
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3b9a3c4a-6ec8-3fec-9bb6-f9d3baab05d0.roa
File: 3b9a3c4a-6ec8-3fec-9bb6-f9d3baab05d0.roa (raw, json)
Hash identifier: azYAwGMNe47UPXASk6NgNd7LzcR4F2wItwXu4JMbEWA=
Subject key identifier: 05:7B:03:85:0A:B0:5E:D7:6E:F3:55:45:2B:6C:84:64:6F:2D:06:72
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F4328584D1D0173AB88634AFF866CB980
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3b9a3c4a-6ec8-3fec-9bb6-f9d3baab05d0.roa
Signing time: Mon 09 Mar 2026 17:22:57 +0000
ROA not before: Mon 09 Mar 2026 17:22:57 +0000
ROA not after: Sun 07 Jun 2026 17:22:57 +0000
asID: 398781
IP address blocks: 172.120.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 25 Mar 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:1d:01:73:ab:88:63:4a:ff:86:6c:b9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Mar 9 17:22:57 2026 GMT
Not After : Jun 7 17:22:57 2026 GMT
Subject: CN=6cb884ba-49b6-4ea2-b0ba-93685d949bdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:fb:8c:18:e7:b3:c0:b3:9f:bc:50:dc:d3:52:
dc:91:34:ed:27:68:50:63:0f:08:01:2d:ed:18:8b:
a1:a8:a8:cf:f0:ec:63:4f:cd:ac:57:ab:16:44:37:
d3:5b:ea:d9:db:14:5a:fb:56:a3:d8:8d:ae:25:0d:
de:12:f1:1e:8e:da:0a:94:f1:b6:d6:ca:d8:b8:bd:
09:ec:ea:7a:7d:9d:62:95:39:be:7f:03:a8:25:39:
2c:05:fa:94:b6:fb:44:b6:d7:26:c9:10:3d:25:c0:
84:83:bd:70:df:78:b4:47:93:1b:99:a4:22:b3:cc:
5c:b8:06:df:04:28:a0:8d:5e:95:d2:1b:d0:b4:92:
4b:ca:1a:55:2d:d6:c9:6e:d0:bf:6a:d4:3b:04:3b:
75:cd:06:5b:64:75:71:7a:06:f0:b1:50:da:ce:eb:
4d:f1:e2:f2:d9:17:71:02:79:e0:0c:54:f5:e1:c1:
66:81:3a:c1:5b:f5:81:02:2f:b0:1f:25:c6:6e:c5:
cf:f1:d4:75:f1:ab:3c:e2:b8:fb:34:3a:14:20:e8:
4e:d7:32:8f:61:bf:24:0e:54:f0:1e:b2:f1:68:d1:
ba:19:ce:5c:08:df:83:4d:ed:0f:d6:9f:00:19:92:
7b:12:7b:1e:45:d7:bd:90:36:f3:56:6b:38:c4:1b:
45:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:7B:03:85:0A:B0:5E:D7:6E:F3:55:45:2B:6C:84:64:6F:2D:06:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3b9a3c4a-6ec8-3fec-9bb6-f9d3baab05d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
172.120.24.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:1e:43:eb:47:1a:a5:9f:dd:db:2e:67:93:f3:8a:f3:29:9a:
f1:78:18:68:20:33:cd:37:45:21:4d:9f:07:87:da:ba:d6:4c:
7d:e5:b6:64:4f:8c:2f:6c:f1:0e:c8:f9:e8:25:ea:73:f1:68:
1c:f5:bd:5d:28:b7:d4:69:a8:f1:94:62:76:c1:65:5c:17:c4:
f3:01:5e:59:ba:61:c8:a7:3d:5b:15:20:62:e4:1d:53:90:a2:
20:c4:5e:a8:41:91:24:cb:22:cf:1c:a6:f7:65:de:45:e2:30:
c9:01:85:02:93:b7:00:73:89:57:ca:cc:ff:8b:33:60:aa:5b:
df:cd:16:13:5a:0d:77:32:d5:9f:8c:46:60:bb:d0:9a:c0:2b:
3c:18:7b:01:b4:da:b1:53:65:5b:37:78:83:f9:2d:91:4d:ad:
48:2f:3c:0d:ec:ad:c8:4d:9c:fe:3f:1c:3d:c8:b1:91:a1:57:
40:d8:ad:c1:2f:cc:6f:48:db:f1:0d:ce:75:e1:76:8b:8d:9c:
8b:16:bc:55:d6:e6:0b:88:f3:42:9e:a2:a6:2d:01:37:51:ba:
96:c4:d6:2f:44:e7:64:2f:c8:b0:3d:0f:8c:a7:53:c7:5a:a4:
95:1d:f3:2e:0f:9a:ce:aa:17:af:51:bd:69:4b:c1:81:95:50:
6c:b3:81:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 23 18:51:21 2026 by rpki-client