
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/bad0311b-b1a2-37a6-9a54-a4b25e414ba1.roa
File: bad0311b-b1a2-37a6-9a54-a4b25e414ba1.roa (raw, json)
Hash identifier: GfXvZL5SSF4z2NanhwyyZB1yujjyscli094PSctO57A=
Subject key identifier: 09:C8:C3:31:65:E9:82:12:DC:E4:C2:D9:7F:68:91:19:B6:51:D5:AF
Certificate issuer: /CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Certificate serial: 010D0C9F4328584DBD0593BE7CC301331CC6D900
Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/bad0311b-b1a2-37a6-9a54-a4b25e414ba1.roa
Signing time: Wed 06 May 2026 01:00:24 +0000
ROA not before: Wed 06 May 2026 01:00:24 +0000
ROA not after: Tue 04 Aug 2026 01:00:24 +0000
asID: 14618
IP address blocks: 52.129.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 23:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:bd:05:93:be:7c:c3:01:33:1c:c6:d9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Validity
Not Before: May 6 01:00:24 2026 GMT
Not After : Aug 4 01:00:24 2026 GMT
Subject: CN=f0ccb2be-d468-428b-a2b2-8101864b34f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:95:f3:42:e8:8b:91:45:2f:c1:0d:ea:6a:d3:
eb:ea:26:11:38:b4:0c:61:ef:42:e4:ab:b8:32:52:
f3:46:48:93:2b:02:a3:ba:43:d9:e4:bc:33:af:5a:
e3:62:5e:f9:20:b7:7f:b0:ca:95:d4:e0:12:92:f3:
af:8f:90:5f:e6:34:62:60:73:70:ce:79:ab:f5:53:
2b:cc:de:ef:a9:25:6a:88:66:ef:1e:7f:a3:85:a1:
9b:fe:4f:47:bf:73:54:da:08:84:15:b8:69:76:87:
e5:0a:37:64:c8:e6:99:0f:13:84:e5:9a:f4:a6:13:
2f:fd:a3:ef:56:12:2c:1b:7c:15:64:c9:d4:97:7e:
ad:69:55:a2:68:d9:aa:51:95:a4:62:2b:62:de:79:
41:ef:3e:eb:d0:f3:d6:74:f2:56:c0:0d:14:0c:7e:
08:6a:95:2a:06:aa:9b:2d:10:6e:19:21:90:96:d3:
a7:14:8a:bd:6f:bf:cf:a6:86:ad:b9:68:aa:5f:c3:
05:21:7b:9b:ea:28:61:49:70:b5:b9:22:6e:a6:aa:
b6:51:65:cd:05:fb:fc:da:96:95:b8:ee:53:db:c2:
7d:7e:d6:10:c6:00:0b:dd:8e:9c:75:34:74:07:cc:
16:6d:6b:7e:1b:99:92:50:50:d0:e7:d7:e5:da:3e:
67:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:C8:C3:31:65:E9:82:12:DC:E4:C2:D9:7F:68:91:19:B6:51:D5:AF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/bad0311b-b1a2-37a6-9a54-a4b25e414ba1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl
X509v3 Authority Key Identifier:
keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
sbgp-ipAddrBlock: critical
IPv4:
52.129.111.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:72:c1:b8:5f:21:00:e1:38:31:f5:08:ff:04:e4:c6:5a:c0:
e9:19:30:16:10:be:06:58:b8:fa:7b:e5:4e:a3:14:9f:cf:9e:
26:3c:49:7c:52:d1:0a:1d:51:09:db:3d:35:db:da:cc:aa:eb:
3b:bc:37:2d:e7:7d:59:d2:b2:d9:74:2a:7e:08:5e:fc:26:b6:
c3:53:8e:09:44:f6:c1:3c:aa:65:d8:1c:38:15:61:01:3e:93:
7d:bd:66:2e:a1:bd:32:31:1e:33:12:09:cd:ba:6e:60:f7:74:
3a:63:78:74:82:da:74:91:80:1c:1c:eb:c7:d4:b3:76:84:a5:
75:e7:44:63:8e:34:55:f1:fc:91:fb:b6:d4:f5:9d:04:08:a0:
9b:8b:a7:99:71:f8:a2:72:c8:43:46:dc:12:0a:05:d5:86:dc:
6b:0a:2c:3b:b4:ee:e5:9f:5c:82:9a:e9:5e:0e:ea:be:4f:32:
0e:d0:aa:d8:60:23:05:ed:8c:b4:d9:3a:4a:40:c5:a5:7a:7e:
62:44:00:20:1f:5f:b2:f5:c9:70:96:93:f5:bb:56:f9:c2:a0:
f3:79:95:76:bd:f4:5f:b7:2c:50:c1:c2:82:1f:23:77:d8:34:
0f:61:54:c3:9a:e5:2c:a8:27:83:a3:c4:8c:83:af:cc:e7:75:
db:ef:51:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:26:36 2026 by rpki-client