
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/10c40112-bc85-4f75-9bb0-471ec84ba3fe/d12bd30a-acc9-3de6-8fd0-92577639758d.roa
File: d12bd30a-acc9-3de6-8fd0-92577639758d.roa (raw, json)
Hash identifier: 8arVPEmMOD7WrdhGJiCc7aCr/H/vYkJJW0+hxv4Qd3U=
Subject key identifier: F9:34:01:D4:A5:10:E8:2D:AA:08:65:B7:B4:4D:84:04:84:BC:02:94
Certificate issuer: /CN=10c40112-bc85-4f75-9bb0-471ec84ba3fe
Certificate serial: 010D0C9F4328584DC29AE3B2C26C5CDF60985560
Authority key identifier: D8:E2:5C:0F:58:98:94:D9:C7:71:B2:BE:F6:62:B1:81:17:88:2A:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/10c40112-bc85-4f75-9bb0-471ec84ba3fe.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/10c40112-bc85-4f75-9bb0-471ec84ba3fe/d12bd30a-acc9-3de6-8fd0-92577639758d.roa
Signing time: Fri 08 May 2026 01:00:24 +0000
ROA not before: Fri 08 May 2026 01:00:24 +0000
ROA not after: Thu 06 Aug 2026 01:00:24 +0000
asID: 63436
IP address blocks: 192.124.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/10c40112-bc85-4f75-9bb0-471ec84ba3fe/10c40112-bc85-4f75-9bb0-471ec84ba3fe.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/10c40112-bc85-4f75-9bb0-471ec84ba3fe/10c40112-bc85-4f75-9bb0-471ec84ba3fe.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/10c40112-bc85-4f75-9bb0-471ec84ba3fe.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:c2:9a:e3:b2:c2:6c:5c:df:60:98:55:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10c40112-bc85-4f75-9bb0-471ec84ba3fe
Validity
Not Before: May 8 01:00:24 2026 GMT
Not After : Aug 6 01:00:24 2026 GMT
Subject: CN=2fa03b18-8f14-40b1-bf1a-c90294f2f1dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:94:21:3d:db:90:ca:7f:ec:0f:d3:c6:0c:f1:
27:82:cd:f7:35:47:25:08:c1:7a:66:43:05:af:77:
de:ea:9d:07:cd:a4:2b:12:7f:73:df:74:a7:7a:17:
a3:e8:5d:8f:68:01:d1:fd:27:c2:00:d8:5b:19:85:
5b:f9:73:c1:e6:cf:82:c9:4e:77:51:01:7e:51:ff:
95:27:65:2d:b3:3b:4b:0f:6c:05:6f:d7:70:76:7e:
29:f3:f2:76:7c:68:b6:07:de:02:1e:3c:83:b7:2d:
2e:2e:24:e1:34:02:9b:ae:44:f2:89:7f:27:7f:b3:
46:03:a0:f8:b8:88:86:49:b1:cd:52:9e:99:12:71:
b0:15:5d:61:5a:9f:84:18:77:7a:5c:eb:77:12:d9:
d6:90:b4:9a:c2:9c:b0:1a:01:7e:23:44:bc:e6:bb:
20:fa:5b:6a:dc:76:55:9d:a3:d6:af:4c:09:d8:33:
1b:c0:fa:e7:40:31:47:57:0b:03:d8:59:ad:3f:1a:
be:be:5d:eb:91:fd:48:45:9d:df:45:12:8a:44:5c:
bd:74:e9:cb:9a:28:0a:57:b8:0c:03:04:33:93:c8:
44:7d:b9:43:77:21:6c:ac:93:cb:de:32:38:d5:34:
3b:43:5b:0a:28:de:0f:32:12:a7:5b:22:c3:c3:2d:
1e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:34:01:D4:A5:10:E8:2D:AA:08:65:B7:B4:4D:84:04:84:BC:02:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/10c40112-bc85-4f75-9bb0-471ec84ba3fe/d12bd30a-acc9-3de6-8fd0-92577639758d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/10c40112-bc85-4f75-9bb0-471ec84ba3fe/10c40112-bc85-4f75-9bb0-471ec84ba3fe.crl
X509v3 Authority Key Identifier:
keyid:D8:E2:5C:0F:58:98:94:D9:C7:71:B2:BE:F6:62:B1:81:17:88:2A:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/10c40112-bc85-4f75-9bb0-471ec84ba3fe.cer
sbgp-ipAddrBlock: critical
IPv4:
192.124.224.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:44:b4:1a:b7:62:73:2d:07:98:24:f1:b7:0f:c8:97:bb:50:
84:59:e1:11:be:70:d7:ac:b3:99:e0:65:5e:ec:c4:ad:57:2e:
3a:48:a6:52:dd:cd:dc:78:8c:58:3a:a7:68:56:6d:49:67:b9:
ea:d9:b8:3e:ab:ff:2f:a6:5b:63:5d:f4:3f:b3:6c:70:04:22:
0a:1b:79:19:aa:55:0c:61:d5:da:a3:7c:35:3a:4a:75:1b:d4:
07:74:7f:5d:38:48:ca:ce:2f:d0:39:2a:57:65:32:a5:38:2f:
e9:26:fb:8a:9a:af:b3:36:ee:2d:3f:84:25:c6:0f:5e:c6:3a:
92:e5:2d:63:e2:a1:16:cb:de:f8:de:21:df:36:2d:87:32:37:
d4:64:df:6f:97:0d:10:cd:fd:f3:9f:2e:0e:a0:c5:2f:75:f7:
89:fa:56:d1:58:d9:b4:73:1a:e6:77:2d:87:34:54:c7:a7:76:
94:5e:ff:62:ce:cf:93:3a:17:48:c7:1a:24:e1:09:a5:b9:ac:
eb:44:2d:5a:62:95:a2:a4:f2:69:df:3b:a6:3f:ff:26:2e:a2:
2b:9f:74:ce:e5:e6:ac:12:ca:bc:22:e7:4a:8c:35:b4:b8:73:
78:2a:68:88:d4:8c:92:0f:73:2a:a5:ce:dd:a8:ab:54:d9:4f:
bc:d2:53:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:00:15 2026 by rpki-client