
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/32351351-902c-3dc7-872b-e3135c1b3591.roa
File: 32351351-902c-3dc7-872b-e3135c1b3591.roa (raw, json)
Hash identifier: I143mpxwVNUQeJYGi0efvufijM7o03aO2RPTQRRLn+8=
Subject key identifier: 57:8E:6E:AE:61:29:B9:FE:62:93:31:6C:BF:BB:44:5A:D7:D4:EE:E8
Certificate issuer: /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial: 010D0C9F4328584CDF320B81BF43597D865A8CA0
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/32351351-902c-3dc7-872b-e3135c1b3591.roa
Signing time: Sun 15 Feb 2026 14:00:41 +0000
ROA not before: Sun 15 Feb 2026 14:00:41 +0000
ROA not after: Sat 16 May 2026 13:00:41 +0000
asID: 4637
IP address blocks: 173.244.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:df:32:0b:81:bf:43:59:7d:86:5a:8c:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Validity
Not Before: Feb 15 14:00:41 2026 GMT
Not After : May 16 13:00:41 2026 GMT
Subject: CN=202bf1d0-f423-4fe5-bf54-e57988a31e5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:70:f5:4d:e7:e5:eb:c4:70:c0:96:38:32:b5:
91:11:b4:f1:6f:8c:7e:f7:31:9e:6a:d5:03:55:1b:
e6:e8:06:4c:80:2d:25:3b:6e:1a:93:a1:b2:04:9b:
e0:44:c6:6c:92:85:4d:75:ac:89:eb:8d:c6:7a:bf:
e1:cd:6b:81:bf:38:2b:30:0a:3d:95:18:0d:33:df:
4f:8a:25:83:0b:aa:11:04:03:00:5a:79:a8:9b:ec:
f0:ce:c4:0c:9b:05:8a:6f:bf:75:b4:47:9c:b8:ec:
36:16:b4:60:0f:b8:87:51:cb:73:0f:9d:b2:54:92:
a2:5e:b5:d9:89:d8:cd:5c:75:ec:fb:eb:c3:1f:e1:
bd:4b:4b:3c:3a:01:7d:af:24:af:31:de:8b:93:73:
3d:c4:20:c5:26:3e:3c:df:47:3c:8e:36:a4:17:cd:
34:ad:93:69:6c:d0:8c:f3:82:a9:cd:e6:c5:49:06:
61:78:42:ea:21:49:7d:14:5d:c9:27:9f:03:22:27:
c3:9e:1e:1a:2f:2f:71:7d:11:43:81:9d:b6:60:d6:
06:8c:75:8f:55:dc:bc:49:a8:33:2b:74:88:ef:54:
91:f8:47:3b:f7:d5:0b:4b:82:ee:54:6c:86:5d:3c:
be:a6:f1:6a:0c:9e:50:66:92:4b:c1:9b:8a:bf:54:
a6:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:8E:6E:AE:61:29:B9:FE:62:93:31:6C:BF:BB:44:5A:D7:D4:EE:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/32351351-902c-3dc7-872b-e3135c1b3591.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
X509v3 Authority Key Identifier:
keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
sbgp-ipAddrBlock: critical
IPv4:
173.244.40.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:d6:db:9b:01:e4:c0:65:eb:9b:ce:4e:6d:1e:56:17:4d:9a:
da:86:ec:e2:1a:c9:28:3b:7e:c1:3b:d2:d1:c0:fa:5d:bc:f3:
83:24:8f:4a:b9:59:8a:73:8b:40:e1:14:76:8a:9e:46:09:dd:
1c:54:26:17:39:5a:f4:01:d0:9d:12:8e:28:e7:84:de:c2:1f:
2e:be:d9:fc:83:28:37:e8:1d:a6:c9:4c:ac:f5:30:22:b7:13:
b3:47:37:39:9a:0f:f2:a2:1a:0e:6a:28:4a:8a:76:20:11:74:
03:e3:f3:01:f0:64:f7:7c:a4:85:46:5a:6e:37:b4:78:9d:2a:
e6:bd:4e:b4:52:34:df:64:75:4a:7d:4f:6f:4e:7b:14:5a:e1:
4c:2c:90:44:44:25:00:f3:67:b3:e3:00:4a:6c:ed:dd:5c:d0:
6d:c1:14:7a:88:81:75:48:7f:a7:79:00:9f:f7:b9:f3:94:d9:
85:10:26:5e:6b:10:0d:8c:84:ad:df:30:cb:b3:d3:9f:17:73:
41:75:ef:77:c9:92:d7:11:91:2b:d7:42:5b:a6:0d:d3:c6:81:
51:d7:46:b9:23:d7:fb:ee:8e:36:af:df:dd:c2:c9:d7:ec:03:
d7:68:8e:ef:f4:12:2e:c8:6d:d5:9e:91:d4:0b:a0:fe:04:6d:
25:91:b5:9e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzfMguBv0NZfYZajKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWI3MWU4M2QtMjgyOC00ZjM0LWJhM2UtNjQ4ZDAxZWYx
NzNhMB4XDTI2MDIxNTE0MDA0MVoXDTI2MDUxNjEzMDA0MVowLzEtMCsGA1UEAxMk
MjAyYmYxZDAtZjQyMy00ZmU1LWJmNTQtZTU3OTg4YTMxZTVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHD1Tefl68RwwJY4MrWREbTxb4x+9zGeatUD
VRvm6AZMgC0lO24ak6GyBJvgRMZskoVNdayJ643Ger/hzWuBvzgrMAo9lRgNM99P
iiWDC6oRBAMAWnmom+zwzsQMmwWKb791tEecuOw2FrRgD7iHUctzD52yVJKiXrXZ
idjNXHXs++vDH+G9S0s8OgF9rySvMd6Lk3M9xCDFJj4830c8jjakF800rZNpbNCM
84KpzebFSQZheELqIUl9FF3JJ58DIifDnh4aLy9xfRFDgZ22YNYGjHWPVdy8Sagz
K3SI71SR+Ec799ULS4LuVGyGXTy+pvFqDJ5QZpJLwZuKv1SmmQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFeObq5hKbn+YpMxbL+7RFrX1O7oMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81Yjcx
ZTgzZC0yODI4LTRmMzQtYmEzZS02NDhkMDFlZjE3M2EvMzIzNTEzNTEtOTAyYy0z
ZGM3LTg3MmItZTMxMzVjMWIzNTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWI3MWU4M2QtMjgyOC00ZjM0LWJh
M2UtNjQ4ZDAxZWYxNzNhLzViNzFlODNkLTI4MjgtNGYzNC1iYTNlLTY0OGQwMWVm
MTczYS5jcmwwHwYDVR0jBBgwFoAUCrKywYEk2VOJsQx6TCDGKHhTv54wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi81YjcxZTgzZC0yODI4LTRmMzQtYmEzZS02NDhk
MDFlZjE3M2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArfQoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGfW25sB5MBl65vOTm0eVhdNmtqG7OIaySg7fsE70tHA+l2884Mkj0q5
WYpzi0DhFHaKnkYJ3RxUJhc5WvQB0J0SjijnhN7CHy6+2fyDKDfoHabJTKz1MCK3
E7NHNzmaD/KiGg5qKEqKdiARdAPj8wHwZPd8pIVGWm43tHidKua9TrRSNN9kdUp9
T29OexRa4UwskEREJQDzZ7PjAEps7d1c0G3BFHqIgXVIf6d5AJ/3ufOU2YUQJl5r
EA2MhK3fMMuz058Xc0F173fJktcRkSvXQlumDdPGgVHXRrkj1/vujjav393Cydfs
A9doju/0Ei7IbdWekdQLoP4EbSWRtZ4=
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:51:31 2026 by rpki-client