
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/6f81cc44-a7fe-36e6-a639-96dab6980bdd.roa
File: 6f81cc44-a7fe-36e6-a639-96dab6980bdd.roa (raw, json)
Hash identifier: 4Vq2ee5EVEilRKdKvFgVRmqsh1EikJxvRoJXJVHpi+E=
Subject key identifier: 34:13:46:42:A6:65:FA:F5:82:57:69:75:47:EC:0B:82:EB:C5:B1:4C
Certificate issuer: /CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06
Certificate serial: 010D0C9F4328584EB84737271DB2C09F49C97D18
Authority key identifier: 16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/6f81cc44-a7fe-36e6-a639-96dab6980bdd.roa
Signing time: Tue 04 Aug 2026 01:00:12 +0000
ROA not before: Tue 04 Aug 2026 01:00:12 +0000
ROA not after: Mon 02 Nov 2026 02:00:12 +0000
asID: 396982
IP address blocks: 147.124.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 24 Aug 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:b8:47:37:27:1d:b2:c0:9f:49:c9:7d:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06
Validity
Not Before: Aug 4 01:00:12 2026 GMT
Not After : Nov 2 02:00:12 2026 GMT
Subject: CN=2d35f057-4ac1-43f3-beab-ae2b15d18b8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5c:e2:1c:8a:04:93:f4:2b:07:3f:5c:95:a1:
11:d7:ff:9d:56:28:2b:c6:b5:5e:1e:43:44:39:9b:
9f:9b:a4:4f:b3:df:6d:0c:fc:1d:b9:a2:cb:9e:6e:
b3:a6:f8:d6:63:9a:f2:e2:72:3f:60:69:0a:eb:99:
55:36:54:cb:35:9f:52:98:98:54:0b:c4:b4:7d:0d:
73:b1:85:cd:bd:0f:07:19:8c:dd:2e:ec:a6:1f:76:
ab:8e:ac:26:4c:7d:9b:93:a3:86:12:28:7b:67:19:
d8:f1:da:2b:29:9c:9c:b3:ae:0b:83:0f:c2:88:b3:
09:0e:48:f4:4f:25:92:96:d0:d8:45:ec:f0:04:02:
cb:ab:2d:1c:23:f0:fa:38:f6:60:5c:d8:30:0d:83:
07:3d:9e:95:94:a2:97:09:9d:db:71:c0:90:5e:03:
fb:80:7e:ab:04:25:83:05:a7:db:24:4b:8c:2d:9e:
13:01:26:44:a1:e6:05:2b:75:42:15:29:46:87:3a:
9f:36:8a:bb:c1:43:bd:ac:92:a1:34:ae:17:c7:b7:
2e:27:05:c5:7f:01:65:78:38:f7:48:85:98:b4:c2:
c5:4b:7f:c3:6b:cf:b0:68:07:f2:ec:9f:81:22:f1:
35:d6:35:0c:46:0a:1b:c5:38:d3:03:e9:15:09:8c:
65:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:13:46:42:A6:65:FA:F5:82:57:69:75:47:EC:0B:82:EB:C5:B1:4C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/6f81cc44-a7fe-36e6-a639-96dab6980bdd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl
X509v3 Authority Key Identifier:
keyid:16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer
sbgp-ipAddrBlock: critical
IPv4:
147.124.172.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:30:da:af:a2:5e:fd:13:97:14:de:4b:29:79:ee:e7:c4:7b:
fd:23:08:34:86:c0:35:55:b8:89:72:59:fe:38:58:4c:09:94:
32:49:ef:76:1c:3e:02:51:fe:8f:07:cb:80:32:d0:32:5f:1f:
fd:c2:fe:80:55:eb:99:9c:2f:4e:82:e0:11:8e:5d:bc:33:d0:
39:1a:9e:79:6e:87:86:0f:48:73:0f:28:8b:3d:2e:47:a2:bb:
05:e4:fa:ba:68:17:21:6b:bd:dd:02:05:0f:38:b4:bf:d2:fd:
7a:93:24:9a:54:13:b6:54:3d:a2:36:a4:53:38:4b:10:17:9e:
c7:a6:8a:95:f4:ab:fd:ed:83:ed:f8:c3:b3:92:bb:53:c3:f7:
2a:13:a8:3b:38:73:d6:d4:ea:56:60:71:fc:20:66:cc:95:98:
87:72:f2:f7:6d:fc:a3:aa:dc:a7:e9:ce:9a:2b:6c:9a:6a:f1:
df:f7:51:70:78:01:e7:e9:f8:74:47:27:78:da:ac:68:6b:d1:
a6:02:e7:0a:b1:1b:16:48:18:fa:ee:00:e9:60:9e:0f:27:9b:
c0:ed:40:da:3e:8f:b4:fc:07:d1:90:2d:f9:c8:a1:9d:c0:66:
eb:7b:45:e9:f1:fd:a6:95:1b:96:85:bd:20:cb:02:35:42:43:
b0:57:c5:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 21:11:54 2026 by rpki-client