
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/de7438ce-fca5-31f5-9f3b-71378f8444ba.roa
File: de7438ce-fca5-31f5-9f3b-71378f8444ba.roa (raw, json)
Hash identifier: NU5v8i+LqB6sC9YM31+Jl7nknXC3onFb+zGJiVAYA/A=
Subject key identifier: D6:8D:97:44:6F:0A:DE:FC:25:53:FB:F2:C4:30:75:AB:A4:A8:08:EE
Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0
Certificate serial: 010D0C9F4328584DBA3AE782F3AD40B8421C8600
Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/de7438ce-fca5-31f5-9f3b-71378f8444ba.roa
Signing time: Tue 05 May 2026 01:00:23 +0000
ROA not before: Tue 05 May 2026 01:00:23 +0000
ROA not after: Mon 03 Aug 2026 01:00:23 +0000
asID: 19795
IP address blocks: 129.33.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:ba:3a:e7:82:f3:ad:40:b8:42:1c:86:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0
Validity
Not Before: May 5 01:00:23 2026 GMT
Not After : Aug 3 01:00:23 2026 GMT
Subject: CN=ca49bf03-b8ba-4c2c-b4c9-b2f912bd8152
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6c:6f:57:e5:ee:29:7b:f7:e5:fd:de:0e:6b:
0e:40:9e:07:c6:77:83:7c:53:2c:71:dc:98:d3:91:
c8:6d:ed:ff:d9:f3:fd:2c:65:55:b9:9e:63:76:60:
19:7e:8f:7d:05:ab:27:48:ed:74:fb:12:ee:96:d8:
34:50:4a:e7:31:75:fd:33:73:ce:54:65:1c:87:00:
eb:68:bd:58:5e:f5:59:7f:1b:4f:a5:8c:2c:ca:59:
9e:f5:98:57:bc:a1:da:83:30:b1:50:b3:41:b7:76:
1b:4d:57:13:61:75:3b:06:ff:fb:5b:4f:5e:02:6d:
67:a4:a0:3c:07:be:b3:e7:e1:c4:49:ba:a9:bd:52:
e9:9a:11:cd:ed:a4:f6:39:4c:76:b6:dc:da:55:14:
d3:a8:6e:6e:66:28:98:fd:46:53:7d:93:93:af:69:
f3:aa:20:04:4a:0d:bc:bd:84:6a:c9:a3:1a:d9:1a:
72:64:08:08:bd:61:e9:96:1e:0b:6f:c2:81:87:31:
f0:9c:f2:1b:24:a4:ff:97:9b:18:a7:4f:6d:3d:e2:
60:5b:fd:81:92:8b:38:ca:8e:d6:f7:41:07:53:48:
3e:9c:9b:ff:1f:ca:a2:c7:02:53:a1:65:e2:fa:be:
65:89:ac:f6:0a:1e:f3:64:67:61:c3:df:ba:fd:99:
c1:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:8D:97:44:6F:0A:DE:FC:25:53:FB:F2:C4:30:75:AB:A4:A8:08:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/de7438ce-fca5-31f5-9f3b-71378f8444ba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl
X509v3 Authority Key Identifier:
keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
sbgp-ipAddrBlock: critical
IPv4:
129.33.240.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:37:11:56:3a:70:94:55:65:4f:8e:e0:c1:3d:ef:ba:9c:70:
da:98:59:af:59:c3:ac:49:71:24:6f:69:38:67:86:c1:fd:b8:
7b:7a:36:de:b4:05:fb:98:5c:81:ed:92:1f:fa:fc:58:6f:8c:
9f:de:f1:31:81:c9:25:5e:26:7f:79:b8:40:59:67:69:d8:86:
dc:ce:2a:37:5b:e3:f4:1a:24:1d:5e:84:89:f5:c3:38:b0:88:
26:5b:15:f6:9b:a7:ef:eb:3c:a1:a0:7e:08:b3:a9:20:ec:82:
15:60:2f:ef:7d:35:95:cd:64:4e:31:b8:f7:8b:19:4d:10:54:
85:e4:be:25:97:d3:f8:d5:85:c5:4f:e4:61:72:e5:6a:2f:75:
83:f7:5c:44:61:c0:39:89:97:e3:d6:f9:7f:ed:0d:76:6c:42:
a4:d0:9e:b8:f5:de:be:98:ec:38:15:01:2a:a4:4c:17:2b:2b:
f3:01:dc:df:de:01:16:e0:89:96:eb:67:1b:72:a7:29:7e:dc:
25:42:12:f7:db:25:10:bd:81:db:57:59:39:84:b2:33:41:52:
b8:a8:5c:85:ce:7d:a4:d6:8c:ad:f0:dc:a3:c0:0f:12:84:f3:
53:c4:4a:4d:0f:84:f4:41:0f:03:22:01:f9:2d:25:0e:c0:bf:
fa:52:e1:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:55:25 2026 by rpki-client