
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/1ac6ce73-9471-31f6-9c07-744500c4b2dc.roa
File: 1ac6ce73-9471-31f6-9c07-744500c4b2dc.roa (raw, json)
Hash identifier: Fq7sSKYreAR3R1mIJ34ydWzS9qrZ6QJ8UN1Wmc5vwNc=
Subject key identifier: 3D:3A:58:6A:3A:5A:49:C2:93:7E:9F:4A:2F:46:7E:DC:2A:DA:EC:23
Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial: 010D0C9F4328584F6292B64D47EA7CC07639A500
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/1ac6ce73-9471-31f6-9c07-744500c4b2dc.roa
Signing time: Sun 04 Oct 2026 01:00:13 +0000
ROA not before: Sun 04 Oct 2026 01:00:13 +0000
ROA not after: Sat 02 Jan 2027 02:00:13 +0000
asID: 394380
IP address blocks: 172.241.128.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 16 Oct 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:62:92:b6:4d:47:ea:7c:c0:76:39:a5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Validity
Not Before: Oct 4 01:00:13 2026 GMT
Not After : Jan 2 02:00:13 2027 GMT
Subject: CN=c34bf9b5-e4de-459b-ba76-918128924b17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:43:b5:68:87:43:6a:32:c8:8a:7a:da:1e:0f:
89:57:ad:fe:dd:3a:f3:ce:74:9f:74:7f:e4:5a:94:
f2:35:41:c8:06:42:46:a2:32:64:98:74:46:ab:75:
c8:1e:1f:cc:34:5e:a6:16:08:f3:a4:bb:3e:20:16:
f6:e3:67:c9:51:50:b2:06:bd:61:07:a3:cd:28:ff:
81:a6:a7:02:18:ae:cb:9c:3d:63:c4:6f:e2:b5:46:
1a:f0:c4:6d:39:d5:cb:6b:69:78:d6:1b:14:7e:80:
93:c6:4d:54:a6:ad:fb:14:6d:cd:19:c7:ee:d7:29:
bf:23:64:1f:1c:c3:1c:17:5f:84:7e:19:82:55:96:
5a:1c:25:d6:a7:f1:9e:74:8f:3c:74:26:22:3e:12:
65:8c:18:1f:79:f1:62:68:c7:a1:c9:9e:ed:c7:45:
8a:c5:28:59:bb:7d:3b:4d:1d:b7:3d:15:0d:fb:37:
60:b6:05:8e:8c:ef:2d:00:e5:6d:1e:89:16:61:ad:
22:df:26:1b:59:81:e1:bb:10:3e:11:fb:08:d5:8c:
2d:79:f5:89:f6:51:56:ff:a8:97:3f:4f:1c:46:7c:
20:50:e6:87:ee:ba:4a:c7:0d:e7:d1:e9:60:12:47:
6a:ed:6c:74:d0:c7:48:85:4e:10:fd:89:f0:8f:18:
f3:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:3A:58:6A:3A:5A:49:C2:93:7E:9F:4A:2F:46:7E:DC:2A:DA:EC:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/1ac6ce73-9471-31f6-9c07-744500c4b2dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
X509v3 Authority Key Identifier:
keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
sbgp-ipAddrBlock: critical
IPv4:
172.241.128.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:46:83:15:6b:06:59:63:2e:3f:b9:65:f1:99:9e:fa:e0:85:
d9:56:99:c3:21:af:20:77:ef:54:60:6a:00:77:c5:4e:85:1f:
b3:86:0f:f0:9f:db:67:3b:98:b6:1f:ac:41:83:0c:cb:00:1a:
16:b3:f3:05:02:76:dc:44:11:5d:24:8b:c0:9e:1b:57:f0:49:
12:75:33:8c:04:d2:06:62:0e:f8:bf:08:cd:03:4f:04:26:9a:
e9:ac:eb:21:76:ee:75:c9:0c:c7:bd:81:c3:20:66:ea:2b:8a:
6b:12:a3:80:36:d1:38:3a:5e:ac:97:07:63:42:3d:9b:12:04:
8d:e0:17:6e:28:83:8f:d9:80:af:49:d7:d0:39:21:94:62:88:
bd:3e:db:f5:5d:e7:67:88:af:49:bd:75:1b:fc:b1:a6:aa:d0:
b7:a0:c8:0c:c6:a3:5d:0c:67:fd:ed:11:97:45:70:12:9e:91:
d8:36:71:13:e0:db:26:98:8e:ed:5e:b2:f9:e2:0e:53:07:82:
64:42:90:f4:b0:00:5c:a5:35:fd:62:0d:c8:51:7c:5f:a2:19:
ef:e9:9f:14:02:c0:ee:15:b2:a5:4a:00:19:e2:31:df:64:3f:
4f:c0:b4:2e:0e:45:9f:ba:72:24:fe:ec:d1:c6:95:2c:7e:40:
7a:d9:e3:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 20:47:16 2026 by rpki-client