
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5cdf8411-f5a6-37e0-8f07-8abeb168be76.roa
File: 5cdf8411-f5a6-37e0-8f07-8abeb168be76.roa (raw, json)
Hash identifier: +FBoQvtLfqPmKG1w9SQjitRytC0MBE/7cfaAlcRcjIY=
Subject key identifier: 25:C3:C1:A0:92:5E:12:C9:A9:CB:FF:E5:62:88:54:10:9A:8E:89:C3
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F4328584F4986E0ED8013D89401C18200
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5cdf8411-f5a6-37e0-8f07-8abeb168be76.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 9009
IP address blocks: 172.120.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 12 Oct 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:86:e0:ed:80:13:d8:94:01:c1:82:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=502bd9b9-e7b7-4bba-b993-5b97ff970113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:aa:ce:70:80:74:92:d0:33:e0:77:9b:fd:54:
c0:76:e3:85:1f:cc:65:60:be:7b:35:e4:53:86:72:
bd:f0:14:64:2b:1c:86:d1:17:a0:77:5d:f4:a7:fc:
50:34:30:ca:b6:45:36:8b:c2:6e:00:b1:db:01:26:
80:8a:ed:df:56:0f:19:70:ae:d2:f4:c7:a3:8b:48:
b4:a4:84:d6:6a:42:d5:ee:8e:00:87:ee:d9:18:c9:
0a:c6:cf:eb:ab:7d:fc:fb:34:78:c9:f2:24:79:ca:
1e:ca:a4:6a:1f:45:c3:ca:51:61:5d:4c:91:92:43:
90:30:23:e7:1f:01:01:f9:d7:e1:ee:3c:2c:85:31:
54:40:2e:f4:f6:17:07:dc:da:d4:4a:80:02:41:67:
ee:25:55:46:10:5c:99:71:48:4d:bd:d4:4c:50:58:
9e:39:5d:3e:b4:80:be:19:cd:92:1e:39:68:a6:89:
c5:08:fd:55:43:f6:3d:20:59:42:db:df:f5:cd:d3:
9b:56:77:8a:a1:c1:f7:6d:e3:da:60:64:63:93:72:
6c:35:28:af:97:2b:22:89:72:9f:5d:12:db:a5:bf:
a4:73:2f:12:dc:9e:cf:3f:5a:76:e2:1f:84:34:f5:
ac:0a:19:7f:47:08:33:1f:a6:91:15:de:6f:32:b0:
6b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:C3:C1:A0:92:5E:12:C9:A9:CB:FF:E5:62:88:54:10:9A:8E:89:C3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/5cdf8411-f5a6-37e0-8f07-8abeb168be76.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
172.120.236.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:39:d7:a7:94:28:4c:42:d1:5f:e4:d7:c3:93:3e:e8:8e:85:
5a:60:f7:9b:c3:dc:82:89:d8:00:f4:dd:fc:50:4d:f3:2c:f6:
cc:c5:4f:3f:4a:cf:5e:6c:cf:b0:5f:6a:30:59:d7:4e:17:9a:
85:9f:71:ab:55:9a:ff:94:af:48:63:02:d9:69:28:9e:3c:0c:
14:ad:1b:05:d9:d1:dc:0f:3d:d2:7a:0b:70:27:62:63:23:b5:
24:18:e7:46:bb:49:9c:97:95:0b:97:39:92:d9:83:50:33:02:
f3:1c:55:64:39:1d:d8:1e:49:df:14:5a:a6:61:d2:7b:cf:a6:
5a:b3:c8:69:8b:40:3e:65:bf:53:86:eb:ae:a2:63:c2:22:bb:
d1:3b:47:2c:7e:27:91:a8:8d:cf:c7:6d:61:3f:31:bd:63:46:
e4:cd:f8:f9:b3:22:74:46:26:d0:d3:78:42:b2:61:61:c6:6f:
fe:10:49:75:48:c0:5c:ae:16:01:83:80:43:a8:51:57:b6:8c:
d4:27:0f:20:14:14:d3:cb:f1:32:74:c8:2f:ed:10:e0:fd:1f:
9d:ee:74:d5:a4:6e:2d:d9:71:37:df:a3:11:af:25:8e:d3:e8:
30:03:ab:14:3f:38:a7:84:61:ec:e8:cf:4d:35:be:74:55:f0:
3c:66:dc:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 07:48:12 2026 by rpki-client