
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d32fa67-7158-4437-9e64-f0926c4e4d26/dd445671-6815-3a61-a556-1bfd773ca1e6.roa
File: dd445671-6815-3a61-a556-1bfd773ca1e6.roa (raw, json)
Hash identifier: 9oS0nswiUE+RdlPvKDkna36Ke1M6ckz4bIhUfqQ4V6o=
Subject key identifier: F2:8E:3B:FD:94:65:99:23:3D:BC:23:4B:0D:3E:17:B0:17:4B:E4:97
Certificate issuer: /CN=0d32fa67-7158-4437-9e64-f0926c4e4d26
Certificate serial: 010D0C9F4328584E6B0A152035989510FAE94280
Authority key identifier: 04:4C:75:0E:45:BA:C4:09:C0:E9:02:3B:BF:6D:3E:20:CE:FF:05:D7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d32fa67-7158-4437-9e64-f0926c4e4d26.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d32fa67-7158-4437-9e64-f0926c4e4d26/dd445671-6815-3a61-a556-1bfd773ca1e6.roa
Signing time: Tue 07 Jul 2026 09:00:12 +0000
ROA not before: Tue 07 Jul 2026 09:00:12 +0000
ROA not after: Mon 05 Oct 2026 09:00:12 +0000
asID: 399134
IP address blocks: 52.124.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d32fa67-7158-4437-9e64-f0926c4e4d26/0d32fa67-7158-4437-9e64-f0926c4e4d26.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d32fa67-7158-4437-9e64-f0926c4e4d26/0d32fa67-7158-4437-9e64-f0926c4e4d26.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d32fa67-7158-4437-9e64-f0926c4e4d26.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 26 Jul 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:6b:0a:15:20:35:98:95:10:fa:e9:42:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d32fa67-7158-4437-9e64-f0926c4e4d26
Validity
Not Before: Jul 7 09:00:12 2026 GMT
Not After : Oct 5 09:00:12 2026 GMT
Subject: CN=1fed1b23-310e-4361-9241-f43a1f0538eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c5:8a:ae:4e:e4:72:4d:93:dc:65:a8:bc:e7:
28:93:2d:a8:ec:89:63:24:2b:33:45:6a:ad:f2:33:
46:3c:7d:1a:70:e3:53:b1:61:c7:1f:c3:ec:e3:08:
38:43:79:0b:f5:0b:72:21:69:4f:43:48:8b:a6:94:
81:f0:c0:c8:ec:63:d6:02:ee:f6:d1:73:3a:97:5d:
ea:1a:b4:97:76:bc:1a:49:36:6b:e2:6b:5b:43:93:
85:40:aa:8e:b6:ab:45:d3:59:00:60:3b:da:18:80:
24:30:30:4b:57:73:eb:86:f4:2c:23:17:f3:c5:9a:
3d:8c:5b:67:cf:e4:1c:df:79:08:4b:7b:eb:66:14:
b7:3b:61:98:fb:e7:6c:9b:ae:6d:6e:63:53:c6:e5:
1f:6e:aa:ad:e1:4b:d9:b0:62:0a:97:21:b9:ff:da:
dc:6f:ce:19:bb:69:37:f3:4b:b2:8e:96:70:b2:80:
8d:22:13:16:e5:e8:9f:68:a2:0c:15:0c:f5:01:90:
73:28:c6:0b:4c:bb:e8:dd:97:99:f6:0c:5d:c0:38:
06:49:2a:e3:21:e0:71:e6:5c:c7:e4:cd:13:04:30:
cb:85:7a:24:21:f7:31:9b:f6:94:66:d8:59:9a:3c:
68:77:5d:a6:8f:20:20:58:50:a6:ba:56:83:06:71:
d5:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:8E:3B:FD:94:65:99:23:3D:BC:23:4B:0D:3E:17:B0:17:4B:E4:97
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d32fa67-7158-4437-9e64-f0926c4e4d26/dd445671-6815-3a61-a556-1bfd773ca1e6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d32fa67-7158-4437-9e64-f0926c4e4d26/0d32fa67-7158-4437-9e64-f0926c4e4d26.crl
X509v3 Authority Key Identifier:
keyid:04:4C:75:0E:45:BA:C4:09:C0:E9:02:3B:BF:6D:3E:20:CE:FF:05:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d32fa67-7158-4437-9e64-f0926c4e4d26.cer
sbgp-ipAddrBlock: critical
IPv4:
52.124.25.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:ef:f4:42:7b:60:3d:cf:2d:6d:e4:28:d4:5a:52:68:50:47:
ca:e0:a3:66:2c:d2:00:7e:26:4a:52:da:0c:da:fd:ab:2f:4a:
b6:d2:f1:b6:73:8d:fa:d7:b3:1f:41:18:05:96:22:2d:5a:ad:
29:b4:42:b2:6d:e0:17:17:b7:d6:8e:41:97:6b:9b:c8:19:39:
bb:c0:e0:b8:f5:19:51:19:ba:bd:64:d8:a3:5c:ea:18:6c:e7:
91:2e:79:04:40:d4:a5:ee:d3:d2:bc:1f:28:7f:92:d2:05:4d:
03:6e:91:68:2d:f7:cf:78:62:ed:e4:30:ef:0d:67:11:31:84:
50:c3:1c:6d:c4:da:c9:22:b3:c9:a3:ad:05:2c:a9:2e:0a:4d:
64:ab:74:c3:b2:18:73:a0:7e:97:30:35:cb:58:2a:9b:03:0e:
2f:c6:4b:02:2a:a3:b2:ae:c6:60:e6:a4:54:91:68:19:b4:c1:
f9:c1:08:f5:f4:2e:67:3e:9f:00:2e:52:bc:7e:09:58:88:62:
3e:42:b7:dc:50:4a:84:32:65:b8:ef:02:03:2b:ce:92:53:f9:
64:5d:8b:b1:0b:75:a9:b8:a6:f7:a5:70:b7:39:ef:67:a7:22:
02:dc:71:6d:b5:8c:78:22:aa:30:f5:10:9b:ea:14:40:99:26:
c0:6c:71:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:33:50 2026 by rpki-client