
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/9b8fb5ff-8f44-354e-9e25-b728c267775e.roa
File: 9b8fb5ff-8f44-354e-9e25-b728c267775e.roa (raw, json)
Hash identifier: d3iweR0GgZINxXzkKiWxz2w5LlDDVexHAt1C9xjL1XY=
Subject key identifier: 44:EC:F9:BF:77:19:4C:AB:42:3D:3E:56:53:ED:60:04:A5:D8:6B:39
Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0
Certificate serial: 010D0C9F4328584DBA3AE75E164548399F36D140
Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/9b8fb5ff-8f44-354e-9e25-b728c267775e.roa
Signing time: Tue 05 May 2026 01:00:23 +0000
ROA not before: Tue 05 May 2026 01:00:23 +0000
ROA not after: Mon 03 Aug 2026 01:00:23 +0000
asID: 19795
IP address blocks: 129.33.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:ba:3a:e7:5e:16:45:48:39:9f:36:d1:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0
Validity
Not Before: May 5 01:00:23 2026 GMT
Not After : Aug 3 01:00:23 2026 GMT
Subject: CN=5d55902f-010e-4000-81a1-a59489522f5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0f:ea:e5:b6:67:e3:88:0a:b7:a0:08:94:74:
04:e4:c6:68:73:1a:61:a7:7f:22:8e:a3:30:27:f0:
c0:52:a2:b9:0e:06:05:3c:c7:33:26:4d:7d:ac:a6:
e1:a8:59:65:66:58:52:7c:1e:66:d4:82:81:78:f6:
97:31:cf:21:f3:81:59:db:aa:e6:46:86:d3:84:6b:
f2:9a:2e:c9:be:ad:3a:53:05:39:9c:cb:f0:25:db:
9f:31:60:6b:a3:aa:d5:02:e4:8e:be:13:a5:7d:92:
ee:63:12:44:bc:ec:40:26:b8:86:79:42:69:aa:7e:
0c:06:c7:fa:61:04:98:e7:ce:11:f4:09:19:a5:5f:
27:b4:96:3e:df:c5:2c:bf:d9:ab:75:8a:79:c7:32:
aa:11:78:2c:a1:d5:e3:7c:21:45:d0:ad:0c:35:f1:
95:51:fd:b8:3b:fd:28:4f:97:13:64:b8:a4:da:6e:
ef:3b:1d:e8:43:f8:50:ff:b5:37:2a:9b:82:d7:1d:
df:db:c8:d9:a3:3c:d2:6a:c4:3a:b6:c7:52:bb:05:
81:b1:7f:60:d4:30:bb:92:8c:4e:d4:48:18:43:47:
54:39:68:13:25:61:9e:a8:4e:ad:dd:82:1e:70:77:
12:7a:5b:64:50:5a:cf:b3:4c:d8:cb:36:37:75:ec:
b7:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:EC:F9:BF:77:19:4C:AB:42:3D:3E:56:53:ED:60:04:A5:D8:6B:39
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/9b8fb5ff-8f44-354e-9e25-b728c267775e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl
X509v3 Authority Key Identifier:
keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
sbgp-ipAddrBlock: critical
IPv4:
129.33.239.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:c2:f9:6f:93:05:eb:c4:2f:22:7b:07:d9:ef:3a:f3:96:d5:
aa:52:43:b8:1f:24:1c:11:c4:7b:14:0d:1b:2a:d3:29:f1:1a:
01:19:64:4c:1d:86:28:8f:df:66:28:9e:29:e0:67:c8:91:74:
a3:05:a8:e3:b4:82:ac:8f:ad:8d:d0:b3:b1:92:bf:2b:6f:b9:
8a:b9:37:35:3a:08:d4:f9:89:b1:87:76:76:d4:a2:8b:eb:aa:
b1:64:a4:38:dc:ac:29:85:1f:7d:87:1b:22:ae:c9:b8:a0:bc:
3c:2d:dc:ed:ae:44:19:02:82:77:b1:91:2b:99:ce:c8:9b:c5:
54:fb:e0:0d:f2:bf:fa:65:3c:f6:50:9d:eb:be:28:1f:ec:ff:
66:df:60:2e:e9:3a:6d:a2:27:6b:38:39:df:a2:a4:e9:93:ec:
3a:03:44:ec:d3:1f:18:06:48:27:db:0b:2a:e9:c8:a8:b3:ab:
04:12:77:b9:19:5d:e5:59:34:e3:ef:c5:fb:4b:70:4c:69:94:
01:90:8d:e6:7e:0f:57:8d:6b:5d:d8:4f:a3:41:50:e6:99:39:
2c:6e:cc:a9:17:bf:cb:a4:b8:da:64:de:56:d8:d6:fb:9d:b9:
24:5e:28:3f:7b:4f:b9:13:a5:fe:e5:af:d5:14:10:fa:03:dc:
ad:68:c4:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:36:52 2026 by rpki-client