
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/29dad434-374f-32f9-8894-1b4ee00d38b0.roa
File: 29dad434-374f-32f9-8894-1b4ee00d38b0.roa (raw, json)
Hash identifier: KogQbqNEvSbAnl7mBgcRJhgr99Ybd070qURQJltnpAM=
Subject key identifier: 9B:9A:F5:BA:73:1D:16:B7:C9:61:8B:20:79:08:27:E9:9C:60:A0:34
Certificate issuer: /CN=8e00f673-2fe9-4dfa-9225-a8eab810175d
Certificate serial: 010D0C9F4328584F4972FFF209AE5C2FB7163080
Authority key identifier: 8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/29dad434-374f-32f9-8894-1b4ee00d38b0.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 140096
IP address blocks: 161.129.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:72:ff:f2:09:ae:5c:2f:b7:16:30:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e00f673-2fe9-4dfa-9225-a8eab810175d
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=56c82bcd-d4ff-42b8-b92f-97c05a38a093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:93:80:67:8f:e2:16:a1:ee:d6:e7:2d:2c:4c:
58:65:1a:71:93:d4:91:cf:8b:30:61:9b:10:e3:d9:
1e:e2:35:8b:c0:64:08:79:c6:fa:ad:a9:41:9e:03:
f3:36:96:b0:49:3e:7f:cd:3e:69:4d:be:3a:bc:ce:
43:d3:ca:e6:89:90:c9:26:20:66:98:cd:c9:45:aa:
27:4b:b8:c9:8c:6e:31:4f:11:97:fa:ea:06:fa:47:
c4:d9:ca:f7:a3:28:db:62:2b:ab:42:d4:d9:91:51:
c9:91:94:f6:18:3f:60:56:25:1f:01:a8:06:6a:a6:
29:54:69:2a:70:2a:f6:3d:97:23:4d:54:7c:7b:9d:
b7:94:a6:6c:b3:c6:aa:7b:92:5d:60:60:8e:8e:30:
2a:33:86:54:85:b4:87:93:85:54:99:ec:81:a2:28:
8b:0e:ed:99:5e:f5:6e:98:75:ac:fe:10:c9:77:e3:
09:f3:b2:ae:98:eb:81:36:45:0f:22:42:60:e1:fd:
ef:43:95:5d:60:fb:46:f2:1c:22:73:19:5d:60:e3:
6d:ba:1b:ac:7f:18:76:f1:ac:5f:70:7f:ae:93:49:
61:c5:96:d2:60:bc:02:a6:d6:4b:c2:e5:34:44:23:
26:f5:4d:43:96:18:38:fa:fb:42:2d:1d:ec:b9:0e:
b0:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:9A:F5:BA:73:1D:16:B7:C9:61:8B:20:79:08:27:E9:9C:60:A0:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/29dad434-374f-32f9-8894-1b4ee00d38b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl
X509v3 Authority Key Identifier:
keyid:8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer
sbgp-ipAddrBlock: critical
IPv4:
161.129.42.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:1a:18:c9:6a:e4:86:b0:6c:e1:d8:75:d3:de:97:c7:cd:58:
60:d2:f8:12:24:a6:53:dc:6d:0e:02:ed:cf:6c:57:df:13:e9:
20:67:43:ed:f9:c6:0c:93:cd:33:af:12:39:f9:84:b6:cf:3f:
a5:dd:34:ce:5a:72:cc:6c:7f:13:87:3a:3a:7f:9d:8e:61:b2:
2a:56:c9:81:d4:78:ec:6c:ac:e5:09:ee:5d:13:26:92:4a:1c:
35:57:6b:19:97:e2:5c:29:6a:c7:1f:96:42:a1:b4:b7:23:af:
2f:0a:0e:f0:6a:19:de:87:1f:d2:57:e0:eb:44:d5:05:e9:01:
46:fe:29:43:49:67:81:ac:f4:a8:38:13:25:68:49:e7:05:40:
ca:73:af:79:13:19:86:e1:d1:2b:fb:a7:f5:b4:cc:d8:49:ae:
81:d6:e9:30:c6:af:54:8c:d6:cf:26:b8:51:0f:23:bd:4d:fe:
9a:a6:20:b3:07:93:bf:c3:1b:c5:86:5e:61:74:31:a1:70:c0:
61:f8:7c:79:4b:a4:7f:67:6d:38:4a:c1:3f:79:e1:7e:a5:e8:
98:ab:98:e5:ae:6a:84:36:37:02:a6:09:cc:4d:ea:e6:25:47:
65:68:f2:13:bf:30:d2:07:f7:76:17:4d:50:50:79:8d:48:b8:
ba:93:55:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:43:57 2026 by rpki-client