
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/4e87abc2-70e9-3d43-b866-1496a6621e10.roa
File: 4e87abc2-70e9-3d43-b866-1496a6621e10.roa (raw, json)
Hash identifier: nElRteoeen+SLmrUpkacLytJVQOpJ83igAfjprIvNNE=
Subject key identifier: 24:E3:F1:C2:F5:66:C0:95:C1:E8:A2:D7:51:60:CC:A0:D5:56:4A:28
Certificate issuer: /CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa
Certificate serial: 010D0C9F4328584D6AAA844F562808C3124410CC
Authority key identifier: 91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/4e87abc2-70e9-3d43-b866-1496a6621e10.roa
Signing time: Mon 06 Apr 2026 13:00:30 +0000
ROA not before: Mon 06 Apr 2026 13:00:30 +0000
ROA not after: Sun 05 Jul 2026 13:00:30 +0000
asID: 62651
IP address blocks: 173.245.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:6a:aa:84:4f:56:28:08:c3:12:44:10:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d2d1b98-5122-4d03-86f5-0dc8d63238aa
Validity
Not Before: Apr 6 13:00:30 2026 GMT
Not After : Jul 5 13:00:30 2026 GMT
Subject: CN=755001f2-af0e-4f03-a862-0ceb6f9898d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:86:86:b7:cd:26:f6:f7:1b:16:ba:03:10:59:
26:23:34:a4:1b:7c:e0:e1:f6:ec:23:57:b5:35:b0:
e2:35:26:53:0c:45:b9:7a:10:a4:d2:8c:80:a4:fc:
70:57:be:25:2a:45:3f:a3:e7:2d:d3:a2:f0:23:32:
20:d7:53:b3:c5:cd:47:e3:97:3a:c6:79:03:d6:85:
d1:ed:86:b5:a3:aa:4f:8f:e8:7e:b5:ac:2f:d6:23:
1d:67:9e:92:05:60:5c:f6:b5:f3:0c:fb:da:97:79:
76:4f:53:32:88:ba:80:a6:81:ef:fd:17:03:dc:2d:
36:d3:1b:49:83:00:d2:23:9c:ba:6e:9e:3b:24:0d:
bc:b8:78:ff:da:ce:fa:6e:3d:a7:af:1d:7e:d5:46:
9f:63:27:f1:db:11:df:fc:72:be:82:e9:2a:ff:7e:
55:25:bd:fa:3f:e2:42:e8:78:a3:6f:2e:19:f3:e2:
51:a9:ee:6a:70:e6:bb:b1:64:4e:d4:c7:bd:27:52:
26:57:58:52:0f:e7:47:b7:ef:46:ac:7f:59:5d:a0:
f7:02:09:ff:cd:73:d9:d7:0c:83:cb:f9:35:76:d3:
ee:87:a0:30:dd:16:54:2d:90:e2:07:70:d2:fe:b5:
7e:e3:37:9a:39:e6:17:48:79:0d:0e:7d:04:bd:e1:
49:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:E3:F1:C2:F5:66:C0:95:C1:E8:A2:D7:51:60:CC:A0:D5:56:4A:28
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/4e87abc2-70e9-3d43-b866-1496a6621e10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.crl
X509v3 Authority Key Identifier:
keyid:91:2E:D3:59:A9:EA:F5:77:DC:35:D8:0A:63:A4:FF:C2:AD:CE:68:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1d2d1b98-5122-4d03-86f5-0dc8d63238aa.cer
sbgp-ipAddrBlock: critical
IPv4:
173.245.202.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:de:30:28:22:b9:18:0f:25:68:18:38:59:5a:5b:dc:46:f8:
1f:dc:55:20:15:8f:5a:4d:6d:97:d2:e6:e5:eb:d9:36:bc:06:
1e:e7:49:f1:f4:94:82:c2:6d:e8:32:30:86:3a:68:96:7c:e2:
8f:02:9f:b7:c8:b2:40:10:5e:3a:e1:00:74:71:fc:ab:b9:d3:
ef:24:7d:cd:37:ff:2a:19:cf:56:6d:e3:6a:b1:0c:ea:04:64:
ec:00:32:33:99:f9:bf:ff:5f:23:be:45:95:63:e8:b8:3f:1e:
7b:31:0d:97:ad:30:ce:48:dd:94:b5:ff:2d:ba:64:80:7c:9a:
15:1f:d8:00:e5:c7:61:ee:bf:85:d5:c3:a0:34:d4:2a:38:75:
87:ae:43:c7:4a:07:4a:28:7f:57:27:50:b3:39:d3:27:6a:59:
1d:8b:a7:56:c1:43:20:fb:27:43:4a:19:ab:5b:89:77:37:04:
a9:02:07:55:76:2f:86:9c:7d:a3:40:0d:ac:ff:35:8f:ec:88:
b8:38:f4:91:42:54:33:7b:3e:0d:b9:73:2b:33:1e:c7:33:3d:
29:db:7d:45:77:51:61:4e:03:a9:a1:42:57:9d:75:44:90:4c:
2c:43:e0:3a:db:b3:f2:e0:bf:ca:37:04:ff:41:bd:64:dd:9c:
a0:35:a6:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:05:35 2026 by rpki-client