
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/20daa57e-6e7f-3026-95b0-e7896bc91c38.roa
File: 20daa57e-6e7f-3026-95b0-e7896bc91c38.roa (raw, json)
Hash identifier: 08F7mMx+levSQJdzsyeDm5HhS+dw+ALBJ4m5t6JfpYs=
Subject key identifier: 26:AF:43:7D:5B:FF:1F:33:39:EF:DF:64:B2:F6:A7:22:7E:A9:82:5B
Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial: 010D0C9F4328584F6292FC070A15BA9FBE948B00
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/20daa57e-6e7f-3026-95b0-e7896bc91c38.roa
Signing time: Sun 04 Oct 2026 01:00:13 +0000
ROA not before: Sun 04 Oct 2026 01:00:13 +0000
ROA not after: Sat 02 Jan 2027 02:00:13 +0000
asID: 20115
IP address blocks: 172.220.128.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 22 Oct 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:62:92:fc:07:0a:15:ba:9f:be:94:8b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Validity
Not Before: Oct 4 01:00:13 2026 GMT
Not After : Jan 2 02:00:13 2027 GMT
Subject: CN=727236aa-0fa5-43d8-8466-fdb06b5af705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a5:ab:88:32:73:de:aa:4f:85:9c:3e:e9:40:
03:0c:d4:fe:34:df:4a:d9:73:9e:31:e5:6c:29:4a:
dc:33:02:7a:3d:e4:4a:87:4d:83:ce:c7:17:00:50:
00:4d:85:b9:7a:ff:14:1a:ab:2c:ee:21:03:2f:3e:
2e:09:d8:62:8d:68:34:0e:3e:ba:8f:a1:4d:39:11:
2a:5e:63:2f:2e:5f:a8:4f:55:b0:9e:aa:f0:84:f9:
c2:35:c2:51:6e:cc:09:25:9b:e6:4e:96:1b:54:b7:
4d:be:d2:50:fc:18:df:be:44:f3:7b:a5:8a:86:0c:
77:12:c3:94:9b:55:e9:20:18:ee:be:b6:fe:76:fb:
60:d3:bd:41:df:e2:12:7d:15:9b:72:bb:10:42:0a:
41:39:8e:ff:d2:41:50:21:56:a2:a9:8d:54:a9:cf:
b3:4e:b2:3e:02:32:20:1e:ff:51:01:5d:68:0b:59:
5d:fe:c9:d4:da:fc:b9:2b:31:72:1b:c3:ad:44:0f:
d4:a9:78:de:bc:fe:19:76:d6:f2:5f:12:6b:58:c6:
a1:b8:e1:62:53:83:b0:71:1f:b8:e7:ae:e4:e9:ec:
7a:ff:da:36:92:89:12:50:bb:75:17:c1:ad:f0:d3:
7e:bc:db:e5:3c:38:9c:9a:db:c6:35:5d:53:32:3b:
25:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:AF:43:7D:5B:FF:1F:33:39:EF:DF:64:B2:F6:A7:22:7E:A9:82:5B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/20daa57e-6e7f-3026-95b0-e7896bc91c38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
X509v3 Authority Key Identifier:
keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
sbgp-ipAddrBlock: critical
IPv4:
172.220.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:47:f3:b0:5c:27:be:97:63:13:39:12:85:71:0d:16:1b:b4:
23:f6:23:43:05:10:d6:f3:11:ca:73:d7:14:5e:bb:43:33:31:
0f:04:0e:ee:5e:b3:c1:5a:8e:09:21:f3:fd:de:f7:e0:9e:48:
34:e9:ef:ff:45:18:af:d4:7e:30:5c:73:51:18:96:30:1e:65:
75:04:03:57:38:61:b9:59:6d:2a:00:ab:6c:9d:1b:66:de:71:
94:9a:1c:4c:a0:10:31:ac:7b:30:4c:94:75:69:9d:f8:fe:f7:
af:ff:05:d9:e3:59:af:8e:c2:79:8c:4b:f3:84:6d:bb:47:29:
a6:8f:fc:30:7c:85:04:a9:fd:74:7f:b5:bd:d8:d7:c5:04:1b:
e3:1f:10:53:c3:d0:a7:cf:d4:e7:2b:f6:a2:bd:c2:ac:c6:25:
04:c4:bb:90:7f:89:80:a2:b3:b3:e5:90:ee:e9:d8:40:44:d6:
ed:1e:f3:9b:ce:0d:ca:28:1e:03:7f:34:9b:8b:c5:bf:16:99:
1c:cb:6c:e5:1f:48:87:70:ad:36:c0:34:e0:36:6b:54:44:e1:
81:b9:b0:23:c0:68:80:f4:81:4f:d0:b0:00:eb:be:94:cf:f0:
bb:26:4b:b1:6c:2a:f4:e6:68:78:b1:23:e3:0a:2a:8c:a0:bb:
6d:13:53:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 07:12:32 2026 by rpki-client