
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/417d7227-e282-33f8-8849-63c6f9f4d5d1.roa
File: 417d7227-e282-33f8-8849-63c6f9f4d5d1.roa (raw, json)
Hash identifier: ExBPLQxRiv9Q61AefFLpchNgXaYnI8oTpC4p/chG6dI=
Subject key identifier: 55:1A:97:44:C5:3E:46:8D:BE:EC:9C:CD:41:6F:62:C9:BE:BB:02:54
Certificate issuer: /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial: 010D0C9F4328584E72ED8AD3CB65E8585C35A140
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/417d7227-e282-33f8-8849-63c6f9f4d5d1.roa
Signing time: Fri 10 Jul 2026 04:49:17 +0000
ROA not before: Fri 10 Jul 2026 04:49:17 +0000
ROA not after: Thu 08 Oct 2026 04:49:17 +0000
asID: 29752
IP address blocks: 128.1.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 24 Jul 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:72:ed:8a:d3:cb:65:e8:58:5c:35:a1:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Validity
Not Before: Jul 10 04:49:17 2026 GMT
Not After : Oct 8 04:49:17 2026 GMT
Subject: CN=7bdaff3e-2a96-4813-9444-eacf72593d6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:62:33:b2:98:23:a8:77:f6:26:fb:90:8f:95:
d8:c1:27:da:75:52:22:06:05:ef:1f:c0:6b:8a:ff:
94:a1:f6:0d:29:3d:09:28:43:4a:2e:b8:47:2b:67:
12:44:e6:78:7d:e3:3a:d6:4f:a1:c2:4e:4a:8e:ba:
cd:3b:c6:80:e3:b5:07:0d:1f:00:bb:70:29:47:db:
63:a9:12:44:39:42:b4:a7:b2:f1:66:fe:31:bd:0d:
47:20:f8:c8:ae:0a:aa:55:fb:91:50:af:e9:dc:7a:
23:b2:58:c5:e5:b7:bb:1f:75:35:c3:46:c0:08:f7:
64:df:e8:96:ba:14:19:77:33:c1:16:90:cf:f8:98:
8d:87:c4:75:e0:dd:1e:1b:c6:a7:bb:ac:33:8c:2a:
3b:28:ba:65:e1:d2:95:55:c4:63:4a:e3:a2:84:89:
e2:79:7f:e2:3f:08:34:dc:f0:b8:c8:c8:f4:78:f6:
fb:b7:84:30:bf:32:bb:69:24:8b:ce:ca:61:a0:5e:
f8:d0:2c:9e:b8:f9:1f:61:ea:7b:10:36:b1:ef:22:
47:a6:68:a8:98:bb:90:cc:99:7b:70:23:9f:83:d3:
9d:dd:da:62:35:88:ef:fb:d8:27:a7:66:66:73:a3:
67:73:23:c9:9e:0c:6f:4f:be:54:df:c7:26:46:2a:
34:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:1A:97:44:C5:3E:46:8D:BE:EC:9C:CD:41:6F:62:C9:BE:BB:02:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/417d7227-e282-33f8-8849-63c6f9f4d5d1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
X509v3 Authority Key Identifier:
keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
sbgp-ipAddrBlock: critical
IPv4:
128.1.206.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:f3:7f:05:67:46:30:91:53:62:01:9d:3d:8b:6a:05:83:53:
91:91:71:a4:cc:2b:5d:b1:60:14:73:92:67:c7:c4:d0:3f:9e:
dc:47:80:ed:57:b3:ed:47:47:a7:09:8e:01:0e:de:a0:2d:c8:
97:1e:27:fd:2a:e8:86:ed:9e:c0:ea:37:6e:58:f6:59:0d:d6:
b0:e0:eb:e9:9f:85:9a:0e:da:79:ad:45:32:d3:ee:99:3a:91:
f4:9a:b2:64:2a:0c:0c:ce:a7:9b:d5:aa:b1:c3:41:df:ce:f8:
bc:80:c4:5e:d7:1f:ad:aa:d8:23:75:fb:96:25:a0:ac:ec:52:
9f:77:08:62:e1:26:ee:03:3e:c7:13:a8:f0:77:5f:43:4f:d2:
fb:a0:df:b0:db:4e:43:5f:2d:62:88:9e:9a:23:a8:ae:56:33:
79:f0:fd:b9:1c:6a:89:5b:bb:30:2a:30:b0:3f:1f:8f:98:7e:
7c:36:e5:a8:be:2a:0e:b2:f2:61:05:20:b0:23:75:2f:a9:ef:
11:25:3a:fa:6a:38:56:46:52:97:99:12:72:71:0e:c9:b6:85:
1f:56:49:14:37:33:3a:15:3a:de:c9:03:c3:c1:ac:34:53:5a:
f8:02:5e:12:97:0a:55:8b:24:fc:cf:8d:26:7a:6d:80:53:de:
9f:90:31:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:53:33 2026 by rpki-client