
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/29320f6f-2e38-4259-9022-438b51790a91/e2b3dd18-1fe4-39e8-af50-9909555036a1.roa
File: e2b3dd18-1fe4-39e8-af50-9909555036a1.roa (raw, json)
Hash identifier: O2jSWK3Y9r6bmw5O6GBXtnGgFJqw1nWbYGZNXP8maSU=
Subject key identifier: 2D:AC:34:58:12:C0:5E:A4:C2:6E:F3:68:E4:7D:73:CB:9C:23:1C:D6
Certificate issuer: /CN=29320f6f-2e38-4259-9022-438b51790a91
Certificate serial: 010D0C9F4328584F6DBD6E5C0165C4AE78746B60
Authority key identifier: 5C:25:44:19:EF:2B:51:62:C8:86:00:38:07:10:E6:95:4F:2F:09:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/29320f6f-2e38-4259-9022-438b51790a91.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/29320f6f-2e38-4259-9022-438b51790a91/e2b3dd18-1fe4-39e8-af50-9909555036a1.roa
Signing time: Thu 08 Oct 2026 01:00:11 +0000
ROA not before: Thu 08 Oct 2026 01:00:11 +0000
ROA not after: Wed 06 Jan 2027 02:00:11 +0000
asID: 17206
IP address blocks: 66.159.98.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/29320f6f-2e38-4259-9022-438b51790a91/29320f6f-2e38-4259-9022-438b51790a91.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/29320f6f-2e38-4259-9022-438b51790a91/29320f6f-2e38-4259-9022-438b51790a91.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/29320f6f-2e38-4259-9022-438b51790a91.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 10 Oct 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:6d:bd:6e:5c:01:65:c4:ae:78:74:6b:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29320f6f-2e38-4259-9022-438b51790a91
Validity
Not Before: Oct 8 01:00:11 2026 GMT
Not After : Jan 6 02:00:11 2027 GMT
Subject: CN=2d3ac00a-6a56-4cdf-ba74-312efb1f8e82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:47:e8:2c:1c:b5:d0:ed:3a:cb:a5:e2:55:11:
7e:9d:c1:7a:d6:7c:54:d6:f9:29:f6:d4:3e:13:5d:
b0:9c:b8:48:8a:13:1d:16:29:b6:92:fe:aa:04:5b:
1b:64:66:28:e2:4e:3e:6f:86:d5:20:7f:91:d4:b1:
17:07:90:62:0a:6b:52:62:eb:2e:a0:1a:74:79:da:
e6:e8:67:77:15:24:c3:7a:14:18:47:57:2a:5d:f3:
c8:0c:23:1c:8d:8f:4a:c5:2c:20:eb:1a:ff:dd:cf:
d5:3a:02:1b:b6:5e:7b:1e:b9:09:1b:23:a2:0c:1e:
28:34:46:2a:55:bd:0a:41:29:74:c7:79:f0:40:54:
4b:b2:da:d0:0e:60:a3:c4:45:8b:3d:38:77:bb:6e:
88:0e:97:de:a5:a9:ce:6e:3a:d2:ac:15:21:2a:d9:
60:ac:a4:4b:5c:88:01:23:30:5d:68:3c:8f:db:cd:
2f:f6:19:3c:43:1c:57:76:64:cf:03:97:ae:29:62:
7c:46:e1:3e:1f:bb:bc:dc:e1:da:61:ee:f7:6b:20:
65:7f:e5:b9:34:62:55:02:cd:a4:6d:fb:23:7a:95:
19:88:96:82:4b:2f:8f:88:19:af:7e:d7:87:c1:2b:
51:af:13:8b:22:c4:bc:f2:e5:91:8d:46:d1:4c:93:
f5:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:AC:34:58:12:C0:5E:A4:C2:6E:F3:68:E4:7D:73:CB:9C:23:1C:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/29320f6f-2e38-4259-9022-438b51790a91/e2b3dd18-1fe4-39e8-af50-9909555036a1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/29320f6f-2e38-4259-9022-438b51790a91/29320f6f-2e38-4259-9022-438b51790a91.crl
X509v3 Authority Key Identifier:
keyid:5C:25:44:19:EF:2B:51:62:C8:86:00:38:07:10:E6:95:4F:2F:09:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/29320f6f-2e38-4259-9022-438b51790a91.cer
sbgp-ipAddrBlock: critical
IPv4:
66.159.98.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:45:e2:7a:7c:9d:d2:0d:4e:67:9f:42:37:50:73:4a:0f:8a:
a4:36:ac:15:22:17:1c:32:17:2f:79:76:81:e2:a5:e9:98:69:
fd:73:9a:15:93:61:b1:f4:c3:1d:ad:35:56:e0:3b:ab:96:7e:
ac:d2:4f:b5:1b:22:1c:8a:8a:9b:20:da:d2:63:dc:07:cd:00:
06:e1:e7:aa:77:6e:b7:ec:c7:a7:81:26:f9:7f:1e:5d:c5:48:
fc:e3:a3:72:78:e2:dd:e7:0e:e5:b1:02:af:2b:7b:41:ac:17:
d0:71:94:14:ae:b3:80:24:f5:20:5e:65:a0:06:33:d6:7f:d6:
12:b4:e1:ca:91:6b:fd:bc:76:32:0c:13:40:d1:73:00:9f:45:
87:92:5f:49:09:89:73:92:0d:20:a6:4e:83:39:b0:77:32:4a:
27:7d:e9:67:86:17:ff:c0:32:ea:12:9e:ca:1e:91:bd:c3:0c:
b2:8d:38:a2:29:7f:fb:31:c9:b0:6f:b6:0b:b1:58:13:77:81:
75:b2:39:75:33:c4:e5:b1:6c:f2:9c:99:b4:28:1b:2d:58:3e:
4f:25:b3:54:48:21:c2:b0:e2:d8:07:1c:7e:67:4a:f9:03:ca:
79:bf:9d:ce:e0:b3:c2:5d:2b:a1:b1:68:d9:3a:af:49:b5:49:
90:92:cc:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 20:19:25 2026 by rpki-client