
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0d50d7c4-3be3-34a1-8f2d-090de8055943.roa
File: 0d50d7c4-3be3-34a1-8f2d-090de8055943.roa (raw, json)
Hash identifier: dYqh/RtEE5UjhuFXVLdZZn+WulYe5gX0MeDBEhgPB4g=
Subject key identifier: 08:E7:C7:C1:D8:0F:2A:7F:73:5B:83:CB:B0:74:E2:42:B8:14:D0:30
Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial: 010D0C9F4328584D5B4F94CB773604237CF27F00
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0d50d7c4-3be3-34a1-8f2d-090de8055943.roa
Signing time: Wed 01 Apr 2026 01:00:23 +0000
ROA not before: Wed 01 Apr 2026 01:00:23 +0000
ROA not after: Tue 30 Jun 2026 01:00:23 +0000
asID: 62044
IP address blocks: 170.85.62.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:5b:4f:94:cb:77:36:04:23:7c:f2:7f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Validity
Not Before: Apr 1 01:00:23 2026 GMT
Not After : Jun 30 01:00:23 2026 GMT
Subject: CN=88857be6-b697-4981-ab15-0b9333a3c038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8a:f1:c7:83:ba:84:94:a7:3d:a6:38:49:25:
01:18:94:4b:95:6a:9f:dd:11:02:13:aa:59:26:2c:
e2:8c:17:2c:a8:c7:23:28:36:1f:7b:c6:74:71:30:
22:7c:3b:59:09:27:af:69:ef:60:2e:5f:4e:91:a0:
13:eb:36:53:95:ba:41:6a:7d:e9:3c:47:ff:2c:12:
76:05:13:ec:a0:2b:1c:8e:a9:a9:f6:64:a5:06:3c:
ca:ff:10:6f:45:99:71:3a:7e:21:af:af:7a:75:49:
3e:71:4c:ea:33:a8:69:6c:5d:f6:ad:fb:33:5c:5c:
bf:ee:56:8f:33:c3:1c:84:57:bd:11:77:e1:72:d2:
23:1b:f9:b5:91:9f:37:4c:2d:ac:3f:28:a9:61:75:
ee:8c:42:fa:17:f8:d6:09:37:7b:dd:0e:3a:73:58:
2d:68:ad:2f:70:02:2b:ee:81:96:0e:0b:36:03:a1:
35:40:6a:2c:3d:bf:4d:c2:9e:d4:1d:ef:d3:4a:73:
10:3c:a2:84:0b:20:25:0c:65:1a:dd:60:cb:fc:01:
33:74:27:99:78:5e:ab:5b:cd:bf:57:f0:1c:7e:df:
5e:8b:bc:05:88:92:40:7a:eb:dd:82:c8:f6:c2:ba:
e8:59:39:0b:b4:a9:c5:3d:fa:d9:99:ec:10:e9:9b:
3c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:E7:C7:C1:D8:0F:2A:7F:73:5B:83:CB:B0:74:E2:42:B8:14:D0:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0d50d7c4-3be3-34a1-8f2d-090de8055943.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
X509v3 Authority Key Identifier:
keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
sbgp-ipAddrBlock: critical
IPv4:
170.85.62.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:bc:af:ef:ec:44:21:07:be:d9:aa:16:ec:2e:73:ff:e3:0e:
a1:dc:4e:6e:62:1f:64:2d:22:b4:e0:00:31:b3:cc:0c:c5:78:
38:48:d0:17:96:b2:e5:92:74:5e:97:d7:a8:70:41:c3:d4:c4:
14:da:33:3f:b0:9f:5d:01:91:30:ea:61:40:55:88:7e:b7:85:
e0:9b:09:f5:7d:ee:61:41:c0:87:ff:36:c7:70:16:88:d2:f0:
49:f6:e4:1d:27:2a:1d:d4:a6:9f:84:ff:25:39:f1:13:67:8a:
23:be:c3:f5:91:c1:b9:77:fd:25:4b:6f:a1:ee:4b:be:a6:2f:
65:e5:b8:41:51:9b:48:0f:1f:9a:1d:5b:19:88:38:06:8a:7f:
56:f8:3a:ae:5e:9f:e8:f4:0b:21:ff:4d:15:07:ad:03:87:79:
2c:bf:c6:d6:d4:fd:d5:e1:c4:e7:f5:2f:d3:d2:b8:bb:0f:d2:
95:ad:fc:7e:3a:c4:93:59:00:67:58:7a:5b:c2:4d:74:83:d1:
5f:aa:b5:2e:c8:84:e1:d9:22:04:bf:e1:74:05:73:1a:7e:ae:
b4:a7:b9:f2:3e:e9:7f:3f:a5:f8:19:c6:b2:b2:7c:56:c5:e2:
dd:ce:19:ad:d1:ad:1d:aa:d5:34:c4:0f:17:e3:6f:58:6e:9f:
ea:b1:e3:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:33:16 2026 by rpki-client