
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4c3e35e9-03b1-3af9-80c9-624df4c483b7.roa
File: 4c3e35e9-03b1-3af9-80c9-624df4c483b7.roa (raw, json)
Hash identifier: 0bwKP9q61U+inco0TTErlNdaXC2+PBKGy4gWrM5zsxg=
Subject key identifier: 9D:8A:77:6D:E5:12:DE:10:56:42:F8:0C:9D:4C:66:DF:1D:C0:86:20
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F4328584EA799D4B7437193E86717B680
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4c3e35e9-03b1-3af9-80c9-624df4c483b7.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 398781
IP address blocks: 172.120.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 31 Jul 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:99:d4:b7:43:71:93:e8:67:17:b6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=25a3b4ec-01c8-4387-aa7d-87d02699070b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:99:a6:dc:64:9d:c3:06:92:a5:05:99:dd:b3:
5b:57:36:6e:eb:6f:6f:e9:bc:bc:b7:63:95:18:06:
0d:ef:2f:87:78:b8:3c:aa:1e:6f:c8:16:db:87:aa:
02:d1:d4:f0:83:12:78:95:74:c7:8e:fc:96:a5:86:
44:34:0c:89:c9:b5:28:16:3f:57:ed:8b:1d:59:54:
07:45:3e:93:55:98:1f:50:0c:7a:39:a2:cc:b6:36:
9b:ab:99:09:e5:1b:2d:32:84:d1:52:1c:2b:bc:d7:
a8:3b:b3:59:ec:c4:8e:3b:14:a8:24:ed:a4:8d:af:
12:26:81:94:ad:f2:d8:80:f7:b7:ad:41:52:1c:8b:
2d:ef:44:70:a9:73:51:14:06:6e:c4:bb:a2:c5:12:
39:49:6a:38:f0:16:fa:b8:69:83:9c:24:08:f1:78:
89:fb:89:a3:b1:ea:76:f1:86:a5:6a:4c:98:55:dd:
7b:f8:f7:05:c0:4a:d4:98:98:96:68:11:92:19:ac:
9b:74:0f:68:f1:d8:cd:38:a0:b1:b0:0f:0b:45:d2:
66:7a:c0:0d:65:29:fd:9a:4a:5b:e2:34:d7:c1:29:
bc:e7:cb:e0:7e:80:8d:40:db:ad:b9:5c:5b:6d:51:
83:55:be:d8:02:29:fe:99:cc:ad:2c:2d:1c:e6:d8:
7d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:8A:77:6D:E5:12:DE:10:56:42:F8:0C:9D:4C:66:DF:1D:C0:86:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/4c3e35e9-03b1-3af9-80c9-624df4c483b7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
172.120.212.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:e4:06:0d:ee:e2:72:83:bb:06:f5:db:ac:e6:8e:7c:ea:cd:
a3:17:9a:38:1c:09:b9:c6:d0:99:eb:59:aa:50:31:62:6e:39:
c9:85:f5:01:0e:21:8c:da:b7:98:5f:7b:c8:7a:95:cd:74:66:
36:42:f1:91:5d:cf:9b:f9:5d:c2:c7:77:fa:a1:bc:99:21:3b:
06:2f:f8:50:8b:af:26:c8:ad:2c:c5:a6:62:15:3c:83:df:70:
e4:d9:6c:1c:2d:18:df:d6:43:df:67:08:b9:85:0c:7d:bd:36:
e0:43:49:ef:8d:a7:59:fb:93:0d:79:92:76:86:5f:aa:d5:33:
6c:3b:8e:ce:d5:78:c0:99:97:85:09:ac:97:2d:ac:61:ba:07:
a6:84:78:ef:50:80:3b:46:68:bc:0c:c1:9f:d1:26:98:2b:9d:
cd:86:1c:9f:b2:cf:2a:0a:9b:ac:d4:d9:72:5c:76:b4:31:a8:
50:8d:0a:ee:e6:bc:46:ae:9b:26:23:94:6d:5b:48:9c:c5:5a:
77:ff:bb:52:6b:72:f1:11:3a:3a:6c:52:5e:0a:d2:e8:ce:f3:
e6:68:1b:64:94:99:08:87:0e:70:b6:cc:c0:2b:23:74:6c:4e:
2a:d7:c6:69:cc:8c:f2:83:93:19:67:09:bb:4a:8f:13:1e:e5:
c0:04:17:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 18:17:37 2026 by rpki-client