
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/d8a1d0b7-5675-3b03-9f09-13c3eeae3661.roa
File: d8a1d0b7-5675-3b03-9f09-13c3eeae3661.roa (raw, json)
Hash identifier: ZGWQ2K5ntigyG6/Q6TK5Wi7xeH9d3EP3RHeed9ztrYI=
Subject key identifier: 9F:EA:B3:84:B0:C8:18:BD:54:3C:BB:E4:DB:23:B6:D4:8D:5C:AB:88
Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial: 010D0C9F4328584DADAAE63AC1ED34AAF49119C0
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/d8a1d0b7-5675-3b03-9f09-13c3eeae3661.roa
Signing time: Thu 30 Apr 2026 13:00:31 +0000
ROA not before: Thu 30 Apr 2026 13:00:31 +0000
ROA not after: Wed 29 Jul 2026 13:00:31 +0000
asID: 11232
IP address blocks: 24.124.0.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 23:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:ad:aa:e6:3a:c1:ed:34:aa:f4:91:19:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Validity
Not Before: Apr 30 13:00:31 2026 GMT
Not After : Jul 29 13:00:31 2026 GMT
Subject: CN=e7389ea0-32e3-4219-a7e9-e737a6e44015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:9b:45:3a:85:45:f2:91:43:bb:87:9a:78:7f:
60:b2:ff:5a:67:68:06:33:d1:a9:d8:35:2b:b8:bf:
60:de:eb:ab:5b:79:cd:47:09:93:93:db:33:f2:42:
75:c7:da:85:7d:21:12:73:49:8a:f0:c7:00:02:b2:
78:4d:33:2f:e0:83:c7:9f:cf:fa:54:63:2e:5d:4a:
7b:3b:72:1c:e8:5d:38:f2:b3:58:a6:c8:77:ca:92:
b3:f4:7b:bc:46:0a:f3:81:6a:ad:5a:a9:f9:4b:3c:
f1:d5:cf:f8:db:8d:5b:2d:f3:7f:e5:1a:fd:74:20:
4b:aa:dd:b3:4d:f3:22:8a:d9:c7:cc:e9:0f:fa:1f:
07:42:a1:9b:c4:bd:80:3b:20:8d:ee:11:b7:ed:99:
30:9b:63:99:7f:fe:f8:1c:3b:62:82:62:26:72:11:
30:02:2d:56:c8:a7:c3:1c:6a:d1:dd:6a:c4:44:9a:
2b:01:7f:b4:8b:03:b9:bc:a4:48:6c:db:a7:aa:b5:
44:46:39:0f:a2:7b:9a:78:15:fd:b6:bb:27:9d:8c:
03:6e:c4:71:74:dc:b3:ea:52:85:de:c8:74:e1:1d:
a7:f6:86:51:93:be:99:11:34:2d:83:c1:96:10:c4:
4d:71:f3:f0:d8:7a:1d:64:5f:0e:e0:8b:15:b5:42:
cb:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:EA:B3:84:B0:C8:18:BD:54:3C:BB:E4:DB:23:B6:D4:8D:5C:AB:88
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/d8a1d0b7-5675-3b03-9f09-13c3eeae3661.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
X509v3 Authority Key Identifier:
keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
sbgp-ipAddrBlock: critical
IPv4:
24.124.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:9f:8b:4b:1a:fd:6e:39:37:60:8e:50:fe:1f:f8:b3:95:28:
90:a4:85:a8:f6:8b:92:39:9e:8e:dc:66:5b:68:d8:c1:f6:58:
49:b5:a7:0d:c0:ad:3c:90:c0:f6:c6:80:9b:8c:f1:21:5f:e3:
b4:79:8e:4a:9c:78:98:ec:71:2d:f2:f8:43:df:5a:e3:eb:3a:
12:97:3a:08:e0:78:f5:bc:31:d2:49:cd:d8:7a:26:4c:18:5b:
d0:db:dc:39:b6:2a:0c:65:35:3c:f0:80:f3:c0:30:55:05:20:
38:97:18:90:77:ec:43:85:06:43:3c:5f:20:3a:d3:8e:ce:47:
d1:1a:08:94:f6:ae:26:3b:16:76:80:0a:43:f4:c2:e4:08:8a:
b2:79:f5:24:0f:58:99:7c:c4:33:b8:4e:79:38:aa:80:db:ba:
a1:f0:b6:f4:5f:8c:94:45:f2:2d:9c:08:05:ae:65:4d:cc:3c:
6f:1b:94:09:a9:a4:39:b4:82:94:c0:ad:0e:4e:32:0d:f5:5a:
4c:2f:df:0f:6b:30:0c:02:66:f5:61:0d:47:43:71:ef:88:54:
7e:c5:3c:a6:73:8c:3a:99:03:29:0b:43:46:33:56:4e:93:a2:
ce:de:db:ca:cd:a7:be:fa:b3:95:18:e0:cd:73:91:af:3a:2c:
a6:ca:eb:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:17:19 2026 by rpki-client