
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/d20e6e8e-1e06-3114-8e4b-c1f3e693f54b.roa
File: d20e6e8e-1e06-3114-8e4b-c1f3e693f54b.roa (raw, json)
Hash identifier: VimxXdRvzu7waei1ogccbheAAjINVeYe1hvnZEFV4SI=
Subject key identifier: D0:CA:19:BD:C9:34:C9:52:44:E8:5B:51:9A:BF:BA:70:46:8F:60:AC
Certificate issuer: /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial: 010D0C9F4328584F6F22F5926A8408B1FB811380
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/d20e6e8e-1e06-3114-8e4b-c1f3e693f54b.roa
Signing time: Thu 08 Oct 2026 13:00:12 +0000
ROA not before: Thu 08 Oct 2026 13:00:12 +0000
ROA not after: Wed 06 Jan 2027 14:00:12 +0000
asID: 62610
IP address blocks: 128.1.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 26 Oct 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:6f:22:f5:92:6a:84:08:b1:fb:81:13:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Validity
Not Before: Oct 8 13:00:12 2026 GMT
Not After : Jan 6 14:00:12 2027 GMT
Subject: CN=50c09489-3c33-42d0-beb4-ab79b7174112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:04:26:66:08:f0:0b:6b:5c:80:8b:47:9c:38:
d2:e9:76:db:1d:f4:db:a8:28:ed:9a:56:7e:9b:45:
ff:4e:0d:c5:5d:88:bb:07:d5:a8:63:5a:f7:70:63:
7e:04:d1:f5:21:68:0c:32:d4:c9:ed:56:bb:f7:6e:
ae:23:69:4e:7f:f1:a5:43:9f:2a:8b:01:c5:a9:2a:
f4:7c:7c:02:51:54:c1:db:36:c3:65:8e:58:97:93:
71:c6:d5:13:a7:e1:82:24:59:f5:fc:fd:82:87:fd:
22:07:4a:da:de:ba:f3:d5:f8:66:ac:36:f9:46:96:
d6:b6:e2:4e:b6:48:56:ab:f3:c5:b6:b4:0e:74:3e:
24:3f:c6:0f:06:ee:34:f5:13:07:83:29:ed:f1:14:
d5:54:06:fa:18:19:ff:a0:a9:bf:31:33:44:ae:02:
9a:23:f2:04:21:96:23:5b:35:7e:4d:49:5a:36:1f:
00:56:d1:57:81:24:aa:34:9a:e3:14:3b:01:24:fc:
f1:d0:ff:89:03:af:9f:70:1e:9b:52:af:f4:c6:a0:
c6:6f:df:ac:5f:6c:49:b2:dd:52:40:5c:52:0e:70:
81:43:77:47:6b:fa:e1:a7:79:b0:70:bf:28:24:55:
c7:7c:c3:7c:5b:c9:ac:41:41:bc:56:6c:ca:5f:d2:
bd:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:CA:19:BD:C9:34:C9:52:44:E8:5B:51:9A:BF:BA:70:46:8F:60:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/d20e6e8e-1e06-3114-8e4b-c1f3e693f54b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
X509v3 Authority Key Identifier:
keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
sbgp-ipAddrBlock: critical
IPv4:
128.1.138.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:8f:e7:1d:2f:4a:d1:4b:42:bb:98:f2:31:0e:7d:73:cc:22:
3d:41:a0:18:8a:7b:7e:fa:b2:bd:37:e6:cb:ff:ec:37:7d:fe:
49:e3:85:0b:1e:c6:ba:8f:16:be:55:6c:98:c2:2f:27:71:9b:
c3:86:42:45:0d:92:09:a7:01:8b:9a:92:92:41:26:7a:59:d6:
ee:bb:ac:97:1b:d1:7d:dc:dd:70:a1:ba:5e:fd:e6:0c:2b:be:
f2:c7:03:ee:49:59:60:1f:08:0a:f2:57:f6:64:34:4b:67:cb:
aa:3b:a3:84:ce:72:b9:31:e8:80:2e:69:de:b6:b0:d6:81:5b:
8d:59:f7:25:9b:9b:5f:ac:6f:ff:09:dd:f7:06:a9:93:33:ec:
e0:ca:79:ca:3b:85:2b:2d:0f:80:a4:99:55:b5:7b:5f:a9:61:
9d:5d:36:80:c5:a2:19:6d:a6:95:f3:e8:43:2f:8e:62:67:04:
da:4e:f5:3f:0f:1f:a4:6e:a5:23:bf:4c:c1:ec:94:9c:13:c3:
05:42:b4:a5:5c:52:4d:7f:cf:1e:ce:1a:03:c0:41:d6:43:46:
fa:e9:b5:e2:31:33:d7:de:0c:46:ef:5f:3a:d0:9f:cc:4d:93:
fa:33:c7:76:2e:49:dd:84:1f:3f:8f:53:21:69:77:30:72:63:
26:ae:29:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 18:57:12 2026 by rpki-client