
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/1321ac84-55e5-32cc-9b4b-9d8b72e1473d.roa
File: 1321ac84-55e5-32cc-9b4b-9d8b72e1473d.roa (raw, json)
Hash identifier: u74/vRZ+1FoV9IBhp6ykTkUayCjpom4H3Thv2lAdmGM=
Subject key identifier: DA:1F:5D:A8:50:E2:9C:16:13:D7:B2:B7:7A:60:35:17:EB:D0:B7:F2
Certificate issuer: /CN=b6f28d10-5739-4e40-a446-935c60d79169
Certificate serial: 010D0C9F4328584CF587831A899B348B2D026300
Authority key identifier: E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/1321ac84-55e5-32cc-9b4b-9d8b72e1473d.roa
Signing time: Mon 23 Feb 2026 14:00:41 +0000
ROA not before: Mon 23 Feb 2026 14:00:41 +0000
ROA not after: Sun 24 May 2026 13:00:41 +0000
asID: 1403
IP address blocks: 66.129.132.0/24 maxlen: 24
66.129.134.0/24 maxlen: 24
66.129.135.0/24 maxlen: 24
66.129.138.0/24 maxlen: 24
66.129.139.0/24 maxlen: 24
66.129.140.0/24 maxlen: 24
66.129.141.0/24 maxlen: 24
66.129.142.0/24 maxlen: 24
66.129.144.0/24 maxlen: 24
66.129.148.0/24 maxlen: 24
66.129.149.0/24 maxlen: 24
66.129.150.0/24 maxlen: 24
66.129.151.0/24 maxlen: 24
66.129.152.0/22 maxlen: 24
66.129.156.0/24 maxlen: 24
66.129.157.0/24 maxlen: 24
66.129.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Feb 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:f5:87:83:1a:89:9b:34:8b:2d:02:63:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6f28d10-5739-4e40-a446-935c60d79169
Validity
Not Before: Feb 23 14:00:41 2026 GMT
Not After : May 24 13:00:41 2026 GMT
Subject: CN=6e747e4b-e85e-4ea8-bad4-3899c5133fa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:48:88:f6:20:f5:27:d2:30:c5:43:88:07:4e:
a1:e8:52:ac:7e:64:89:d7:91:25:29:3d:99:b2:54:
23:b7:59:de:77:e1:20:4e:66:d4:b5:7b:c0:ca:9a:
c4:fd:d4:4e:79:91:06:c0:e8:5d:86:1d:8d:47:9c:
c1:a1:66:cc:9e:ef:cb:fd:fc:0e:ca:10:3a:c0:ca:
12:83:1b:52:37:a6:67:6c:a8:12:00:d7:49:9e:74:
01:b7:c5:27:e1:d5:38:f2:9c:09:8d:da:24:43:86:
f1:24:9e:0d:fa:c4:0b:7d:36:8b:1f:52:82:bf:c3:
a2:40:c6:21:fc:1d:b3:4a:b7:91:67:e4:67:9f:62:
1b:b0:10:95:bf:d0:00:7f:7f:91:0c:84:f6:57:c9:
77:0d:e5:76:1b:73:04:3a:d6:35:c2:22:0d:93:de:
f5:16:70:e3:86:87:c2:57:50:76:d8:57:8d:65:4b:
1f:13:ca:ae:fe:46:cf:8d:7b:e8:78:1a:08:4a:71:
c7:aa:7c:e6:8d:d6:8c:09:72:09:88:9e:cf:3c:0b:
8b:c6:fb:3f:6c:da:76:59:9f:74:9d:62:46:dd:a0:
64:96:16:cb:4b:ab:9c:f7:77:8b:fd:29:c5:59:aa:
c4:74:e5:ca:08:fd:40:a1:5c:6c:f5:72:5c:d2:3a:
2b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:1F:5D:A8:50:E2:9C:16:13:D7:B2:B7:7A:60:35:17:EB:D0:B7:F2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/1321ac84-55e5-32cc-9b4b-9d8b72e1473d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl
X509v3 Authority Key Identifier:
keyid:E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
sbgp-ipAddrBlock: critical
IPv4:
66.129.132.0/24
66.129.134.0/23
66.129.138.0-66.129.142.255
66.129.144.0/24
66.129.148.0-66.129.158.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:25:29:8c:9b:6b:2a:2d:d0:5f:d0:8a:1f:45:8a:36:df:10:
01:5c:cd:48:ce:82:ed:5c:3a:89:a8:e7:4b:76:30:8d:b4:1a:
b6:6f:65:89:15:e8:91:15:97:25:ae:5b:84:98:00:f5:91:97:
9b:91:f3:4c:36:f3:af:ba:71:de:81:f5:38:b1:6a:42:83:d3:
5a:39:70:1b:9b:83:2a:ac:ce:88:a2:ef:98:f9:b7:80:78:a5:
f7:71:e4:1a:96:68:b9:7d:90:a5:66:e9:5c:fb:9d:38:56:17:
10:d6:4e:82:74:b8:49:c6:dc:03:3d:32:c1:b3:e2:de:60:8b:
08:28:70:e8:4b:54:c3:22:ba:1b:4b:26:e1:16:be:71:27:be:
9b:96:18:51:79:0f:82:44:34:47:4f:31:1f:44:ef:24:ea:46:
0d:9e:f8:95:74:e7:13:e6:bd:aa:b7:75:06:8c:9a:0e:56:0d:
aa:73:4b:50:16:56:ef:22:06:5b:da:fb:7c:b6:60:dc:e2:86:
b2:8a:4b:61:cd:5a:93:05:e8:f4:30:d6:98:ba:cf:e8:26:68:
ee:e2:9e:33:8b:a1:8f:a8:62:13:9d:11:c6:6d:27:33:e2:5c:
ff:e6:23:75:c5:b8:36:82:d4:fc:94:f4:87:1a:b4:d1:cf:c8:
41:31:22:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 27 10:02:08 2026 by rpki-client