
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/9d2235b7-541b-384f-9916-48c6dc43d957.roa
File: 9d2235b7-541b-384f-9916-48c6dc43d957.roa (raw, json)
Hash identifier: ooZlKnGzBnHhZCRsAhI4yaDmnT6y3aI3OJXvibuJ/mA=
Subject key identifier: E8:70:C3:AF:CE:E7:84:F9:49:B2:35:FE:2E:06:C8:DB:7D:A7:A2:6E
Certificate issuer: /CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Certificate serial: 010D0C9F4328584C76816313EA23E3FC48363F00
Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/9d2235b7-541b-384f-9916-48c6dc43d957.roa
Signing time: Fri 09 Jan 2026 02:00:31 +0000
ROA not before: Fri 09 Jan 2026 02:00:31 +0000
ROA not after: Thu 09 Apr 2026 01:00:31 +0000
asID: 16509
IP address blocks: 52.129.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 22 Feb 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:76:81:63:13:ea:23:e3:fc:48:36:3f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Validity
Not Before: Jan 9 02:00:31 2026 GMT
Not After : Apr 9 01:00:31 2026 GMT
Subject: CN=802aeac5-828f-4e2a-90f8-2147db22abf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d5:bf:89:44:55:c3:07:b6:f1:94:2f:bc:63:
6c:c1:b1:ba:60:46:97:e6:9f:ae:3a:30:f6:c8:53:
fb:c0:fc:74:67:1a:a8:9a:65:5c:8a:d8:b1:e5:a3:
bc:da:10:5c:99:78:1f:dd:98:a7:9e:b6:cc:94:00:
9c:22:64:58:31:37:23:50:0d:34:c7:b1:3e:74:74:
24:06:5d:ea:ab:d0:8f:4b:45:58:2c:7a:5b:4e:74:
aa:28:2e:f5:0c:aa:b6:0e:86:85:a9:c0:81:cf:4d:
d6:27:31:65:36:ed:c6:bf:57:f3:62:14:ca:f0:29:
46:8e:d3:be:15:5e:9a:5e:45:79:6c:f4:70:f8:c3:
8e:3d:c5:de:4d:27:18:27:94:ce:63:ef:42:e2:57:
3b:cd:99:ba:da:e8:39:c9:80:3c:68:58:45:4e:8c:
34:02:3c:bc:f9:4f:28:5f:82:9f:31:77:82:69:64:
f3:06:61:43:43:6e:c3:b6:ae:5e:40:3a:19:21:19:
6f:74:3c:de:9a:0c:0c:59:57:74:b0:47:d0:d1:c6:
82:71:73:05:3e:f8:8c:29:c0:64:d2:76:4a:36:6e:
d8:d9:f0:fc:d4:43:05:01:c4:1a:9d:91:a3:21:a7:
75:fe:b9:38:1b:ac:a7:57:93:3d:8b:8f:ab:9e:d6:
41:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:70:C3:AF:CE:E7:84:F9:49:B2:35:FE:2E:06:C8:DB:7D:A7:A2:6E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/9d2235b7-541b-384f-9916-48c6dc43d957.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl
X509v3 Authority Key Identifier:
keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
sbgp-ipAddrBlock: critical
IPv4:
52.129.102.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:3e:0f:1f:87:cc:47:1c:e9:38:51:3a:a8:2b:fa:2b:71:15:
ac:de:4f:b7:d3:3e:b6:e8:a7:26:23:ca:e7:61:9f:eb:28:84:
a3:04:23:64:f0:18:20:97:5c:39:36:3c:85:4d:56:61:ce:1e:
f3:c6:95:23:04:03:5c:c4:6e:47:4f:35:67:a9:31:0b:4d:81:
69:bb:b6:c6:e9:99:ab:8b:0d:b5:3c:c1:8d:6b:aa:cb:b1:8d:
a3:c8:ff:7b:d8:f7:1e:be:d8:f4:3e:40:fe:6c:30:2a:35:ac:
cb:f5:f1:6d:92:94:cf:de:65:cb:c2:6f:73:c2:cb:f8:cc:b2:
06:2c:ef:19:c8:7e:9f:f0:2a:57:09:91:69:c4:f2:dd:83:9b:
89:d4:57:68:a6:3e:63:16:22:09:1e:a7:ca:aa:33:41:b9:4f:
f6:a5:68:23:b6:b5:ad:73:cb:59:f4:ce:15:a5:f2:b2:72:5d:
15:3c:0e:07:70:54:14:f3:34:72:d0:57:0e:53:02:3d:77:47:
b3:62:5a:7d:81:f7:04:db:e3:e0:a0:53:04:b5:8b:ef:0a:a2:
80:3d:71:14:b4:90:b3:e4:ff:08:c3:4d:86:93:56:51:46:9a:
71:e4:73:b1:c9:32:7a:b8:66:4e:06:fb:b6:2c:b8:97:91:21:
c2:aa:60:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 07:30:08 2026 by rpki-client