
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/d1caff1b-70a2-3f40-9325-7d12bd836408.roa
File: d1caff1b-70a2-3f40-9325-7d12bd836408.roa (raw, json)
Hash identifier: v2YPVxXPqdecBSgd5jknLBcFOSSFYW/HcEMa0w30PbU=
Subject key identifier: 01:21:77:53:8C:3E:CE:1A:C2:D5:C3:38:6D:B6:50:00:F0:4C:5F:C3
Certificate issuer: /CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06
Certificate serial: 010D0C9F4328584D6AAA8276A959680BFEB75B00
Authority key identifier: 16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/d1caff1b-70a2-3f40-9325-7d12bd836408.roa
Signing time: Mon 06 Apr 2026 13:00:30 +0000
ROA not before: Mon 06 Apr 2026 13:00:30 +0000
ROA not after: Sun 05 Jul 2026 13:00:30 +0000
asID: 396982
IP address blocks: 147.124.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:6a:aa:82:76:a9:59:68:0b:fe:b7:5b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06
Validity
Not Before: Apr 6 13:00:30 2026 GMT
Not After : Jul 5 13:00:30 2026 GMT
Subject: CN=e6dc12e9-85af-461d-b2d9-ede3735accbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:6e:e6:38:22:6a:34:4c:cd:f3:b3:d6:2c:c2:
0a:6d:0d:54:26:87:91:89:61:5c:fb:8b:13:42:8e:
3e:1e:cf:18:1e:16:e0:21:b3:d4:d7:14:28:fa:aa:
53:84:81:2b:d3:1f:46:74:62:34:b7:fb:6e:1d:a8:
51:01:16:42:3f:56:00:bf:86:dd:2c:23:8f:a2:67:
0c:4f:93:e1:3f:af:f2:f6:a9:30:55:6c:94:14:14:
31:89:59:ad:d4:73:c7:14:74:39:d3:74:7d:c3:d2:
6a:12:d3:8a:90:0c:82:75:88:07:25:73:ea:b4:4a:
4f:d4:ad:5a:6d:b6:3b:ef:53:1d:e0:84:46:3c:fb:
ba:71:6a:2e:d1:8c:40:5c:52:24:7f:e0:38:52:35:
eb:93:58:bc:09:00:d4:cc:f2:6d:6e:68:3d:ca:10:
73:39:e8:af:bf:78:7e:94:14:49:70:6c:03:6d:b3:
55:c7:45:e0:04:ce:86:aa:32:6c:6c:7c:be:b5:43:
87:a5:7e:c3:23:61:ee:48:62:f1:ff:48:22:ab:47:
ae:c2:cc:6d:9e:9c:13:00:89:24:96:42:23:af:cf:
11:b3:4f:23:52:d2:9f:99:3e:e7:c5:6b:dc:db:7b:
b8:91:aa:31:92:93:65:2c:f7:cd:8b:70:75:fe:21:
13:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:21:77:53:8C:3E:CE:1A:C2:D5:C3:38:6D:B6:50:00:F0:4C:5F:C3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/d1caff1b-70a2-3f40-9325-7d12bd836408.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl
X509v3 Authority Key Identifier:
keyid:16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer
sbgp-ipAddrBlock: critical
IPv4:
147.124.188.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:b1:00:9d:4f:cf:30:5d:cb:6d:3e:4b:9f:1b:4e:0b:c6:09:
5e:a0:7e:7b:c9:cc:b8:24:35:43:71:14:c9:a0:38:a1:ff:d6:
1a:1c:d6:81:e4:e8:06:0f:d9:f4:bb:6f:dd:69:95:1c:0e:5e:
80:76:fc:a3:94:0e:98:19:d3:91:9e:c0:aa:dc:90:e8:27:7e:
98:93:77:12:49:6f:f0:cc:61:b6:54:6b:33:82:42:0a:03:a1:
25:ad:1d:bd:11:5a:b5:db:df:fa:7f:99:a3:29:d0:57:9c:e6:
6d:17:f3:8e:90:41:cd:4c:03:8f:a3:cb:f6:35:42:4b:14:cf:
d5:ef:ad:a9:36:fb:27:9c:b9:d6:fb:bc:c0:cc:b1:10:05:22:
f2:78:d9:8e:95:d6:a3:02:fd:e7:24:ec:de:a7:8c:a0:16:e0:
96:91:31:32:85:28:e0:88:dc:a4:20:6a:0e:94:de:7c:a2:c5:
7e:e3:3e:a1:78:83:ee:1d:50:a4:a6:86:2d:ec:47:bd:c5:1e:
d9:06:95:2c:3a:6c:4a:4f:06:d8:0d:07:fd:ac:ba:45:f0:16:
38:ae:cf:cc:27:f9:4e:58:33:91:b4:d3:aa:21:9c:d9:04:f4:
37:c4:d7:51:7e:7a:f8:db:fa:c3:9f:8f:88:63:24:31:2c:25:
dc:81:92:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:26:24 2026 by rpki-client