
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/97b391e0-db17-3281-ab21-297fbaa55847.roa
File: 97b391e0-db17-3281-ab21-297fbaa55847.roa (raw, json)
Hash identifier: h74oMEAO2jj+nM+FJwWZA7EDDgeVy3DqWCylbrVhK4A=
Subject key identifier: 86:9F:82:35:AB:8D:16:95:78:E3:DA:A1:4B:42:49:3E:6D:72:8E:1A
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F4328584CA5F706066F07420BE83049C0
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/97b391e0-db17-3281-ab21-297fbaa55847.roa
Signing time: Mon 26 Jan 2026 02:00:32 +0000
ROA not before: Mon 26 Jan 2026 02:00:32 +0000
ROA not after: Sun 26 Apr 2026 01:00:32 +0000
asID: 401008
IP address blocks: 140.174.38.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:a5:f7:06:06:6f:07:42:0b:e8:30:49:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: Jan 26 02:00:32 2026 GMT
Not After : Apr 26 01:00:32 2026 GMT
Subject: CN=50d9ca55-4342-4f39-87bb-30b05591f530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ed:eb:a6:64:0e:7a:2c:8f:4a:f1:e6:c5:76:
f4:6a:5b:57:b1:55:79:98:17:8c:53:69:c0:98:8b:
67:57:0e:e7:d3:81:3c:83:7d:96:b2:6a:88:89:69:
6f:9f:ec:57:79:b5:f6:f9:92:28:09:de:79:a0:3e:
6d:10:d2:33:00:57:73:a0:6d:a3:fa:32:c2:ba:e3:
ff:53:d8:d8:fd:90:a2:d6:92:5f:c9:b9:50:a0:e4:
b5:a5:fe:d1:cb:ce:81:d5:88:40:3b:90:59:aa:e4:
0d:4f:73:f7:7e:db:82:be:ce:d8:94:fe:c5:c4:48:
14:c6:8c:ac:da:4c:d3:4f:4f:60:73:e9:84:d3:5a:
3d:65:fe:24:57:af:59:a0:43:48:48:de:b0:46:ad:
69:5f:3f:e9:9c:3a:85:a9:86:be:7b:b8:a6:fb:91:
ec:4b:4b:69:df:85:23:17:39:9e:e6:35:54:38:0a:
df:b9:7a:ae:47:c9:fa:16:0d:1d:69:95:06:51:06:
10:e3:e6:24:29:d2:87:9b:5c:ca:de:3d:05:1e:22:
30:90:2b:7c:3c:c1:77:e8:7e:a9:ed:39:36:b7:6e:
2a:46:cd:35:dd:82:9c:f7:3c:a9:44:65:82:7f:55:
69:b3:26:b6:fd:de:48:9d:77:54:c7:66:18:cc:78:
a7:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:9F:82:35:AB:8D:16:95:78:E3:DA:A1:4B:42:49:3E:6D:72:8E:1A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/97b391e0-db17-3281-ab21-297fbaa55847.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv4:
140.174.38.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:1a:3b:e6:23:d9:91:83:33:39:7a:7e:7c:5e:6a:bb:7a:f2:
ab:4a:27:70:f0:f4:a3:ae:22:b5:9c:ec:b2:de:75:a7:05:72:
2e:22:5c:2d:76:8d:37:aa:08:88:8f:02:6a:60:b8:1d:9e:9e:
98:83:00:1f:2f:19:56:f1:0a:ba:7c:0a:b8:05:c5:19:40:81:
14:00:4d:e5:6f:a4:77:18:cd:d6:3f:69:1e:7f:d8:81:5e:3c:
61:64:b5:e2:49:75:65:fc:ef:da:0f:34:54:27:71:49:b4:3e:
c7:c0:9a:68:ee:86:84:5b:ea:03:b7:bc:7b:60:9e:2e:6d:a5:
8d:82:e1:33:1c:25:5a:97:43:c7:a7:d1:b4:3a:a3:70:f7:cd:
ee:35:5f:d3:6b:3e:02:b8:41:b6:a0:46:03:ad:24:e7:76:7a:
50:7b:4a:35:c9:7c:f5:07:ae:a3:ea:28:9e:57:e4:ab:9d:25:
ed:73:21:4d:90:8f:d8:5b:f6:47:34:0c:77:62:02:52:cb:8f:
22:ba:89:be:76:02:4f:d7:c0:5e:3c:b1:bf:3d:cd:10:0a:e0:
11:c2:61:29:70:ff:7e:dc:a2:90:a6:ab:88:ec:19:00:a4:ec:
90:4e:2d:ac:55:25:8a:6b:22:cc:c7:40:c5:21:32:e2:60:b9:
97:8e:62:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:24:03 2026 by rpki-client