff:73:e6:6f:e6:22:e3:
9c:13:72:a2:26:e9:0e:9a:fd:fb:87:4f:59:70:01:
2a:ad:77:45:07:8d:ea:ca:a4:7c:3f:22:66:70:ef:
0b:d9:5d:72:dd:5a:d6:ba:f5:e5:ae:22:21:d5:da:
f9:90:c7:9c:44:e5:2a:f3:ac:c2:4e:05:f3:50:9d:
8b:e3:44:8a:be:e7:6c:02:b3:b2:22:77:22:4e:63:
5a:9a:0e:69:8d:3d:12:73:5b:c4:97:63:bf:2d:9b:
fd:a5:55:e5:e9:9c:38:0b:df:c1:a6:6a:9a:ce:c3:
44:45:33:de:f1:c6:66:93:4e:2a:29:6f:e9:e1:94:
f6:df:44:e4:6b:81:bd:a2:a3:d1:cd:db:4b:97:78:
9b:75:b7:18:f9:0d:0e:e4:4a:fb:9c:a8:f8:4c:19:
07:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:D5:18:38:B3:1D:BB:6C:52:24:5C:C5:5F:B2:F0:1E:8B:61:AB:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/29cb27c5-4e3c-342b-a9e3-44052be6fe97.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl
X509v3 Authority Key Identifier:
keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer
sbgp-ipAddrBlock: critical
IPv4:
149.20.66.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:71:e9:87:b0:50:86:96:f2:39:37:8f:36:89:e2:90:12:0f:
f5:b7:fa:ac:4a:12:2b:64:9e:be:6f:2e:fd:bc:54:6b:64:58:
33:4a:e6:13:cd:46:6a:95:f1:7b:36:4d:6b:ae:e2:9f:71:67:
12:ab:8b:e9:55:53:8a:55:39:b0:75:62:04:b5:c5:d3:e5:4c:
e3:25:b6:ca:52:67:6f:0e:4c:53:68:35:b6:8c:0c:c0:e4:6d:
1a:b0:6f:4b:43:f9:83:2d:4c:8d:91:d6:0b:70:d8:26:fd:39:
3c:93:ed:33:0b:f2:ae:70:31:fa:62:8d:be:bb:bc:3c:d8:7c:
87:04:c1:5b:7e:b3:cd:2b:f7:6e:a3:b1:82:a8:6d:2b:f4:bd:
64:8c:7d:9d:50:c8:87:18:ea:44:6d:60:fe:08:78:50:3c:15:
b5:ac:bc:25:95:3b:7d:be:64:c8:74:1f:a0:eb:15:29:1f:be:
25:2a:db:1e:32:dc:80:bf:ef:e7:4c:ef:4b:7f:71:39:11:c5:
a3:f0:8c:0d:f1:3f:04:f4:ce:33:c7:a1:9e:fd:bd:04:1f:71:
c6:18:50:b7:81:76:d6:96:86:95:f7:08:75:e8:4a:9f:af:2f:
f3:c6:ce:2a:2b:d9:e9:40:7f:69:ce:91:41:ae:27:31:64:04:
82:15:3b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 14:28:03 2026 by rpki-client