
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7/ec1ddf1c-ca8c-3475-a09c-368212c2e735.roa
File: ec1ddf1c-ca8c-3475-a09c-368212c2e735.roa (raw, json)
Hash identifier: rHs3lS/3dJiZbojkdT0JBegXJKoPErZOfuRA5LEq1EQ=
Subject key identifier: 21:B7:FE:E5:ED:9E:68:62:85:AF:73:B0:CE:99:12:C9:92:0E:F1:A4
Certificate issuer: /CN=b031f288-aa10-4c6d-b640-6749f212c6b7
Certificate serial: 010D0C9F4328584F119D09DA41C974B33D1C2840
Authority key identifier: A7:28:DE:7B:DB:D3:74:3B:97:C7:D9:08:68:12:83:7C:A7:31:E7:0D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7/ec1ddf1c-ca8c-3475-a09c-368212c2e735.roa
Signing time: Sat 05 Sep 2026 01:00:12 +0000
ROA not before: Sat 05 Sep 2026 01:00:12 +0000
ROA not after: Fri 04 Dec 2026 02:00:12 +0000
asID: 19905
IP address blocks: 24.225.112.0/20 maxlen: 24
216.172.112.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7/b031f288-aa10-4c6d-b640-6749f212c6b7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7/b031f288-aa10-4c6d-b640-6749f212c6b7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 06 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:11:9d:09:da:41:c9:74:b3:3d:1c:28:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b031f288-aa10-4c6d-b640-6749f212c6b7
Validity
Not Before: Sep 5 01:00:12 2026 GMT
Not After : Dec 4 02:00:12 2026 GMT
Subject: CN=d10f3abe-7c85-45c9-8711-4448062a76ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:33:3c:8c:70:aa:48:d5:19:1a:dc:67:82:43:
c3:e7:4f:b3:37:4d:55:5d:32:7a:90:45:cf:ef:ab:
bc:4f:ec:9a:93:67:74:a2:cb:14:4d:ec:dc:35:68:
9e:6f:e5:10:03:22:0e:cd:d4:e3:af:04:b0:1b:27:
a1:66:f6:43:0d:94:9c:31:bc:9e:98:37:85:27:b0:
a5:18:5d:29:b4:a7:54:e2:f2:1d:56:41:f3:0b:03:
6a:6b:7a:64:63:e7:91:42:57:ea:c8:fd:62:ee:8a:
7c:fd:ce:7b:dd:2f:ee:87:8b:a0:74:0c:11:21:34:
d0:e5:00:d0:51:92:d0:9e:0b:23:f8:a8:ac:31:08:
c5:27:b1:87:ef:21:d6:ef:27:27:ee:21:1c:10:18:
d5:77:ce:73:71:ba:7c:eb:5b:d5:58:25:2a:47:61:
9e:f0:3d:ca:7c:6a:b0:82:2b:06:66:a7:a1:e6:4c:
a2:26:33:88:c9:c2:fd:8a:20:d1:35:a7:4f:db:d5:
43:76:c9:f0:6f:4f:42:6a:e8:5d:e7:a8:70:2d:54:
c6:98:37:e8:57:9c:75:a6:53:ed:4b:3f:4b:49:44:
c7:8e:ab:3c:87:4b:8c:64:d4:81:e1:9a:ca:85:6e:
17:02:ed:f7:49:c1:c9:54:31:a6:15:8e:bb:f9:d7:
db:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:B7:FE:E5:ED:9E:68:62:85:AF:73:B0:CE:99:12:C9:92:0E:F1:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7/ec1ddf1c-ca8c-3475-a09c-368212c2e735.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7/b031f288-aa10-4c6d-b640-6749f212c6b7.crl
X509v3 Authority Key Identifier:
keyid:A7:28:DE:7B:DB:D3:74:3B:97:C7:D9:08:68:12:83:7C:A7:31:E7:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7.cer
sbgp-ipAddrBlock: critical
IPv4:
24.225.112.0/20
216.172.112.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:67:e6:73:4c:92:b0:c9:0f:24:e1:b1:ac:07:c0:f6:73:ae:
ec:5d:58:b3:c7:17:3f:52:d3:bd:ec:c4:6d:68:41:18:3d:c5:
c7:13:28:5f:05:f6:03:11:e8:37:66:35:24:c3:f3:00:7d:20:
6b:f3:54:6f:96:9c:cd:94:f6:18:e0:6b:7c:1f:ce:5d:57:77:
83:53:b1:22:f8:a1:20:fb:85:e3:31:66:a2:30:1f:d1:fa:c9:
5e:ee:70:04:bb:50:c0:af:19:87:95:d8:45:fa:7c:7b:eb:96:
85:f4:9b:f2:e2:e0:36:16:99:0f:6a:c9:f4:23:73:cd:d3:b0:
ec:37:0b:d5:be:0e:4d:cd:1c:c8:e3:12:cd:cc:33:4f:b5:b2:
35:6b:93:a1:ee:a3:92:49:29:f8:46:71:04:b2:97:b6:a0:28:
77:08:2d:d3:76:7a:a2:cd:69:21:69:da:d3:81:44:b6:02:ee:
45:1b:f6:0e:af:c6:e8:53:69:a0:f9:31:e3:22:e2:81:87:66:
ff:0e:7d:ad:1c:bc:7a:65:1b:46:39:4d:a3:d8:ad:7b:9d:a7:
d7:c6:8f:40:54:f9:99:c9:8c:b9:46:f8:63:e4:5a:6b:71:5d:
15:a9:9d:33:25:11:e3:a4:ac:f2:c2:a7:8f:19:d0:3d:7b:49:
5b:8f:38:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 09:40:01 2026 by rpki-client