
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/b39012f7-aaa6-3628-9b5d-f97656f37128.roa
File: b39012f7-aaa6-3628-9b5d-f97656f37128.roa (raw, json)
Hash identifier: sDHBzKNoYk8wFqXlPYz5VArF0SzxWVyQauaPpT+IrfU=
Subject key identifier: EA:26:B8:EE:93:99:16:26:96:C9:59:CF:A4:C5:BD:24:39:DE:60:CE
Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial: 010D0C9F4328584D5B4FA98DAB027AD094333C00
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/b39012f7-aaa6-3628-9b5d-f97656f37128.roa
Signing time: Wed 01 Apr 2026 01:00:23 +0000
ROA not before: Wed 01 Apr 2026 01:00:23 +0000
ROA not after: Tue 30 Jun 2026 01:00:23 +0000
asID: 22616
IP address blocks: 170.85.238.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:5b:4f:a9:8d:ab:02:7a:d0:94:33:3c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Validity
Not Before: Apr 1 01:00:23 2026 GMT
Not After : Jun 30 01:00:23 2026 GMT
Subject: CN=ee762c80-a90a-4792-9667-5d86c4e29b7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2d:39:2c:0e:fa:0e:f6:cb:11:70:45:ff:ab:
00:ce:53:de:26:4a:92:71:47:37:be:d9:1f:97:37:
40:af:26:f6:4e:f5:5a:b5:a4:d9:ea:4b:7b:b7:87:
b0:15:a4:0e:66:8c:5f:a0:f9:b4:3f:60:fe:49:54:
79:83:fb:69:c0:8f:25:2c:83:97:68:9e:67:29:ef:
d8:4d:e2:d9:96:77:3f:90:0d:34:3d:09:bc:db:55:
63:ec:c4:d8:63:c1:78:0b:28:8f:fd:23:fb:7b:9d:
79:84:7e:80:2c:4e:35:fc:96:d4:91:e9:d4:97:b9:
c7:07:cb:8c:49:c2:02:82:da:e8:f0:18:96:43:b2:
28:5b:6f:49:ee:c5:90:60:c6:ca:dd:8b:fe:9d:ef:
7a:f4:02:71:f1:2b:b4:cd:5b:cb:06:87:ad:f3:b1:
2a:af:0d:ef:a1:c4:15:8c:dc:3e:5e:75:ec:be:05:
c2:4f:e6:2f:a8:33:29:c8:14:80:5c:43:75:01:03:
ef:93:7c:6d:59:f7:ac:d1:15:4f:6a:0e:20:fd:aa:
39:21:fa:cb:e6:f8:ca:71:88:22:17:9e:a0:e9:32:
a9:5b:6f:5f:ec:70:98:91:af:c6:d5:a5:a4:49:39:
a7:86:0e:ff:75:d0:f4:f5:49:81:a5:ad:59:70:ff:
b6:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:26:B8:EE:93:99:16:26:96:C9:59:CF:A4:C5:BD:24:39:DE:60:CE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/b39012f7-aaa6-3628-9b5d-f97656f37128.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
X509v3 Authority Key Identifier:
keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
sbgp-ipAddrBlock: critical
IPv4:
170.85.238.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b7:14:69:10:f8:34:c5:88:bf:9d:26:22:ad:32:d0:22:2a:37:
55:b1:52:96:5a:22:95:e4:60:9a:02:60:4e:47:ca:44:24:a1:
3b:2d:0a:34:32:84:f4:be:69:f6:92:19:d5:e0:3e:64:ad:59:
b7:ee:fb:60:19:24:ab:da:48:7e:4c:e1:e9:cc:48:6f:9b:5d:
b6:f6:51:0d:44:3c:2f:a8:f4:6d:cc:0c:f2:5d:5f:3d:9b:2d:
c6:be:57:b4:c3:f4:ef:14:3c:fe:f6:06:49:3b:ca:fd:0d:67:
0a:92:3f:a0:ef:5e:c5:09:8c:4e:bd:ee:bf:1c:05:43:86:73:
49:2d:ba:de:77:bd:39:bd:f7:1d:b5:56:4b:ab:9b:f2:f3:4a:
e5:97:50:3f:65:d9:7b:76:b7:b9:07:8d:45:c4:ec:cd:80:c6:
61:9d:70:6a:2b:0e:14:72:4c:44:5e:02:7f:59:28:b4:39:9e:
c3:9b:6a:ac:ef:2c:2a:7e:28:01:c8:08:16:cc:32:c9:2f:47:
89:55:56:ea:f6:dd:6a:3e:31:b3:a6:bd:0a:a0:78:64:80:7b:
5e:58:5c:48:98:f8:3e:52:7a:d5:30:5b:16:24:f9:b1:f4:f3:
b7:ae:44:4b:ce:22:6d:22:0b:05:9d:a7:3c:6e:82:e9:47:7d:
14:a3:0f:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:16:03 2026 by rpki-client