
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/040ac077-a6b6-4194-a06e-6c9593332536/131fed8e-8478-3baa-a34c-cbb8b24bbbc6.roa
File: 131fed8e-8478-3baa-a34c-cbb8b24bbbc6.roa (raw, json)
Hash identifier: TuS0F94mh8WjWfDKvG87ZekH1uwi1UwZN3/rIzX2voc=
Subject key identifier: 12:2A:84:43:D9:57:CF:DF:25:5A:74:D0:D0:AF:FB:D3:EC:F6:1F:67
Certificate issuer: /CN=040ac077-a6b6-4194-a06e-6c9593332536
Certificate serial: 010D0C9F4328584EA7872AFBEEF86152CF8A3AC0
Authority key identifier: E4:3D:57:58:2B:D6:AA:FC:53:49:D6:BF:6E:0D:11:86:DE:0D:81:F9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/040ac077-a6b6-4194-a06e-6c9593332536.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/040ac077-a6b6-4194-a06e-6c9593332536/131fed8e-8478-3baa-a34c-cbb8b24bbbc6.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 14828
IP address blocks: 23.235.0.0/20 maxlen: 24
104.218.220.0/22 maxlen: 24
140.190.0.0/18 maxlen: 24
173.224.172.0/22 maxlen: 24
192.145.240.0/20 maxlen: 24
192.151.160.0/20 maxlen: 24
2605:9b80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/040ac077-a6b6-4194-a06e-6c9593332536/040ac077-a6b6-4194-a06e-6c9593332536.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/040ac077-a6b6-4194-a06e-6c9593332536/040ac077-a6b6-4194-a06e-6c9593332536.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/040ac077-a6b6-4194-a06e-6c9593332536.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:87:2a:fb:ee:f8:61:52:cf:8a:3a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=040ac077-a6b6-4194-a06e-6c9593332536
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=5868cd38-d407-46c7-a872-a592568effd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:9f:d7:42:b6:e3:5a:98:69:f5:70:b2:64:ff:
33:f8:69:d5:b8:3d:9c:29:d6:f8:9d:0b:60:61:f5:
c2:0a:aa:13:61:c4:7f:c3:17:31:44:f6:9e:33:c1:
c6:12:9a:c3:0e:42:7b:d3:a2:61:32:a8:7e:20:45:
a2:3d:f3:46:ae:9f:e3:0a:a3:fc:79:b0:09:b8:36:
ee:5c:1b:a4:92:33:97:5d:05:6e:b5:be:5c:74:06:
23:81:83:5e:78:17:21:fd:eb:c9:18:83:71:f2:7e:
37:4e:c3:af:99:48:c3:0c:f2:e4:ef:e2:be:6b:86:
7e:fe:d8:1d:6a:a3:97:94:8b:a6:01:ad:3a:8c:8a:
39:d7:17:52:29:1d:1e:e0:9b:3a:b8:2f:18:70:d7:
d4:93:7c:35:05:ca:27:90:4d:f9:38:ef:f6:2e:01:
f6:b1:a5:fb:73:2c:8b:e2:69:4d:fe:38:36:57:fc:
50:c5:16:24:1a:5f:d8:22:30:06:07:84:6d:77:39:
2a:29:0d:ab:3b:15:c1:d6:5c:11:4b:f6:f9:5b:58:
b3:45:cd:fc:ae:60:b9:d4:c7:54:47:13:6e:5d:c7:
47:58:66:9b:39:f7:52:11:24:d0:03:87:af:b3:ca:
6e:f0:28:79:9b:9e:21:2f:e6:a5:8c:b7:29:81:93:
65:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:2A:84:43:D9:57:CF:DF:25:5A:74:D0:D0:AF:FB:D3:EC:F6:1F:67
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/040ac077-a6b6-4194-a06e-6c9593332536/131fed8e-8478-3baa-a34c-cbb8b24bbbc6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/040ac077-a6b6-4194-a06e-6c9593332536/040ac077-a6b6-4194-a06e-6c9593332536.crl
X509v3 Authority Key Identifier:
keyid:E4:3D:57:58:2B:D6:AA:FC:53:49:D6:BF:6E:0D:11:86:DE:0D:81:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/040ac077-a6b6-4194-a06e-6c9593332536.cer
sbgp-ipAddrBlock: critical
IPv4:
23.235.0.0/20
104.218.220.0/22
140.190.0.0/18
173.224.172.0/22
192.145.240.0/20
192.151.160.0/20
IPv6:
2605:9b80::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:1a:6b:57:90:59:fb:45:fc:25:ba:42:63:90:43:c2:a3:6e:
75:46:09:65:84:8b:39:ff:6c:66:b2:67:6a:8e:31:2a:7e:6f:
08:44:a1:71:9d:94:b4:13:50:e2:7c:65:31:00:bd:f4:ee:4b:
88:a4:90:43:44:0d:23:4f:df:d5:78:9b:17:9f:ba:1d:5d:a1:
17:3b:85:59:b5:a1:b7:cd:a4:db:b5:2b:f2:e6:02:62:5c:2d:
f5:cb:51:0f:48:7c:ec:53:9d:83:d2:12:95:0a:10:e5:1c:0d:
e3:42:d7:a7:97:1e:a0:40:0a:ad:b1:a7:aa:40:0c:20:2f:9d:
ed:31:42:b5:0c:70:40:f8:d7:5b:0e:91:bd:7b:aa:93:0f:01:
91:79:88:91:0d:5b:e0:b0:ed:f7:b5:93:d4:f2:41:97:a3:6e:
6c:10:7c:2b:2d:c8:3f:a5:22:1a:f3:6d:a7:2e:06:d1:0d:03:
8b:c6:eb:65:b8:7d:4e:27:34:55:1b:ae:a5:e7:4a:18:73:38:
93:53:b2:ee:5d:19:31:40:54:69:52:ef:e3:a3:b9:0e:82:3a:
83:cf:a0:e7:e5:a3:6a:6d:2b:3a:bd:2d:a4:8c:4f:ae:8c:5e:
bf:90:8d:91:d1:86:ef:e8:b2:ae:0b:51:5f:b5:5a:f7:10:2f:
3a:36:c9:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:17:45 2026 by rpki-client