
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/aafbf529-4916-398b-bbf0-e5bb5123a67b.roa
File: aafbf529-4916-398b-bbf0-e5bb5123a67b.roa (raw, json)
Hash identifier: ZKwDNsQAVDH8t5Ed0UFxW8OBjmNp8QjW9YmofByjQtw=
Subject key identifier: 3D:5E:D9:71:88:F1:38:80:F9:0E:6C:30:0D:A3:E6:52:E8:A6:04:6D
Certificate issuer: /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial: 010D0C9F4328584ED001EEC789F8786F7400BA00
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/aafbf529-4916-398b-bbf0-e5bb5123a67b.roa
Signing time: Wed 12 Aug 2026 13:00:12 +0000
ROA not before: Wed 12 Aug 2026 13:00:12 +0000
ROA not after: Tue 10 Nov 2026 14:00:12 +0000
asID: 2734
IP address blocks: 67.212.156.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 19 Sep 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:d0:01:ee:c7:89:f8:78:6f:74:00:ba:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Validity
Not Before: Aug 12 13:00:12 2026 GMT
Not After : Nov 10 14:00:12 2026 GMT
Subject: CN=1d8781de-8c02-4082-9367-e58e9792a9a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:14:2a:3a:35:8c:65:86:c7:bc:d9:8f:df:93:
be:c6:46:22:a7:1b:8b:cf:59:0f:5d:5e:d8:c0:7b:
1d:3a:4f:59:0b:12:4a:a0:2d:bb:c1:6d:33:18:1e:
66:0b:e3:0d:7c:ed:98:ff:33:48:47:14:52:fd:7b:
72:12:56:5b:0a:61:75:21:0d:6d:5f:85:4e:7b:0a:
08:ff:90:d9:b9:fd:59:02:7a:23:96:7b:af:9c:15:
cd:c0:5c:41:c5:22:55:be:51:83:1e:4c:c7:be:45:
a3:4b:63:ff:04:7a:a5:54:77:1a:09:36:9e:69:f4:
4a:02:81:0a:fb:4a:0c:94:0e:2b:78:51:7d:dd:6b:
1b:28:13:a3:b4:c7:0c:f3:a2:26:0e:58:9e:23:fd:
50:5e:9c:ba:37:ae:07:81:3f:08:d3:74:0a:c0:0f:
07:8b:06:c8:4e:b2:e6:68:39:64:cc:fb:89:a4:1f:
fa:9b:95:d4:96:5f:f6:a8:17:3e:80:cc:a4:5a:1a:
31:b4:f0:4a:37:19:94:98:47:c6:9a:53:66:a3:cc:
c8:2f:06:79:9c:14:29:4d:b1:b3:17:a1:f8:69:7d:
43:93:b7:40:13:7d:00:3f:76:48:92:f3:3d:fc:4e:
ae:d4:17:a2:88:e8:f2:ab:8f:c1:4e:7f:5a:64:4e:
11:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:5E:D9:71:88:F1:38:80:F9:0E:6C:30:0D:A3:E6:52:E8:A6:04:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/aafbf529-4916-398b-bbf0-e5bb5123a67b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
X509v3 Authority Key Identifier:
keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
sbgp-ipAddrBlock: critical
IPv4:
67.212.156.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:8a:00:43:02:13:7e:cc:8f:0e:42:78:02:d3:93:e0:c0:b3:
67:82:02:10:40:04:d0:7f:8d:59:bb:11:f1:f3:19:b6:ab:7c:
ca:c2:b5:2f:9a:e9:6f:a6:91:fb:f9:c3:ba:7c:a0:c9:7b:be:
43:67:b0:fd:a3:2a:60:b9:35:ab:7c:7d:00:9e:5f:4b:d5:41:
5c:2b:21:72:a7:d8:84:66:5a:e9:67:63:68:f6:fc:20:59:d5:
f9:da:23:cf:85:21:16:8e:2f:8b:0f:e0:6f:b8:f6:0b:3e:0d:
97:d6:09:c9:d8:87:88:d9:c7:f9:70:5b:4f:9f:dc:55:ca:b0:
36:ba:da:e8:2f:38:2c:50:16:5c:5e:19:ca:6b:8b:59:71:95:
2a:50:18:75:41:53:34:ea:37:e6:d3:45:10:69:3a:3a:8d:9a:
b5:e1:83:1b:eb:2c:5a:00:e9:f6:68:c0:48:1f:cb:3d:58:de:
0f:5c:da:8d:ff:af:fe:4f:5e:84:d3:74:bc:08:44:95:b2:53:
73:98:c4:5e:f4:b1:4b:a7:d6:c9:ca:0f:5d:0c:84:88:e1:f2:
a9:22:1d:0a:58:4f:0a:54:90:dc:43:a7:81:6c:b4:87:5a:0c:
7b:40:2f:a0:80:d2:c2:12:57:76:a1:09:5f:e9:e3:b1:82:7d:
07:27:5e:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 19:56:12 2026 by rpki-client