
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/802c7912-9ce3-3856-87c6-4a70974c9e3f.roa
File: 802c7912-9ce3-3856-87c6-4a70974c9e3f.roa (raw, json)
Hash identifier: AqAOTMGRbVZ9Jw91q2roIExKLdEi+ci5skhP5sUOYi4=
Subject key identifier: 7F:B8:AD:F8:D5:F1:9F:F7:1C:F8:A0:52:24:E7:02:86:86:E4:77:AC
Certificate issuer: /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Certificate serial: 010D0C9F4328584F30527AF48F68C3A72E9D6D00
Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/802c7912-9ce3-3856-87c6-4a70974c9e3f.roa
Signing time: Wed 16 Sep 2026 01:00:12 +0000
ROA not before: Wed 16 Sep 2026 01:00:12 +0000
ROA not after: Tue 15 Dec 2026 02:00:12 +0000
asID: 394437
IP address blocks: 72.20.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 08 Oct 2026 05:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:30:52:7a:f4:8f:68:c3:a7:2e:9d:6d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Validity
Not Before: Sep 16 01:00:12 2026 GMT
Not After : Dec 15 02:00:12 2026 GMT
Subject: CN=7c443077-fc7a-4097-82ed-401d78c14dc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:7c:34:9a:3c:e7:b1:52:66:11:2c:42:0e:01:
1b:47:39:6c:f3:ac:18:f7:75:0d:53:ab:99:af:c8:
1e:79:9e:05:c5:d0:d9:83:55:42:8f:8e:1a:7a:95:
d4:2b:ac:b8:e2:32:f1:53:33:ae:a7:56:30:f0:6f:
46:92:ac:68:cf:2c:a3:d1:ed:a3:e8:88:5f:c5:a5:
f1:04:f7:ed:03:c4:87:37:96:6f:11:02:27:2a:cb:
c9:73:ed:f0:29:0b:06:d6:90:4a:09:57:2e:fc:1b:
9e:e4:b7:29:8c:3b:65:e3:1e:50:2d:7d:60:74:b9:
df:7d:73:17:87:8e:9c:0b:0e:1f:86:93:bd:3c:28:
17:58:a1:60:c0:06:0e:58:07:82:5d:bb:ed:f9:ec:
e5:c5:db:1b:af:23:a6:3e:15:88:ff:f6:37:73:b2:
52:21:ac:e4:1b:a0:6b:c2:bc:06:1f:fa:6b:a6:1a:
9d:97:60:73:13:97:2c:77:72:c4:86:3e:2c:b0:9d:
bb:09:86:70:ea:a0:42:83:b1:fa:ee:b1:6e:d4:0d:
60:02:0c:23:e9:24:ab:95:ec:35:65:01:ed:4a:a1:
a8:a0:5c:92:7d:e9:b1:8b:87:08:e8:a3:eb:b1:d0:
62:c7:64:c0:e2:48:e9:87:ce:5b:15:58:02:f0:8f:
49:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:B8:AD:F8:D5:F1:9F:F7:1C:F8:A0:52:24:E7:02:86:86:E4:77:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/802c7912-9ce3-3856-87c6-4a70974c9e3f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl
X509v3 Authority Key Identifier:
keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
sbgp-ipAddrBlock: critical
IPv4:
72.20.152.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a3:c7:4d:d0:51:94:a8:09:d1:84:35:20:7c:70:37:3e:a7:1b:
c6:29:5e:0f:57:b9:a9:ea:29:e3:f1:6e:b8:20:64:11:01:13:
81:52:e1:15:bb:2d:30:6a:2f:ce:a4:62:cc:74:65:70:aa:22:
3c:be:72:59:d6:91:2d:0e:4e:63:aa:e4:d6:fb:db:7f:31:78:
7a:79:1a:1b:4e:ed:71:8f:3b:42:85:5b:6b:b6:8b:23:c8:e3:
a4:03:9a:52:bb:54:da:86:4d:88:2b:62:b7:46:90:22:60:87:
c3:2f:a5:ae:64:ac:9c:4c:ab:d3:1b:ee:31:60:cc:a1:a1:f3:
9c:a1:c9:88:bb:c8:a4:0d:4a:55:a9:f0:41:9f:c5:fb:24:5c:
6f:e4:99:31:fe:7d:05:d3:78:1c:24:ad:e3:d2:c6:c4:94:4a:
6a:f3:65:5b:17:9a:e1:2c:51:1b:7e:e7:96:31:04:65:2f:d3:
77:4e:90:5e:84:6d:8c:96:02:42:d4:0f:dc:b5:d6:1f:b0:ad:
a6:56:33:ca:93:a0:61:91:33:42:4d:71:37:4f:e3:35:dd:7e:
3d:39:24:cb:fb:8e:92:b7:46:1a:88:88:c8:40:b0:63:a6:e8:
49:4a:65:28:78:a2:89:d0:22:b2:55:26:d3:7f:f0:e8:66:94:
e4:cb:9e:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 23:20:12 2026 by rpki-client