
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/ab522dfa-37db-37a2-ab27-770ebf576478.roa
File: ab522dfa-37db-37a2-ab27-770ebf576478.roa (raw, json)
Hash identifier: g6wM6Mx2W0QnukqCD1E1sfevNo9WouDY9lnID6v1o4Q=
Subject key identifier: 02:0E:B1:D8:73:E3:DF:4F:80:D2:81:34:1F:17:FC:98:C2:50:BC:84
Certificate issuer: /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial: 010D0C9F4328584DBA3AE859A6864BBE96FAC100
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/ab522dfa-37db-37a2-ab27-770ebf576478.roa
Signing time: Tue 05 May 2026 01:00:23 +0000
ROA not before: Tue 05 May 2026 01:00:23 +0000
ROA not after: Mon 03 Aug 2026 01:00:23 +0000
asID: 21859
IP address blocks: 128.14.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:ba:3a:e8:59:a6:86:4b:be:96:fa:c1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Validity
Not Before: May 5 01:00:23 2026 GMT
Not After : Aug 3 01:00:23 2026 GMT
Subject: CN=58f6af74-3d22-4a9d-8ae8-0a7b0610c8e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:99:69:e1:0e:b9:21:43:d6:0f:53:7b:fa:fd:
1f:f9:28:20:5c:51:94:4e:e0:d1:48:4a:eb:be:3d:
e6:41:36:94:9f:f7:1b:05:11:5d:9b:05:b4:5a:a2:
6d:15:bd:97:53:8a:af:d6:13:54:3c:f8:de:01:1e:
89:9a:6e:af:af:ef:df:12:87:40:d8:a4:86:af:e9:
e7:a7:e1:22:12:63:da:f3:87:26:24:7a:86:c0:60:
bb:40:f7:c9:d1:91:1a:e2:f1:c2:e1:80:16:8a:76:
e8:2e:2d:88:d7:ee:49:33:81:9a:ca:8a:a9:9d:57:
d1:20:46:52:fd:44:9e:f6:cc:67:69:ce:2a:01:ab:
37:db:53:33:63:d0:2c:41:1d:6d:03:74:18:de:db:
eb:ad:dd:4f:61:5a:1b:6a:f7:0b:c8:b1:50:94:ff:
33:26:ab:2e:1f:38:db:00:aa:4b:cc:c2:74:af:70:
31:e3:1f:33:a7:6b:c8:8b:60:c1:9c:20:ad:49:90:
de:85:0a:23:06:99:7f:7f:cb:33:2e:e2:d3:4e:3d:
cc:8a:78:03:8e:ce:e5:a5:ae:9c:2e:d1:da:9b:41:
79:82:bb:8b:43:94:21:81:b1:eb:4c:b0:75:c4:d2:
ad:2c:e6:d5:3d:f0:2d:9f:d8:29:11:d4:97:4e:fc:
a7:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:0E:B1:D8:73:E3:DF:4F:80:D2:81:34:1F:17:FC:98:C2:50:BC:84
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/ab522dfa-37db-37a2-ab27-770ebf576478.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
X509v3 Authority Key Identifier:
keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
sbgp-ipAddrBlock: critical
IPv4:
128.14.10.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:df:1f:72:50:82:72:86:5b:e5:49:95:55:05:88:bc:94:7c:
56:4e:fa:a4:f0:2a:7f:5f:3b:96:5d:f8:95:b0:f3:76:ab:07:
2c:b3:8e:76:f3:ae:af:6b:f5:b6:eb:27:68:91:b4:19:39:1f:
28:71:6d:09:21:df:b7:65:0c:34:5e:90:23:18:25:d3:dd:c1:
97:93:d0:77:26:49:05:05:0e:d8:ab:43:dd:88:14:e2:3f:6d:
7b:cf:d6:1b:90:cf:64:cd:7d:ec:01:0b:d8:9b:18:1f:e5:84:
2f:73:50:ac:46:38:12:d9:b6:ca:f4:3a:b7:88:0d:bf:ad:d5:
da:58:54:2e:34:1c:b6:ec:34:2e:af:cb:c3:7c:f5:14:83:f6:
42:82:99:de:e7:ea:be:0c:ac:91:ba:ae:9b:ce:57:f8:bd:66:
2c:52:30:b3:d5:b5:2a:0e:60:6e:32:f6:89:17:40:34:18:97:
74:c5:e2:94:5b:d2:f0:7f:2d:d9:54:3d:f7:92:7a:ee:45:54:
f1:68:dd:12:da:de:24:f1:0b:8b:cd:d7:75:34:58:fe:d8:68:
c4:e4:78:41:a2:37:aa:8b:8e:f9:6a:83:ac:e3:33:64:2d:d0:
f5:5e:93:6c:92:c5:a8:2d:4c:4a:6b:c5:93:ff:b8:3b:c5:ac:
34:0b:66:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:58:15 2026 by rpki-client