
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/4776edfc-bc46-3221-b5cc-4294fec1d431.roa
File: 4776edfc-bc46-3221-b5cc-4294fec1d431.roa (raw, json)
Hash identifier: SlkoZGq58jWgwh8xsNoV9Zc5DmLn/nG9PD/1Da14Pw8=
Subject key identifier: 2B:64:E9:E4:00:08:B8:D5:7A:31:E3:B3:BF:34:C0:6C:2B:95:94:40
Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Certificate serial: 010D0C9F4328584F4976190A9CCA60EFAA266600
Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/4776edfc-bc46-3221-b5cc-4294fec1d431.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 394437
IP address blocks: 72.20.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 30 Sep 2026 05:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:76:19:0a:9c:ca:60:ef:aa:26:66:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=cae7ee9f-dcca-46f5-98ee-869691168f7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:02:ca:25:b6:c3:f4:f7:49:c9:c7:fa:36:bc:
a9:d4:b7:d8:67:9a:61:cf:a6:45:e4:42:04:e7:df:
03:e5:fb:26:b8:96:68:b6:85:fd:68:da:5d:04:33:
6d:66:05:b8:53:59:7f:ca:fd:a6:6e:f7:ed:ef:18:
6f:93:92:4f:b5:fd:39:74:14:b6:63:49:be:fb:6f:
e1:fb:03:5a:b3:d9:2c:2e:f5:0c:a0:fb:9f:15:12:
72:9e:d0:c8:e3:77:52:a2:c5:ba:6c:91:ab:18:30:
98:56:b6:50:ac:a5:30:38:89:d9:cd:f9:1f:8f:b6:
37:38:11:84:fb:d7:01:e1:29:dd:db:90:ca:e4:07:
03:75:81:52:91:b3:a9:9a:45:01:ed:e5:08:e4:4e:
28:e4:0c:c0:69:df:3b:e6:8f:83:70:5a:7f:cc:aa:
8b:2e:52:49:55:41:85:46:6b:fb:f4:df:5b:07:7e:
6d:e8:a6:c4:96:01:d3:6f:b4:bc:51:4a:db:cc:43:
f3:11:f2:c8:39:a0:d1:20:f6:27:d6:da:e5:e6:33:
8a:37:f9:66:b5:fa:25:fd:c0:2e:8a:27:4b:35:6d:
5a:cf:a8:e5:df:38:11:ba:d6:c8:e1:aa:02:de:42:
cd:d2:d4:1a:cc:65:3f:0a:36:5f:26:6c:95:68:00:
bf:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:64:E9:E4:00:08:B8:D5:7A:31:E3:B3:BF:34:C0:6C:2B:95:94:40
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/4776edfc-bc46-3221-b5cc-4294fec1d431.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl
X509v3 Authority Key Identifier:
keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
sbgp-ipAddrBlock: critical
IPv4:
72.20.134.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:f6:56:dd:b2:98:05:36:c1:0a:61:bc:4d:dc:df:32:fd:24:
a0:09:1d:7b:1c:9b:87:a0:a8:7a:23:34:ac:ea:fc:b7:b8:fe:
be:ea:93:88:85:1c:cd:57:7f:9e:58:b5:16:8d:ff:25:26:c7:
d0:58:df:a9:b2:e1:e7:08:06:de:5f:b4:e5:0c:57:2c:d2:f2:
a6:93:97:8f:df:69:c3:e8:61:ab:aa:ea:e3:5a:61:ef:08:1e:
df:5c:c0:9c:3d:b3:29:db:53:85:c4:c4:cf:99:be:38:4d:45:
27:91:44:9c:bd:d8:df:fe:dc:9c:73:e5:e1:be:5c:ca:6c:b1:
87:36:da:ef:d5:e4:47:49:54:69:d4:da:e9:98:33:a6:a7:b6:
c6:04:31:27:c4:d7:60:d5:2e:c5:c8:67:0d:32:35:e3:5a:d8:
70:11:c3:0c:15:52:97:76:29:ad:53:8a:7c:1d:f7:dc:73:0f:
c4:75:0d:01:55:fa:77:e6:d7:aa:3c:82:17:17:40:7f:e4:fa:
88:c7:e9:39:c3:33:25:8f:56:f0:7d:af:4a:08:60:3d:88:c0:
95:46:dd:37:67:d7:15:dd:68:26:56:f3:d2:f5:b1:6c:b0:d7:
ce:7c:b0:18:76:1b:51:31:aa:b5:78:df:10:97:81:c9:df:5f:
35:b3:91:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:03:39 2026 by rpki-client