
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/e1c2adf9-2173-3329-b5dc-7e81ea37e1d5.roa
File: e1c2adf9-2173-3329-b5dc-7e81ea37e1d5.roa (raw, json)
Hash identifier: urZ8mq4sboJD9iFAMvDb/q2HDJ4p8LyE8noS6C5gk1c=
Subject key identifier: 4D:CF:E9:C6:96:50:D5:40:75:06:7F:89:B7:4B:9E:C4:64:A7:EF:DF
Certificate issuer: /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial: 010D0C9F4328584F7782F0EE43C64ACC05CA6F00
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/e1c2adf9-2173-3329-b5dc-7e81ea37e1d5.roa
Signing time: Sun 11 Oct 2026 13:00:12 +0000
ROA not before: Sun 11 Oct 2026 13:00:12 +0000
ROA not after: Sat 09 Jan 2027 14:00:12 +0000
asID: 2734
IP address blocks: 66.128.148.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 06 Nov 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:77:82:f0:ee:43:c6:4a:cc:05:ca:6f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Validity
Not Before: Oct 11 13:00:12 2026 GMT
Not After : Jan 9 14:00:12 2027 GMT
Subject: CN=2fc8da70-4b74-4e19-a6f5-a889ecd417ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:78:68:3e:30:a8:ca:ee:c5:0f:07:67:3f:77:
3c:46:62:44:50:f0:b6:ab:e4:8b:30:9a:1b:59:49:
65:57:28:cc:40:4a:a0:5f:71:b1:ca:49:ac:b1:29:
ff:f4:b9:0f:20:c6:70:f6:fe:d5:18:cb:7e:d5:49:
06:72:2a:ff:b0:c3:4f:ae:27:95:7c:39:78:1d:b0:
be:29:b8:4d:e1:e8:12:0f:26:90:06:38:f0:f6:50:
08:6c:c9:bf:bc:0f:a5:8d:85:25:ca:07:12:18:7b:
94:a5:17:d1:61:f7:9d:ec:bb:5f:79:40:7f:36:d1:
67:48:c5:ff:54:c7:ec:3e:80:45:01:cf:2b:a0:b0:
c8:de:a7:e6:8e:fe:99:93:88:c4:ca:7c:2e:75:11:
32:03:5d:1a:58:92:27:05:54:cd:6b:9a:23:94:0e:
64:24:c6:ec:30:72:af:d9:fb:6a:b4:b7:6d:3f:ab:
f0:8f:ec:6b:e7:cc:1a:ba:69:3c:e7:ac:58:39:2e:
bb:26:a5:f1:91:08:4e:99:e7:58:9a:59:0f:b0:14:
7d:37:dc:86:da:ec:81:6b:ad:80:2a:1f:ec:af:0b:
06:4a:c5:2c:d2:ee:f2:f5:43:54:f7:fc:75:ca:fd:
e1:50:c1:77:84:b6:3e:4f:8c:93:dd:2d:a3:c7:73:
75:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:CF:E9:C6:96:50:D5:40:75:06:7F:89:B7:4B:9E:C4:64:A7:EF:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/e1c2adf9-2173-3329-b5dc-7e81ea37e1d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
X509v3 Authority Key Identifier:
keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
sbgp-ipAddrBlock: critical
IPv4:
66.128.148.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:c8:15:cd:cc:6c:e6:46:f2:f9:52:2d:92:fe:e5:a0:16:44:
02:5d:45:0b:0f:60:98:fb:cc:cc:4a:ce:3b:aa:32:39:51:65:
73:ae:f0:0a:95:d7:2b:c7:9f:d4:37:91:39:c8:e4:ff:3e:a3:
d2:82:1c:47:f1:b5:f1:21:92:9c:84:3c:fd:7c:40:dc:03:d0:
87:67:dd:28:87:4a:5a:e4:75:60:3c:58:74:64:ea:94:59:90:
74:a9:64:11:55:15:48:ef:60:10:5b:30:ba:2f:c0:1a:33:47:
25:b9:e0:02:18:3e:5b:a3:b0:de:fa:10:ca:11:92:0c:6d:c0:
54:5e:51:a1:72:d9:0a:02:d2:0d:04:d4:4e:aa:46:be:93:95:
dd:f1:6b:a1:c7:0a:db:73:a7:4e:29:d1:99:c5:61:e8:5e:fd:
02:15:1b:36:e1:5f:2d:eb:16:10:28:da:8e:fa:e8:e5:f9:26:
3b:b6:38:22:18:b6:4b:89:0d:a6:41:0b:56:34:93:77:aa:bc:
16:2f:80:0b:0f:a6:f3:01:9a:f9:07:e6:91:f1:5f:b9:98:ee:
58:62:16:e2:ce:6f:08:62:a5:f8:87:79:cb:67:6f:7f:d8:ed:
88:23:3c:0a:a7:26:12:60:27:f3:cd:64:44:a3:32:34:51:af:
34:0d:0f:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 19:02:39 2026 by rpki-client