
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/fb4f7728-2f5d-3f95-93ac-eb7b95fcd6ea.roa
File: fb4f7728-2f5d-3f95-93ac-eb7b95fcd6ea.roa (raw, json)
Hash identifier: FhGoFLMYO7D8OlgiFmbwvd3bGQHrRPM8YdiwIGRK73w=
Subject key identifier: 2F:99:80:12:E4:99:B4:6D:6E:DF:DB:8A:2A:EB:BB:B4:8B:0E:A4:53
Certificate issuer: /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial: 010D0C9F4328584DAC456B8E2E2430A6404AE140
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/fb4f7728-2f5d-3f95-93ac-eb7b95fcd6ea.roa
Signing time: Thu 30 Apr 2026 01:00:26 +0000
ROA not before: Thu 30 Apr 2026 01:00:26 +0000
ROA not after: Wed 29 Jul 2026 01:00:26 +0000
asID: 21859
IP address blocks: 128.1.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:ac:45:6b:8e:2e:24:30:a6:40:4a:e1:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Validity
Not Before: Apr 30 01:00:26 2026 GMT
Not After : Jul 29 01:00:26 2026 GMT
Subject: CN=3f87f419-1862-41d5-b546-8ee348f64b5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:7c:05:a7:d5:fb:cc:1c:42:a6:7e:e1:ce:c5:
45:d0:1c:0f:b8:0a:e4:bd:36:ca:2c:38:33:ac:fb:
84:49:9b:8b:ff:31:7f:4a:48:47:52:c8:e7:d3:6a:
91:ce:a2:c0:78:cf:29:74:2d:34:cb:2d:b1:f2:73:
84:91:c8:0e:52:92:5a:d5:a1:7e:41:ac:1f:27:a2:
af:e8:c3:70:fc:3e:98:0e:54:74:c8:40:b9:72:f3:
ae:f3:3e:01:c1:b0:87:3f:36:f4:fd:05:db:4a:7a:
37:63:87:d2:3b:9c:07:f8:96:d5:4a:bb:cb:a0:29:
1f:a6:9a:0e:1c:c6:7e:87:01:11:93:7d:1c:08:d5:
0d:0d:7c:7b:e0:80:16:9a:49:42:59:ec:50:71:eb:
f0:6a:ed:79:10:00:d4:68:dc:f3:55:ca:f0:65:d4:
b3:17:db:db:0d:e1:de:c7:41:0a:84:2b:5a:0a:34:
d4:9a:81:cc:90:2a:3a:b7:66:25:36:bf:2f:e0:f1:
2c:1f:f8:21:44:63:85:70:33:6a:9a:f0:39:1d:cb:
b7:32:e9:40:3c:27:9f:ee:7b:fa:22:13:49:1c:7f:
7c:c2:92:e8:31:9c:e7:01:18:fc:93:0f:ef:a3:de:
7e:6e:e6:46:6f:1f:b4:fe:1b:a7:4e:d1:ed:55:dc:
7e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:99:80:12:E4:99:B4:6D:6E:DF:DB:8A:2A:EB:BB:B4:8B:0E:A4:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/fb4f7728-2f5d-3f95-93ac-eb7b95fcd6ea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
X509v3 Authority Key Identifier:
keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
sbgp-ipAddrBlock: critical
IPv4:
128.1.222.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9f:57:ec:75:7d:37:fc:86:80:72:27:28:b1:7c:9a:fb:7d:18:
ee:3a:86:1c:c7:90:59:52:9a:da:99:c4:c1:45:93:b2:34:d8:
bf:62:a9:73:75:96:29:e1:bb:66:40:e1:63:be:16:65:3c:8b:
61:ef:60:df:ba:10:d2:31:28:e8:5d:de:90:46:62:ec:a3:3b:
42:a6:c2:1c:74:2a:27:0e:11:3a:4f:81:7b:24:a6:3e:a2:20:
44:e9:ca:55:07:9f:36:94:30:ef:9f:3d:96:8e:41:80:f9:b1:
6e:0a:38:13:d2:4e:b3:1e:dc:1a:a8:4f:14:d1:ad:f3:1c:85:
73:2b:d0:c6:90:3c:2f:03:79:44:30:d0:15:76:59:5d:92:17:
d9:38:50:cc:a7:7e:0b:7f:d9:f3:7a:b4:19:26:fa:e1:7b:70:
c6:af:a0:21:84:c6:a4:06:a8:ed:93:cf:6f:e2:7c:93:3e:f7:
e5:43:8e:fe:ab:4b:2c:df:a9:5f:ac:69:46:d7:0e:59:ef:23:
14:47:96:5c:26:43:e9:2e:bf:a8:ad:48:c1:6b:a3:0b:93:3c:
f5:ae:24:9e:d1:4a:6c:55:75:ab:03:13:ec:0e:13:16:cd:32:
7b:c1:f5:e3:ec:23:b3:38:d2:36:39:d7:f3:27:96:5d:18:dc:
3d:47:cb:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:09:19 2026 by rpki-client