
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/d29f17b0-7a5d-310a-83f6-37c093f206a3.roa
File: d29f17b0-7a5d-310a-83f6-37c093f206a3.roa (raw, json)
Hash identifier: asFuiJfpy0lCJO9UE+IFfjREjI4hv0QriLGSxSnc41g=
Subject key identifier: 7F:3E:27:29:7A:A5:BE:87:B7:FA:A1:9C:3D:72:8F:33:53:EB:DE:4B
Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
Certificate serial: 010D0C9F4328584CAE5EB72FCB4A68D9DF3BE680
Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/d29f17b0-7a5d-310a-83f6-37c093f206a3.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 31898
IP address blocks: 150.230.112.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Feb 2026 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:5e:b7:2f:cb:4a:68:d9:df:3b:e6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=207820b1-4050-4cec-8618-1073b19a0d88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c3:66:dd:fe:91:d8:f0:de:0e:b0:67:10:5a:
c1:50:e6:1a:6a:35:64:a7:9b:2d:33:7d:cf:84:8b:
fe:19:a0:78:3e:f0:44:74:23:b0:c5:a6:aa:f9:d1:
01:1b:e9:83:99:3d:ba:2a:28:e0:c1:bb:df:83:58:
dc:2a:8b:aa:e6:c7:f6:73:1a:d8:98:39:51:de:40:
7f:b8:6c:6b:61:d6:b5:e4:52:04:16:c8:2f:74:2e:
2f:93:7e:65:f3:a7:0a:d3:e0:f0:1e:8f:fc:94:2e:
8a:bc:41:4e:87:00:e1:73:26:05:39:bb:df:63:a5:
5f:12:23:a5:d3:b9:63:d4:9f:cc:0d:da:4c:1a:2e:
89:93:f6:3c:20:d0:f6:a6:88:4b:f5:09:49:99:bb:
11:54:da:ab:41:62:f3:59:5e:01:d3:da:b0:33:fb:
58:88:51:3a:6c:d6:5d:f9:63:53:e7:6b:3e:1f:37:
bc:99:20:cc:5e:cc:52:fb:86:c8:b7:ed:37:bb:a0:
5c:ff:84:3a:01:58:3a:1c:e9:9d:df:7a:1a:62:72:
80:c6:c7:e8:60:77:a6:f2:f2:32:d2:05:90:e1:4e:
43:b9:85:bc:5c:af:50:ed:11:36:7e:1b:ea:90:7a:
6c:ee:4f:bf:91:b9:55:52:de:af:2b:10:42:c2:3b:
a8:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:3E:27:29:7A:A5:BE:87:B7:FA:A1:9C:3D:72:8F:33:53:EB:DE:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/d29f17b0-7a5d-310a-83f6-37c093f206a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl
X509v3 Authority Key Identifier:
keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
sbgp-ipAddrBlock: critical
IPv4:
150.230.112.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a0:80:c1:83:76:5f:a1:06:20:22:04:5a:94:c9:d6:8f:2a:31:
67:64:12:43:9a:b0:ba:b8:63:60:c0:3b:69:dd:43:f7:e4:47:
a5:05:d0:5f:70:8b:d3:66:f6:30:9d:a8:f7:7d:3b:43:b7:d6:
76:17:5f:e7:4d:3a:60:4b:83:df:70:21:b3:8a:f7:86:f7:4c:
84:33:38:91:c5:45:37:3c:eb:48:12:99:83:57:b5:96:67:25:
cc:cb:9d:ca:43:ed:c2:8b:30:57:cf:d3:eb:9b:d2:e9:9b:2e:
3c:d0:ac:e1:b5:cd:4b:7c:d1:ff:7e:4b:71:74:0e:ed:a1:1a:
3a:5f:2d:f3:13:29:91:80:1a:92:2a:33:1b:c1:2e:52:83:ae:
c1:9a:cb:3a:35:86:99:b1:c2:23:aa:54:e2:78:ea:fd:ac:ef:
88:3a:0f:fc:26:86:71:9c:2c:01:6c:41:97:0c:c7:e2:af:f8:
76:99:c2:21:b5:bf:85:be:35:4c:d1:0b:b5:9f:86:39:d6:11:
14:08:c6:e5:01:77:b3:51:ae:da:8f:27:1a:c5:96:cd:09:07:
66:cd:1a:31:bc:a0:c4:3a:67:c6:10:62:f1:fe:bc:43:19:17:
07:6b:5e:6d:da:45:54:a0:7b:e0:54:11:aa:ba:42:a0:e4:fe:
26:d5:51:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 03:31:43 2026 by rpki-client