
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/25d4d3f9-c45e-384d-918e-749f43cd417f.roa
File: 25d4d3f9-c45e-384d-918e-749f43cd417f.roa (raw, json)
Hash identifier: vFxrXx7GHm7nw/in0iaASbOZdfPciYc82ps+ZNhhVgc=
Subject key identifier: 5D:E0:56:01:9B:6E:97:50:32:8E:30:D3:A2:86:48:C9:45:1B:AA:36
Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial: 010D0C9F4328584D63AF9D3C6AA4E70545AC13C0
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/25d4d3f9-c45e-384d-918e-749f43cd417f.roa
Signing time: Sat 04 Apr 2026 01:00:25 +0000
ROA not before: Sat 04 Apr 2026 01:00:25 +0000
ROA not after: Fri 03 Jul 2026 01:00:25 +0000
asID: 11427
IP address blocks: 173.239.241.0/24 maxlen: 24
173.239.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:63:af:9d:3c:6a:a4:e7:05:45:ac:13:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Validity
Not Before: Apr 4 01:00:25 2026 GMT
Not After : Jul 3 01:00:25 2026 GMT
Subject: CN=72058933-273d-43b1-ac34-e9b0828dfcc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:87:e7:10:c5:ff:d0:09:b4:3e:fa:ec:c3:83:
18:13:54:70:ba:c1:03:50:59:f4:2d:8b:1d:45:41:
f0:67:eb:3a:4a:ce:ca:2c:50:44:d5:37:5d:87:91:
a5:73:c7:9b:f4:14:cd:34:0f:fd:8f:2d:9a:01:28:
76:8b:52:b0:43:15:df:a6:66:a7:f3:19:87:35:29:
f0:7b:fb:2c:9e:23:a2:a6:60:5f:60:98:ab:50:dc:
8e:2a:c6:22:1e:26:80:bf:c2:81:f7:53:dd:95:d4:
92:11:8e:fb:d8:48:01:52:2a:d5:77:e5:fd:cb:7c:
25:1d:db:34:5a:0d:82:2f:80:04:3a:be:ce:0d:a9:
e3:45:0d:63:63:06:26:a3:69:60:dd:45:64:3f:ff:
88:6e:b0:4a:1b:9d:38:b1:9c:20:d7:bc:b0:49:82:
5e:08:f6:4a:27:0b:27:37:e7:f0:01:2c:ad:fc:ab:
ef:5f:84:41:cd:0a:4e:98:b1:0e:35:ef:4e:b7:cd:
e0:55:11:bd:c7:1b:2c:60:71:49:b0:e9:63:45:77:
19:c3:07:84:f1:91:cd:60:23:3a:07:d7:98:86:e5:
db:4a:c7:5f:be:9c:75:00:81:2a:c7:02:41:4c:7e:
b8:85:a0:df:b3:7b:af:54:05:f8:0e:cd:0d:c4:1e:
be:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:E0:56:01:9B:6E:97:50:32:8E:30:D3:A2:86:48:C9:45:1B:AA:36
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/25d4d3f9-c45e-384d-918e-749f43cd417f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
X509v3 Authority Key Identifier:
keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
sbgp-ipAddrBlock: critical
IPv4:
173.239.241.0/24
173.239.244.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:61:85:5c:cd:24:7e:df:e0:31:a6:81:b6:44:91:a4:95:22:
3c:6f:1b:83:6d:e3:08:f3:34:b1:5a:20:19:3f:8e:9a:0f:c9:
1f:43:ea:1d:2b:0d:39:b9:16:a5:15:d9:a2:02:47:91:36:24:
03:c9:c0:1b:a8:39:2a:12:13:ed:2f:d1:6d:a9:5a:2b:f2:dc:
64:14:ac:50:e0:d2:96:55:22:a2:27:93:07:5c:54:01:f9:da:
39:82:bd:e6:29:67:a4:d0:83:5c:1a:95:5e:3a:90:a8:16:70:
0e:4d:75:b4:cd:c0:4d:f1:b8:88:73:e7:ae:31:33:2c:79:6e:
ba:9d:ca:65:85:b3:b4:a0:5a:2e:cd:0a:e7:77:91:20:58:55:
ae:e0:ba:6b:3c:42:b9:49:c7:08:66:18:45:88:1a:18:60:ae:
e5:b1:0f:86:59:c0:bf:d6:a0:d7:95:65:38:3c:45:6f:46:c1:
65:9b:ce:db:60:65:77:f3:dd:c1:45:e7:e2:4d:ef:c9:c6:55:
a2:b7:f6:59:07:23:17:ce:a9:56:27:58:a2:87:42:6f:54:81:
99:30:60:a5:9d:d8:b5:b6:4a:75:01:47:e9:d9:7b:e7:1c:cd:
4f:8e:d0:56:49:60:84:a2:fc:8b:8e:e3:f1:15:07:62:35:2f:
a8:a9:8c:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:49:39 2026 by rpki-client