
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f70aa1ea-fee7-3c42-8cf5-bb0485339488.roa
File: f70aa1ea-fee7-3c42-8cf5-bb0485339488.roa (raw, json)
Hash identifier: G8P3djcDa1mr6dvaw2NvgmkwQo4S+EXBAoZqrDjvsDk=
Subject key identifier: 1E:CC:05:1D:E2:F5:F7:3B:E8:6C:70:8D:3C:50:0B:87:88:D2:2E:83
Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial: 010D0C9F4328584D1F4A65A350207FA158105280
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f70aa1ea-fee7-3c42-8cf5-bb0485339488.roa
Signing time: Tue 10 Mar 2026 13:00:41 +0000
ROA not before: Tue 10 Mar 2026 13:00:41 +0000
ROA not after: Mon 08 Jun 2026 13:00:41 +0000
asID: 5650
IP address blocks: 172.120.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:1f:4a:65:a3:50:20:7f:a1:58:10:52:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
Validity
Not Before: Mar 10 13:00:41 2026 GMT
Not After : Jun 8 13:00:41 2026 GMT
Subject: CN=d64ed237-9406-42c7-b857-c2282f0f7eb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:ee:f8:f5:3f:0b:b5:c1:25:c8:55:e5:f9:14:
73:ca:b2:cc:96:1d:13:9a:75:cf:41:77:f5:90:50:
ed:39:32:ff:9b:74:46:d6:d8:0a:39:94:30:62:68:
72:47:7f:6f:08:0d:18:4a:a2:fd:28:ac:6b:da:f1:
20:1d:0e:61:eb:32:7a:ae:1c:68:37:6e:7c:09:23:
ef:a9:63:1f:d3:7e:bd:6d:a5:1e:5f:fb:60:4e:60:
bf:9a:12:9d:46:5f:24:7c:56:99:a6:af:04:aa:0d:
d4:02:ab:e1:bd:91:18:2d:35:49:48:a0:f6:72:46:
ef:eb:35:62:42:77:ad:c2:6b:2e:38:3c:b2:7e:e8:
21:23:93:35:b9:86:1b:bf:91:b7:cf:cb:a5:6c:0f:
25:aa:b8:1a:33:72:53:86:9a:d5:d3:86:af:b5:fe:
6e:37:e5:81:3f:6a:7a:47:1f:7f:5d:41:5b:4a:1b:
ff:83:5b:e7:96:2c:e9:b4:99:b1:64:21:89:c1:78:
63:70:6d:df:14:a4:b5:3e:37:17:f7:cb:d5:23:c9:
02:f8:5a:22:49:99:06:18:c4:27:ab:db:f1:23:39:
16:b1:42:35:34:49:e2:24:4e:be:1f:cf:45:38:25:
37:7f:c0:3f:d1:8b:af:11:86:8e:de:c9:12:8a:95:
4c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:CC:05:1D:E2:F5:F7:3B:E8:6C:70:8D:3C:50:0B:87:88:D2:2E:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/f70aa1ea-fee7-3c42-8cf5-bb0485339488.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
X509v3 Authority Key Identifier:
keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
sbgp-ipAddrBlock: critical
IPv4:
172.120.23.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:c2:f0:2f:5a:96:4f:e4:8b:8a:d3:e0:b8:70:ab:4e:d4:d3:
0c:e6:d6:a9:df:8a:a8:d9:f5:1e:f9:93:73:1b:5d:83:19:03:
3a:09:f5:19:70:f5:2f:1a:e0:c7:5d:b1:32:35:68:d0:00:93:
57:a2:8a:74:7b:79:ba:72:4e:29:49:ea:48:e5:de:dd:3b:de:
5a:c3:a0:03:75:3d:e3:75:86:f3:a1:84:a7:d9:82:36:61:e1:
a4:0f:69:bc:fb:97:84:b9:1d:77:d3:40:4d:a8:6f:15:72:a7:
f8:32:04:a5:77:7c:82:c1:ba:d8:28:78:b1:94:ba:e4:90:72:
73:0c:46:cd:99:5a:a3:82:54:ae:51:b7:98:a9:5f:33:67:28:
9a:19:36:9d:f2:4f:0c:a5:d9:54:2e:64:37:62:95:f4:ee:46:
cc:0d:6d:01:17:32:28:ee:a4:ee:e6:ca:8e:65:ab:00:c6:d0:
fe:45:df:a1:d5:a2:0d:5e:82:f1:26:41:e6:93:8f:8e:bf:1c:
b9:fc:ed:25:0d:4e:1b:9d:ef:60:cd:f9:49:9d:51:d8:e8:6d:
a3:6a:85:ab:e6:81:71:16:86:8e:2c:82:f1:69:fb:ea:24:0a:
78:f1:8c:f5:c0:aa:5d:dd:ab:dc:ad:61:ab:b4:97:be:1c:f0:
1a:e6:2f:44
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0fSmWjUCB/oVgQUoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj
YjdjMB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk
ZDY0ZWQyMzctOTQwNi00MmM3LWI4NTctYzIyODJmMGY3ZWIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAge749T8LtcElyFXl+RRzyrLMlh0TmnXPQXf1
kFDtOTL/m3RG1tgKOZQwYmhyR39vCA0YSqL9KKxr2vEgHQ5h6zJ6rhxoN258CSPv
qWMf0369baUeX/tgTmC/mhKdRl8kfFaZpq8Eqg3UAqvhvZEYLTVJSKD2ckbv6zVi
QnetwmsuODyyfughI5M1uYYbv5G3z8ulbA8lqrgaM3JThprV04avtf5uN+WBP2p6
Rx9/XUFbShv/g1vnlizptJmxZCGJwXhjcG3fFKS1PjcX98vVI8kC+FoiSZkGGMQn
q9vxIzkWsUI1NEniJE6+H89FOCU3f8A/0YuvEYaO3skSipVMfQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB7MBR3i9fc76GxwjTxQC4eI0i6DMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw
MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvZjcwYWExZWEtZmVlNy0z
YzQyLThjZjUtYmIwNDg1MzM5NDg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx
NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi
Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4
MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArHgXMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJHC8C9alk/ki4rT4Lhwq07U0wzm1qnfiqjZ9R75k3MbXYMZAzoJ9Rlw
9S8a4MddsTI1aNAAk1eiinR7ebpyTilJ6kjl3t073lrDoAN1PeN1hvOhhKfZgjZh
4aQPabz7l4S5HXfTQE2obxVyp/gyBKV3fILButgoeLGUuuSQcnMMRs2ZWqOCVK5R
t5ipXzNnKJoZNp3yTwyl2VQuZDdilfTuRswNbQEXMijupO7myo5lqwDG0P5F36HV
og1egvEmQeaTj46/HLn87SUNThud72DN+UmdUdjobaNqhavmgXEWho4sgvFp++ok
CnjxjPXAql3dq9ytYau0l74c8BrmL0Q=
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:47:29 2026 by rpki-client