
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/afb66b1c-4c26-3945-b917-6f62e119b9c6.roa
File: afb66b1c-4c26-3945-b917-6f62e119b9c6.roa (raw, json)
Hash identifier: yM1Ay0Utw9h5O5L8Koc0nGpWJMkn5VBa5kG/f2rd2mg=
Subject key identifier: 06:EF:B7:41:88:12:A7:49:3E:B3:1E:7B:BA:3B:AC:C0:D3:1D:69:5C
Certificate issuer: /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial: 010D0C9F4328584DFA707450827D222A996D8200
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/afb66b1c-4c26-3945-b917-6f62e119b9c6.roa
Signing time: Thu 28 May 2026 01:00:10 +0000
ROA not before: Thu 28 May 2026 01:00:10 +0000
ROA not after: Wed 26 Aug 2026 01:00:10 +0000
asID: 62610
IP address blocks: 128.1.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Jun 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:fa:70:74:50:82:7d:22:2a:99:6d:82:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Validity
Not Before: May 28 01:00:10 2026 GMT
Not After : Aug 26 01:00:10 2026 GMT
Subject: CN=feda07d2-f062-4321-8413-c3f592037982
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9c:8e:6f:82:68:42:62:4d:bf:94:22:e7:ea:
cd:ec:78:57:cd:18:58:8d:8e:2e:78:4b:a0:c5:4d:
4a:83:72:36:6e:77:c5:57:43:3b:67:fc:54:fe:e3:
3f:ed:57:43:3b:22:e2:d7:06:b0:4d:3a:01:2f:7a:
50:40:9d:c9:1b:b4:9d:26:ee:3a:fa:aa:e4:10:f2:
38:af:be:b3:3c:f1:72:fb:7d:04:88:e4:33:a6:20:
69:aa:fe:90:49:83:6b:55:ee:2d:15:de:0a:08:b8:
93:88:ad:be:97:be:96:9d:18:b3:43:19:c3:94:77:
f1:d3:77:a9:8b:5e:04:ed:88:38:20:4e:ec:b2:01:
5d:fa:68:2c:b3:f0:bb:ac:75:69:28:a6:e2:9c:c0:
c4:06:f0:65:37:d8:a7:71:53:f0:2d:de:c2:3d:9a:
d2:74:8b:0a:11:07:f2:0f:99:de:d6:2c:48:00:97:
b3:f4:7b:a2:5d:e7:be:4c:c5:dc:0c:17:ec:c3:78:
4b:a1:1a:03:b1:f4:a3:ed:34:94:81:34:34:89:b7:
ef:98:05:99:b0:f7:07:a8:b3:32:69:64:de:39:f5:
3c:2a:74:5b:6e:fd:07:41:5a:6a:26:ee:53:ec:ec:
7a:85:83:f8:0e:03:46:0c:58:99:4c:8d:47:3c:b9:
09:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:EF:B7:41:88:12:A7:49:3E:B3:1E:7B:BA:3B:AC:C0:D3:1D:69:5C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/afb66b1c-4c26-3945-b917-6f62e119b9c6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
X509v3 Authority Key Identifier:
keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
sbgp-ipAddrBlock: critical
IPv4:
128.1.217.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:a4:1e:5a:69:a0:12:d9:07:65:5f:86:9a:cc:c4:be:14:eb:
4c:25:05:6d:4e:08:bc:62:81:f4:2c:f9:14:d7:26:a3:22:17:
a3:3b:ce:27:a1:cf:fc:df:4c:5b:b0:1e:62:a0:76:bb:32:ed:
44:dd:ea:8e:e6:ef:46:c6:0a:19:33:98:27:95:59:24:37:f3:
0c:c7:38:a6:4e:ec:b6:5f:c0:b0:1d:ca:8b:d4:f6:56:ec:c5:
22:b7:b1:cd:64:50:ff:95:40:07:97:69:ca:5a:45:fd:cf:3f:
cf:3f:09:14:3d:44:e3:d9:e0:df:b2:d3:3c:32:41:df:73:b8:
92:10:e0:09:1c:c0:87:0e:16:37:8a:c7:55:9e:78:5f:fa:04:
0e:2c:aa:06:39:90:5e:53:06:40:1d:07:d1:7e:32:f1:9c:3e:
73:ed:07:76:48:18:50:b7:4e:d8:93:e0:60:f9:63:78:99:a2:
ea:7b:38:27:f3:ea:b6:36:17:d4:df:53:30:f4:6d:bc:86:be:
aa:d2:b2:26:82:74:74:b7:80:62:f0:55:1a:84:a5:08:de:6d:
79:73:36:7f:3d:3b:66:f8:79:f9:d7:3b:fb:4b:a2:ea:34:68:
f1:77:fe:f7:28:ba:f5:cf:5e:cb:e0:51:40:a4:d7:1d:f4:74:
62:7c:37:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 12:14:33 2026 by rpki-client