
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ca7498dd-6df6-3366-8095-b6159bfe3efa.roa
File: ca7498dd-6df6-3366-8095-b6159bfe3efa.roa (raw, json)
Hash identifier: 5sGc30GBgyOPHhIUiXdkEbBcOUH666N76cFmgVBQV2U=
Subject key identifier: 59:06:70:62:50:A3:50:61:29:6A:FB:14:2D:3F:0D:F4:0F:67:DA:1E
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F4328584D0A77A20EC3AAD7697DA18940
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ca7498dd-6df6-3366-8095-b6159bfe3efa.roa
Signing time: Tue 03 Mar 2026 02:00:32 +0000
ROA not before: Tue 03 Mar 2026 02:00:32 +0000
ROA not after: Mon 01 Jun 2026 01:00:32 +0000
asID: 18779
IP address blocks: 172.120.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 13 Mar 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:0a:77:a2:0e:c3:aa:d7:69:7d:a1:89:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Mar 3 02:00:32 2026 GMT
Not After : Jun 1 01:00:32 2026 GMT
Subject: CN=18e9a996-8f4b-44e0-b3f3-469b729f2540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9f:dc:c3:25:22:81:c7:d3:b7:a3:d5:15:21:
53:cd:73:8e:0a:01:a6:67:6f:06:da:0a:58:3b:87:
61:d6:bc:2d:8f:3b:de:f9:d9:98:07:c6:60:b6:b0:
8e:67:52:ed:ca:a9:00:93:ba:06:46:64:a2:e5:32:
bc:0c:a9:04:4e:6e:1a:12:8f:65:57:87:6c:65:22:
d5:f4:38:c9:ae:27:8c:3f:38:39:c0:8c:b9:57:81:
6f:e6:de:f6:0f:24:3f:79:b6:ae:b8:20:f5:0e:e4:
54:c5:8b:20:c2:b3:aa:45:e6:23:6b:1b:dd:c0:5c:
b4:70:8a:ae:05:8b:5b:2f:ac:c1:3b:f7:75:ec:dc:
b8:4e:7c:49:5f:58:ef:c7:98:1d:46:61:b5:27:82:
38:14:09:5f:12:8b:29:c5:b5:de:b9:62:55:ca:af:
15:ce:02:f2:6d:8a:42:4d:2f:57:0b:86:61:c2:69:
a3:25:9f:6b:6f:59:14:99:1d:a8:8c:df:db:ee:55:
63:fa:75:e5:b6:40:a1:28:53:37:41:99:b9:2d:4e:
9b:8c:ab:7e:bd:96:33:2a:7b:3f:46:90:27:b5:34:
52:e5:55:d0:34:b2:b0:4b:1c:23:25:8e:bd:0a:cb:
2a:15:e6:c1:66:cf:c3:7d:b9:ab:f5:21:57:27:27:
60:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:06:70:62:50:A3:50:61:29:6A:FB:14:2D:3F:0D:F4:0F:67:DA:1E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/ca7498dd-6df6-3366-8095-b6159bfe3efa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
172.120.128.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:42:9c:39:97:a8:8b:71:9a:fd:7b:96:82:22:b1:1f:e3:b5:
c3:c6:ac:32:e3:79:d8:17:55:f5:4a:98:79:b1:25:7c:c2:76:
3e:bc:d7:87:b0:1d:8f:a7:21:87:f0:52:cf:bf:01:b4:d7:e2:
b8:dd:76:35:cd:fa:0c:bc:4a:7e:23:1a:17:f2:dd:c9:98:0c:
8c:13:de:9e:3a:32:b6:d2:db:1f:7f:97:b2:d8:29:c1:86:94:
cb:56:c6:f8:76:19:c7:ce:dd:a0:58:72:3f:52:a2:6f:51:00:
ce:15:3d:8f:3c:ff:0c:de:39:ac:d1:80:00:56:d1:17:11:9a:
80:d7:64:c7:21:29:c3:e5:1e:12:06:fe:7d:53:6f:e5:88:c6:
ed:75:6b:9b:15:31:dc:36:b7:12:78:39:14:6f:8f:37:35:39:
7a:d9:57:b7:97:dd:07:46:f3:6e:7e:e9:a3:5a:dd:f7:83:ab:
6d:55:da:83:08:bc:59:8a:2f:60:98:0e:88:6c:c9:9f:41:f8:
c6:4b:d6:7f:52:06:5b:75:f6:37:52:c9:64:86:0b:35:3c:69:
c8:e2:f1:a4:71:91:e4:3c:d8:ef:73:b3:d8:66:8a:2e:be:c3:
24:f3:7a:7e:e5:81:16:ac:9e:8a:47:37:8b:e0:9c:d1:6d:23:
6f:09:14:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 12:05:19 2026 by rpki-client