
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/9d2235b7-541b-384f-9916-48c6dc43d957.roa
File: 9d2235b7-541b-384f-9916-48c6dc43d957.roa (raw, json)
Hash identifier: SSQeVKWvaZoW9gWA9U4ObLiQiCk2UOV+chJ4ksmZGNg=
Subject key identifier: C2:7C:29:DD:1B:82:BF:F7:0D:F8:32:5E:1A:50:ED:09:F1:63:C5:70
Certificate issuer: /CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Certificate serial: 010D0C9F4328584ED9C74824FF3297B2ECCB5120
Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/9d2235b7-541b-384f-9916-48c6dc43d957.roa
Signing time: Sun 16 Aug 2026 01:00:14 +0000
ROA not before: Sun 16 Aug 2026 01:00:14 +0000
ROA not after: Sat 14 Nov 2026 02:00:14 +0000
asID: 16509
IP address blocks: 52.129.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 22 Aug 2026 23:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:d9:c7:48:24:ff:32:97:b2:ec:cb:51:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Validity
Not Before: Aug 16 01:00:14 2026 GMT
Not After : Nov 14 02:00:14 2026 GMT
Subject: CN=be185abc-c4ec-4d6e-a061-0fa4b8adeb75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:94:60:d6:42:de:85:e4:b4:48:4f:fb:10:82:
e5:c3:1e:8b:62:1d:9f:6c:04:c9:5c:b2:7b:42:e8:
90:e6:83:b5:dc:41:9c:d8:73:8d:4e:a9:18:93:fe:
d2:f2:72:64:a6:db:b6:16:5e:7c:0d:9b:4a:a1:95:
bb:33:72:b3:d9:e2:49:97:7b:f4:e9:6e:4b:97:e7:
54:c7:00:3f:bd:9a:90:72:e7:0e:2e:28:64:27:bd:
4e:51:61:6e:95:52:0d:a4:9d:5b:59:59:b4:f4:3a:
20:ea:14:f6:d3:dc:ef:a3:e6:ce:2b:d1:b5:f1:56:
6c:8d:ad:87:05:98:1f:47:d4:ca:79:50:6d:26:85:
b8:c6:76:66:93:81:48:c9:57:b6:93:f4:99:13:3d:
ed:2d:e4:ea:55:2f:fc:24:05:ab:28:c2:db:84:b1:
ca:8f:31:5f:f3:c2:98:96:77:34:19:07:c0:b6:a4:
3e:07:7d:3d:4e:37:47:0c:d5:45:9a:b4:89:d6:ba:
62:ee:b5:48:6e:7f:fe:e7:12:f5:56:40:0a:e2:d7:
24:62:9b:fa:e9:5c:3f:59:0a:67:52:fc:25:03:89:
a3:75:7e:a2:ab:96:9b:ce:20:b4:cd:6e:18:16:eb:
5e:d2:1b:56:1d:be:d9:88:8d:1f:46:e7:82:b0:c9:
a5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:7C:29:DD:1B:82:BF:F7:0D:F8:32:5E:1A:50:ED:09:F1:63:C5:70
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/9d2235b7-541b-384f-9916-48c6dc43d957.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl
X509v3 Authority Key Identifier:
keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
sbgp-ipAddrBlock: critical
IPv4:
52.129.102.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:24:d8:10:5e:94:26:84:65:79:11:0d:d0:fc:31:09:80:d8:
e3:9c:4b:ea:9f:89:ca:51:29:b7:c9:7b:cb:1f:f4:d9:e3:96:
b1:38:dd:c5:0a:84:7a:27:30:2d:a4:b5:8d:6b:97:b0:2e:4c:
dd:9c:28:2f:95:82:ca:65:11:c6:c4:52:0b:25:7c:c0:37:7f:
be:31:b6:03:5e:94:eb:45:db:2a:b9:37:a9:94:51:ba:8f:74:
93:05:69:c0:44:93:2a:83:f5:7e:3d:3c:17:96:b6:89:74:c6:
10:e4:4e:3f:dd:d9:10:b4:4b:8f:3b:aa:ec:24:28:a7:1b:2e:
56:b5:0d:4a:8b:d9:1e:03:12:51:c7:93:b8:24:c2:07:ea:2c:
62:66:3e:aa:ac:3c:6b:cd:16:b0:5d:88:3e:e2:bf:58:05:c3:
4f:f5:18:fe:a0:39:df:4b:31:15:68:4f:67:36:fd:17:11:c0:
f7:52:a1:44:13:65:e2:cc:b9:95:f6:35:b0:e0:aa:dc:d2:44:
7b:7b:a3:cc:64:57:dd:36:14:17:31:1c:38:67:75:79:55:fd:
2d:03:b7:fd:d1:4f:b3:15:1f:21:56:da:55:4d:32:b6:11:31:
b9:63:2f:ce:6a:27:01:57:75:4a:3d:24:c2:1c:9c:48:57:5e:
69:1c:64:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 23:38:34 2026 by rpki-client