
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/1db32ab1-641c-330d-8f26-9316a8a7082a.roa
File: 1db32ab1-641c-330d-8f26-9316a8a7082a.roa (raw, json)
Hash identifier: d3bqWTgwjI0q6fUbQvjlsxQVf/VZ5pJbU4LO6XxHre4=
Subject key identifier: EB:45:26:FA:0D:61:C5:02:EA:0A:AB:14:5F:89:49:F9:CF:62:46:3F
Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Certificate serial: 010D0C9F4328584D1B1A11E77B3BD8CD0486CEC0
Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/1db32ab1-641c-330d-8f26-9316a8a7082a.roa
Signing time: Mon 09 Mar 2026 01:00:32 +0000
ROA not before: Mon 09 Mar 2026 01:00:32 +0000
ROA not after: Sun 07 Jun 2026 01:00:32 +0000
asID: 394437
IP address blocks: 74.124.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 05:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:1b:1a:11:e7:7b:3b:d8:cd:04:86:ce:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Validity
Not Before: Mar 9 01:00:32 2026 GMT
Not After : Jun 7 01:00:32 2026 GMT
Subject: CN=1a60aa5b-12d1-4ab0-829f-721a4ebc9cae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:fa:6d:7e:c3:03:d9:ec:88:48:14:8f:dd:a8:
b1:5b:24:9f:5b:30:4d:0e:55:5e:bb:2a:88:47:43:
e7:8f:a7:15:5a:0f:1c:af:c6:6e:23:a5:5a:ed:7c:
da:d8:ad:54:71:00:4a:34:38:2b:69:23:c6:de:27:
49:1c:55:c7:6d:c4:a8:fc:ab:ea:6e:7a:64:9e:b5:
f5:8d:b0:0e:72:54:c7:59:4d:d7:33:cf:0b:f9:8b:
2b:04:0f:52:50:36:c7:77:33:97:5d:8c:b0:72:d8:
59:a6:32:0e:f2:ce:d2:8a:1a:0b:87:fc:92:38:88:
4a:fa:7e:9f:ff:38:1c:9e:12:89:68:9f:94:ec:ba:
93:67:fb:a6:22:9a:2d:7c:5e:93:42:4e:fc:e2:60:
fd:0f:38:44:77:e3:4d:e3:75:11:80:33:67:72:05:
f6:c6:b0:3d:76:4c:29:ed:c3:c0:26:32:39:23:d0:
12:6f:9a:8a:a7:b7:a5:eb:74:69:26:a1:67:20:ac:
ef:d6:4d:11:49:e5:e9:da:55:ee:78:cc:0c:aa:30:
0b:96:bf:23:a6:a9:99:39:44:bd:08:80:73:53:c8:
c5:10:1f:19:fc:13:b9:4e:af:78:f2:65:af:c7:d5:
ce:7a:ca:52:e4:e4:2a:bd:22:c4:fb:19:6b:3a:35:
9d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:45:26:FA:0D:61:C5:02:EA:0A:AB:14:5F:89:49:F9:CF:62:46:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/1db32ab1-641c-330d-8f26-9316a8a7082a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl
X509v3 Authority Key Identifier:
keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
sbgp-ipAddrBlock: critical
IPv4:
74.124.51.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:5c:57:ee:0e:c7:c7:8e:84:f9:d7:e7:f6:d6:d3:bd:4b:1b:
d0:45:8a:fb:4f:05:5b:c0:01:20:d5:26:31:52:21:77:e4:6d:
44:82:c9:44:a5:17:f9:50:cc:74:53:43:fc:9a:23:1d:34:54:
6a:44:72:a1:65:12:e9:8b:70:dc:68:b9:51:bf:a9:7c:87:03:
d0:81:e8:09:04:fd:1e:40:d3:ab:0a:73:91:45:ff:83:2d:67:
f9:8b:6d:ae:4d:97:7b:74:cc:62:c1:2a:3c:f4:62:ff:9b:69:
db:0d:d7:7b:ea:0a:fb:8c:c5:c4:65:0c:ce:ca:fd:7b:b8:d9:
22:7f:d4:5d:84:75:5e:ad:f3:e1:97:09:8d:b2:f7:0f:c0:ad:
3a:a9:b4:21:84:bc:b9:ab:7c:54:8e:9d:7d:c3:61:3a:f2:71:
17:c8:ea:bc:b5:e6:a1:9c:5c:b2:36:47:0e:2d:e5:7d:6d:67:
2d:e1:85:c4:78:0a:7e:9b:1a:cf:d8:06:01:4b:bd:3a:4b:fa:
a5:6d:2d:be:e3:60:84:5e:cf:8c:85:d3:ec:e3:8d:81:16:f5:
56:73:2f:34:0e:14:a8:88:8f:a2:c9:e8:11:5d:33:f7:ae:c5:
df:06:5d:f9:07:c7:3e:c5:19:85:e7:5e:ab:af:2a:9c:de:8e:
52:3d:77:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:39:23 2026 by rpki-client