
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/302e6029-3314-3fe6-8fd7-c1a0559db604.roa
File: 302e6029-3314-3fe6-8fd7-c1a0559db604.roa (raw, json)
Hash identifier: KTL/6suJixQirgxRapesy/CFzM8DwxhcYNjJrvWngV0=
Subject key identifier: DE:B7:59:D4:BE:E9:ED:47:A6:79:1A:00:66:63:8E:ED:0F:0A:39:0C
Certificate issuer: /CN=884cb4e5-9de7-4280-8805-857b1b768548
Certificate serial: 010D0C9F4328584F4976FF78F12DF93EA462ABC0
Authority key identifier: 2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/302e6029-3314-3fe6-8fd7-c1a0559db604.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 2152
IP address blocks: 209.129.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 05 Oct 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:76:ff:78:f1:2d:f9:3e:a4:62:ab:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=884cb4e5-9de7-4280-8805-857b1b768548
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=c324e3ac-5a3c-45da-a7e7-14fa50cac436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:00:75:f2:15:27:3e:12:3f:aa:49:29:81:4a:
23:29:83:56:06:5d:91:96:4d:a1:2f:2d:01:c0:89:
82:ac:42:d9:9d:c8:8c:ec:be:a1:6c:06:81:20:f9:
31:e0:41:9f:aa:2f:f5:68:f1:95:8a:e4:34:e1:bd:
a2:76:26:f7:76:b1:a3:ee:a5:c2:5b:dc:bf:1f:30:
60:2d:a6:26:da:71:1b:c2:8f:07:a2:03:a5:a9:f9:
fc:39:3c:13:73:6f:b7:cf:c2:ab:b3:33:0a:8e:ce:
f0:aa:bf:13:98:4b:b1:14:e2:c6:20:2a:6a:a5:06:
53:3f:46:b3:cf:8d:83:4d:5f:af:00:86:8f:36:6c:
43:71:b5:46:ad:95:07:9c:ed:76:26:7d:15:6d:96:
f1:aa:8f:41:fd:ae:a2:89:86:3b:26:6e:d6:04:49:
53:d9:53:fb:39:79:e5:b7:9b:a7:6d:d3:e9:74:74:
c1:8b:5b:06:3a:7d:d0:9b:8a:5d:86:f1:0f:0b:a5:
3e:86:1a:5a:fb:39:94:a7:b2:79:d5:8f:6c:41:f7:
8c:a1:fa:af:08:f7:10:7b:5a:4b:18:6a:c6:2f:fb:
7c:4c:3a:35:42:3b:2b:df:ab:16:af:c7:fe:ca:b4:
13:0c:fa:64:fc:f7:ac:b4:cd:e3:4d:bf:49:dc:65:
8e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:B7:59:D4:BE:E9:ED:47:A6:79:1A:00:66:63:8E:ED:0F:0A:39:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/302e6029-3314-3fe6-8fd7-c1a0559db604.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl
X509v3 Authority Key Identifier:
keyid:2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer
sbgp-ipAddrBlock: critical
IPv4:
209.129.61.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:6a:a3:81:0d:09:ed:2c:11:89:0e:51:7e:30:0c:a1:9a:25:
3b:3d:0b:c7:b2:97:0b:9b:51:47:4c:32:8e:eb:76:90:87:ad:
40:9e:66:8b:81:a1:64:1a:59:bd:bf:43:1a:dc:6a:18:57:36:
34:ff:d3:08:f5:92:3e:75:e9:da:79:32:f8:de:b1:8d:ac:10:
2f:81:0e:58:be:ca:4d:7c:71:a0:3f:28:43:59:46:8d:2e:d1:
40:77:67:25:f8:23:a1:7d:02:00:c4:b7:1f:4a:1c:bf:c0:83:
fb:73:3f:25:8d:5f:31:1b:79:41:76:eb:e8:5f:a4:fe:90:36:
af:a7:91:90:66:d0:f3:8c:75:50:7c:31:1e:86:e3:55:8b:05:
a5:64:16:0a:41:ac:d2:69:dd:ec:14:de:39:8b:b1:e4:41:15:
98:a2:a3:fb:4c:60:f7:58:74:78:18:f8:cf:69:29:9b:b0:56:
d3:3c:f2:ca:75:11:87:ec:29:77:55:27:09:28:8b:e4:d2:1b:
76:bd:3d:07:3c:ce:2c:64:1c:39:13:0f:d9:e1:80:d1:75:67:
f4:39:82:b4:58:b2:19:22:da:e3:01:33:f6:9d:91:8d:94:b7:
00:ab:7c:59:34:b9:d0:87:d9:fa:84:48:72:6d:84:df:ab:9f:
3b:7a:12:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 00:07:44 2026 by rpki-client