
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/aced6428-7ee8-323a-b614-29f5a77e23d3.roa
File: aced6428-7ee8-323a-b614-29f5a77e23d3.roa (raw, json)
Hash identifier: qm2vOi1sAP1onL0qP4/jbNX4iC4+XH9WYuaQlzX1m/M=
Subject key identifier: 5C:83:4C:64:EB:16:67:57:1E:43:05:0D:0A:5B:AC:F5:A6:EC:9F:99
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F4328584F03A76C28B3ADF82666ACB25E
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/aced6428-7ee8-323a-b614-29f5a77e23d3.roa
Signing time: Mon 31 Aug 2026 01:00:12 +0000
ROA not before: Mon 31 Aug 2026 01:00:12 +0000
ROA not after: Sun 29 Nov 2026 02:00:12 +0000
asID: 6079
IP address blocks: 142.252.72.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 11 Oct 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:03:a7:6c:28:b3:ad:f8:26:66:ac:b2:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Aug 31 01:00:12 2026 GMT
Not After : Nov 29 02:00:12 2026 GMT
Subject: CN=a06052f1-7273-4e20-ac16-9766dac65ce2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:43:09:2b:75:f8:83:a8:d8:f5:67:09:ef:c8:
7c:fb:7f:09:6b:f3:ec:e3:f7:96:2c:c8:22:04:d5:
50:ea:f4:0c:42:81:7b:e9:23:33:b7:db:b1:38:6c:
63:7b:7c:20:a7:9b:6e:82:b4:6d:bf:d1:cc:32:c2:
3b:72:f2:21:fe:2b:38:7a:96:f2:dd:96:5c:d0:09:
2b:49:1b:0e:56:aa:d5:60:7b:62:b2:cb:65:a0:d3:
61:81:07:fc:74:78:97:fa:a9:28:fa:86:65:e1:25:
fa:b7:c6:11:b8:f3:67:31:a1:da:6b:a5:aa:51:06:
60:d8:fd:00:98:02:80:88:87:60:b9:9a:57:6b:7d:
5a:28:38:eb:86:21:2f:1c:66:fe:22:b6:b1:ac:9d:
f0:91:69:89:29:f1:b4:d7:e7:a1:30:ee:d9:68:eb:
95:85:ef:7b:77:e1:6a:02:3c:da:d6:e2:fa:60:49:
98:22:d1:37:05:6f:16:97:b8:8b:21:93:04:7d:35:
b0:25:89:70:09:97:28:54:be:86:22:ed:ae:66:9d:
5a:84:80:4c:f3:5f:53:8b:55:44:44:e1:e7:b5:00:
02:cd:64:b0:bb:0b:2b:0a:96:02:42:35:c0:ac:32:
65:1d:0c:92:10:25:ea:d5:e5:59:ca:6d:f7:21:1b:
23:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:83:4C:64:EB:16:67:57:1E:43:05:0D:0A:5B:AC:F5:A6:EC:9F:99
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/aced6428-7ee8-323a-b614-29f5a77e23d3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
142.252.72.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:56:b1:5d:90:4d:21:9f:06:91:a7:1a:df:e7:45:43:35:e3:
74:e2:fc:ce:52:bd:9e:41:8e:a3:70:a0:2f:59:3e:85:de:2a:
70:b9:3a:75:f3:99:c5:33:a6:00:82:0e:1e:2b:e5:0e:b8:d8:
7f:b7:26:5f:fc:a2:84:d6:7c:ec:85:e0:2e:f7:71:a4:c8:a9:
d0:51:e0:9e:1e:b6:93:01:db:b0:65:cb:de:8b:30:95:0b:eb:
76:40:02:21:53:3a:ea:68:77:eb:73:93:09:ad:25:7c:ce:38:
8f:79:56:e9:1e:bc:97:60:51:eb:b7:c2:f6:db:af:44:6d:f3:
48:6e:8f:6b:d7:c8:02:f9:48:c6:af:42:39:58:39:a5:b5:4c:
26:57:7c:cd:39:2a:23:7b:76:5a:1e:36:3d:8c:14:f2:70:10:
d1:62:87:16:76:a6:ae:bc:85:0e:ef:e9:c4:a2:1c:a3:1c:a5:
8c:15:b6:93:d4:ee:e1:bb:d7:e4:e6:27:61:fc:4e:a0:57:ce:
48:4b:b2:80:89:ab:c3:28:b1:ab:d7:2f:c4:b2:6d:d3:58:06:
7a:46:33:d2:70:f1:2a:47:4f:56:45:fd:4e:cb:75:8b:11:1b:
a2:0e:43:9f:1e:c4:34:20:3c:53:27:91:73:e0:c2:33:1a:4a:
29:5c:9d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 17:51:16 2026 by rpki-client