
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/aabe01d2-6b84-3a4c-a160-177c79696872.roa
File: aabe01d2-6b84-3a4c-a160-177c79696872.roa (raw, json)
Hash identifier: aLXf3CSOSUe1DYFdBjNtO5jT00yYsMoPmLbAc1cjS/E=
Subject key identifier: B5:37:9F:39:85:2C:5D:E9:11:8A:9D:85:63:B6:00:B3:28:E6:34:6F
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F4328584EA787587A744D1EF0174AAF00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/aabe01d2-6b84-3a4c-a160-177c79696872.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 902
IP address blocks: 131.148.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 18 Aug 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:87:58:7a:74:4d:1e:f0:17:4a:af:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=24f6911c-30d0-42cf-a870-27422b676e64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b9:2f:73:a7:ab:62:0b:12:e1:7d:37:21:59:
a2:f4:03:6e:e1:1e:06:26:8b:7d:21:f1:16:0b:36:
ec:10:28:1f:d5:84:33:ae:50:3d:d7:0f:03:48:89:
b1:9d:72:67:22:bd:9a:b8:df:4e:98:64:be:25:9e:
9e:a6:0a:c1:8b:fa:64:74:ce:c9:05:7e:8b:f9:82:
0d:13:b3:5a:43:6a:da:6c:61:94:61:60:b9:82:0d:
58:39:30:3d:7c:2b:1c:c4:80:d8:57:9c:b7:ba:c9:
65:2e:ae:d4:b1:a0:52:25:f8:81:7b:fa:49:cc:d1:
93:80:e9:54:24:62:4d:ad:6b:eb:70:e1:ef:47:78:
c8:8c:9f:1d:b4:9a:6e:de:5a:d8:78:cf:94:ad:5f:
23:29:34:20:83:4f:3e:b2:69:cf:26:fd:60:d7:8b:
48:83:59:72:fa:60:71:60:ea:5d:8f:65:61:0a:42:
b3:bd:b3:73:5f:45:a8:cb:a6:db:93:88:6e:97:8e:
47:cc:b0:b4:93:4e:5c:a9:c3:34:55:ea:e6:b8:61:
db:6d:b7:a2:18:80:f8:ca:d1:56:15:ce:1c:6c:f2:
8d:ba:9d:2d:c2:3c:5c:70:63:27:d2:e4:7c:c0:70:
f2:7f:3a:29:b3:73:98:91:6b:a5:db:67:1e:de:c1:
2b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:37:9F:39:85:2C:5D:E9:11:8A:9D:85:63:B6:00:B3:28:E6:34:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/aabe01d2-6b84-3a4c-a160-177c79696872.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
131.148.125.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:23:c7:b8:ca:e4:47:ec:a2:85:9f:62:53:da:52:53:a9:71:
3d:f8:9d:42:ee:65:e2:dd:8a:e7:f0:e5:8f:df:3c:f2:3d:f6:
9f:0e:5d:b0:2a:f7:5a:24:dd:af:7e:18:79:87:ce:07:af:75:
03:a2:51:76:24:36:87:a7:cc:9e:f9:f4:e9:8e:0d:cf:cc:7b:
02:ee:eb:43:26:3e:3d:a6:a8:72:a9:a0:eb:56:af:e4:8c:da:
ff:79:06:66:46:c3:89:bc:4a:17:be:27:fc:3e:40:e7:c8:4f:
58:b7:de:c6:f3:73:1c:56:39:46:95:0e:35:d3:03:67:e4:e7:
47:34:46:9f:61:00:83:58:c9:c1:fe:e2:bc:5b:69:2a:ba:0c:
dd:81:1c:95:5e:b6:ea:04:ab:19:79:e4:ac:1b:a6:87:48:2f:
f2:ff:3b:8c:d9:c3:f5:ce:42:62:6e:0b:0e:df:bf:57:e7:3b:
8d:df:70:fa:c6:03:b1:94:d8:fc:67:27:ae:64:39:6a:f9:73:
76:7c:a4:9c:37:48:69:12:a2:26:c0:88:be:c7:b1:fe:91:a9:
80:9f:62:b7:b1:f5:b2:63:85:df:3c:9b:34:cc:62:b4:95:21:
97:9d:a6:32:0d:ab:3b:c9:a1:9e:c8:b9:56:a8:79:11:ec:de:
09:a7:8d:bd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nh1h6dE0e8BdKrwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
MjRmNjkxMWMtMzBkMC00MmNmLWE4NzAtMjc0MjJiNjc2ZTY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7kvc6erYgsS4X03IVmi9ANu4R4GJot9IfEW
CzbsECgf1YQzrlA91w8DSImxnXJnIr2auN9OmGS+JZ6epgrBi/pkdM7JBX6L+YIN
E7NaQ2rabGGUYWC5gg1YOTA9fCscxIDYV5y3usllLq7UsaBSJfiBe/pJzNGTgOlU
JGJNrWvrcOHvR3jIjJ8dtJpu3lrYeM+UrV8jKTQgg08+smnPJv1g14tIg1ly+mBx
YOpdj2VhCkKzvbNzX0Woy6bbk4hul45HzLC0k05cqcM0VermuGHbbbeiGID4ytFW
Fc4cbPKNup0twjxccGMn0uR8wHDyfzops3OYkWul22ce3sEr3wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLU3nzmFLF3pEYqdhWO2ALMo5jRvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvYWFiZTAxZDItNmI4NC0z
YTRjLWExNjAtMTc3Yzc5Njk2ODcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg5R9MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJAjx7jK5EfsooWfYlPaUlOpcT34nULuZeLdiufw5Y/fPPI99p8OXbAq
91ok3a9+GHmHzgevdQOiUXYkNoenzJ759OmODc/MewLu60MmPj2mqHKpoOtWr+SM
2v95BmZGw4m8She+J/w+QOfIT1i33sbzcxxWOUaVDjXTA2fk50c0Rp9hAINYycH+
4rxbaSq6DN2BHJVetuoEqxl55KwbpodIL/L/O4zZw/XOQmJuCw7fv1fnO43fcPrG
A7GU2PxnJ65kOWr5c3Z8pJw3SGkSoibAiL7Hsf6RqYCfYrex9bJjhd88mzTMYrSV
IZedpjINqzvJoZ7IuVaoeRHs3gmnjb0=
-----END CERTIFICATE-----
Generated at Sun Aug 16 19:19:24 2026 by rpki-client