
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/34cf4545-7377-3604-bfb9-15fe8de88b2e.roa
File: 34cf4545-7377-3604-bfb9-15fe8de88b2e.roa (raw, json)
Hash identifier: HxBttfo031vx03tFT9ckTUhSzT62I6j22a85LHMEgv0=
Subject key identifier: 1F:0C:BE:4A:F1:11:2A:F2:7F:40:10:54:BC:54:67:3C:50:0A:48:B9
Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0
Certificate serial: 010D0C9F4328584ECD3721E1033528C3E2BB8200
Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/34cf4545-7377-3604-bfb9-15fe8de88b2e.roa
Signing time: Tue 11 Aug 2026 13:00:11 +0000
ROA not before: Tue 11 Aug 2026 13:00:11 +0000
ROA not after: Mon 09 Nov 2026 14:00:11 +0000
asID: 16509
IP address blocks: 129.41.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 22 Aug 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:cd:37:21:e1:03:35:28:c3:e2:bb:82:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0
Validity
Not Before: Aug 11 13:00:11 2026 GMT
Not After : Nov 9 14:00:11 2026 GMT
Subject: CN=521ffa39-a912-4bbe-bf67-18447a0d4927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:80:97:32:bc:aa:27:02:6c:ae:c5:c1:3c:1b:
0a:13:57:1a:82:4a:5b:d0:da:8d:c3:ea:10:16:60:
3c:ce:0e:5e:01:5e:c4:cc:87:e0:12:ff:cc:1c:5e:
f7:b3:00:8d:d9:01:35:fd:15:5a:d4:57:4b:ab:5b:
ba:42:5c:65:da:37:b4:1c:46:3b:37:63:4e:38:75:
f5:3d:eb:57:1c:df:6d:c8:55:ad:d7:aa:d9:32:09:
99:88:52:65:e8:bd:0b:7e:ee:e4:f3:41:a3:8e:c7:
42:9a:f1:d6:cf:a3:27:a2:46:1b:03:15:96:68:e4:
e1:bb:33:cf:be:18:ce:3e:34:76:5e:71:aa:0d:6d:
8d:52:98:56:a5:90:10:25:72:c9:f5:62:0b:27:7f:
fa:d0:bf:fe:cb:bb:24:15:e6:53:85:96:40:0b:50:
69:09:59:c1:42:ba:2a:ce:d1:4b:cb:9c:58:1e:47:
b1:de:71:f7:18:7a:44:47:fc:17:03:21:11:36:40:
8c:f9:1f:a8:b1:2c:11:b6:2f:62:c0:33:58:0f:37:
8b:fd:04:b5:0e:01:40:38:f5:6d:b0:be:7b:02:67:
05:65:17:66:29:02:be:5f:6c:5d:e7:b6:ba:f6:64:
d4:19:ea:b3:0f:32:4c:ef:42:18:e3:83:01:e0:58:
5a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:0C:BE:4A:F1:11:2A:F2:7F:40:10:54:BC:54:67:3C:50:0A:48:B9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/34cf4545-7377-3604-bfb9-15fe8de88b2e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl
X509v3 Authority Key Identifier:
keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
sbgp-ipAddrBlock: critical
IPv4:
129.41.175.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:bb:77:4c:5f:ed:3b:6a:18:9e:20:49:af:f8:48:ae:b6:69:
65:81:e8:2d:d4:8f:63:f1:ce:26:5c:ac:2a:f6:a4:25:f8:23:
b1:5b:ef:a5:7b:70:21:43:8a:1a:03:b8:e8:75:38:3a:fc:68:
c2:dc:88:76:77:b6:07:ed:3e:f2:dd:3e:b1:a5:b7:7b:75:af:
2f:11:7e:e8:c2:7b:74:35:67:b3:cb:30:52:db:1a:41:25:f5:
f6:d8:62:70:a2:7d:0f:5d:52:e7:d3:d4:be:a4:0f:da:db:53:
93:dc:9a:83:87:7e:fe:52:23:8d:41:ec:66:c8:af:53:8f:fa:
78:39:2c:b7:74:7a:25:70:9a:e8:05:bf:49:98:94:7f:1f:a5:
e1:97:ab:be:ff:6d:ad:02:bd:77:87:52:10:ca:17:5e:41:58:
04:27:43:05:29:f0:08:8c:3d:6d:39:1f:e3:16:e3:91:5c:94:
4d:34:f0:9c:3a:6f:71:be:38:46:b0:d0:d4:28:43:09:f0:f7:
f1:cc:1f:17:dc:54:37:a7:20:3e:ac:75:76:61:45:93:ce:df:
79:c2:1c:b6:43:5b:c5:50:82:2d:6d:c1:fa:e8:ba:5c:77:9b:
f1:3e:2e:9f:14:1a:61:9a:c0:c4:9a:79:4e:62:19:ae:89:b4:
fe:7f:78:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:14:28 2026 by rpki-client