
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2a7b1ac6-aa14-36fc-a0f8-1bb7bcec26b4.roa
File: 2a7b1ac6-aa14-36fc-a0f8-1bb7bcec26b4.roa (raw, json)
Hash identifier: 8R5+DYPQGW1eTLisuvr08QtdcYHS8ahN1nelHdTOtRQ=
Subject key identifier: 4E:B9:8C:F4:F5:05:6A:B2:2C:37:7C:56:BF:C1:A1:28:FC:1E:00:92
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F4328584B4A47159CFFA51A5C6626AD00
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2a7b1ac6-aa14-36fc-a0f8-1bb7bcec26b4.roa
Signing time: Tue 23 Sep 2025 13:00:40 +0000
ROA not before: Tue 23 Sep 2025 13:00:40 +0000
ROA not after: Mon 22 Dec 2025 14:00:40 +0000
asID: 18779
IP address blocks: 172.120.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:4a:47:15:9c:ff:a5:1a:5c:66:26:ad:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Sep 23 13:00:40 2025 GMT
Not After : Dec 22 14:00:40 2025 GMT
Subject: CN=52d69ad5-b248-4b6b-b608-bd79b1450c8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:77:65:cd:c9:cc:b8:20:b3:02:18:e3:6f:b7:
fe:34:c5:e8:70:10:f7:58:26:5d:0e:76:04:5e:cb:
e6:a6:4c:c5:0d:75:31:3c:0b:c4:01:da:a0:3e:b2:
61:2c:ec:c6:89:f7:f8:aa:db:50:26:9a:50:5a:42:
ef:9c:bb:54:91:ab:b8:ed:af:2c:e6:64:1d:25:e0:
5a:5f:67:8c:48:c4:71:28:27:11:9e:87:3c:a0:4d:
9d:e1:10:85:3a:87:91:e2:ba:83:2f:a1:12:c9:5b:
0c:2f:4d:33:d2:92:fb:bd:c8:94:e4:d1:75:1f:04:
dd:11:61:ad:b0:4d:2f:cc:d0:d4:b0:18:88:21:34:
f6:bb:dd:ee:18:e9:76:bd:72:6a:b0:b8:37:ce:d1:
13:80:c3:b6:c7:14:31:97:19:48:b9:50:54:b3:63:
83:17:d7:f0:7a:dd:88:c4:f2:68:a3:60:85:04:c9:
d7:32:0f:7f:3e:f3:86:14:fb:61:fc:6c:93:ea:12:
82:cd:1d:2d:e9:28:4a:0b:ce:5e:c4:32:98:6a:b8:
20:0b:aa:3b:59:32:8f:91:6b:9b:67:c7:e0:eb:c3:
38:84:42:38:5e:2f:b4:da:12:ab:4e:77:2f:07:75:
a3:6e:4e:11:47:c8:9d:80:6a:75:f5:fd:4b:0f:2a:
87:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:B9:8C:F4:F5:05:6A:B2:2C:37:7C:56:BF:C1:A1:28:FC:1E:00:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2a7b1ac6-aa14-36fc-a0f8-1bb7bcec26b4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
172.120.16.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:b0:11:04:84:d2:31:04:0a:0c:e5:8b:48:82:10:c0:f6:eb:
44:7a:aa:ce:46:8f:f7:54:83:69:3e:1f:da:5e:0e:a9:cd:a9:
c0:3d:29:f5:e4:44:20:35:6c:cf:fc:af:91:4c:e2:97:3d:01:
ac:f3:45:3f:b8:26:be:73:0f:4a:47:af:68:2b:14:1b:7f:89:
ea:c5:be:84:8a:72:37:1c:1e:21:6d:31:93:a9:8e:fd:90:a0:
9d:4c:e5:5f:1a:db:a7:36:34:23:1a:8a:59:ae:d0:99:09:7b:
c1:20:46:83:62:23:05:1c:b4:2d:e7:81:fb:3f:c4:14:6e:68:
7e:51:9c:0e:ac:d8:ff:70:49:3f:cc:e8:4a:fa:8a:f7:fb:5f:
90:b6:e1:44:94:65:9b:55:26:f0:7f:3e:87:6b:09:f5:71:a8:
ee:9a:3c:da:fa:47:2c:0d:7a:4b:1e:b9:ec:4f:a5:75:1d:cb:
3e:5d:71:20:d5:da:7b:62:63:c7:bf:19:73:92:47:56:b7:b2:
b2:36:b2:9e:6e:72:89:b8:74:0a:9d:88:e3:cd:93:a8:e6:a2:
9b:e6:10:f0:f0:36:ef:65:0d:50:a8:1c:c0:25:6a:b7:91:97:
3c:fa:a8:88:9c:b9:da:de:59:10:50:8b:0e:69:47:51:29:43:
3c:d1:30:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:07:49 2025 by rpki-client