
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/cd8ca1c3-476e-30e3-8ddf-9863dab53845.roa
File: cd8ca1c3-476e-30e3-8ddf-9863dab53845.roa (raw, json)
Hash identifier: Si+t76kr0kRhOCuwXL7FH7fIOIgNuSJxBUsc/6fvDXk=
Subject key identifier: D8:03:BD:39:12:F5:31:84:B5:F7:57:57:A1:E1:2F:D6:FB:C0:D6:C6
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F4328584D7F9A8C2949F7A4D2A04433A0
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/cd8ca1c3-476e-30e3-8ddf-9863dab53845.roa
Signing time: Tue 14 Apr 2026 01:00:24 +0000
ROA not before: Tue 14 Apr 2026 01:00:24 +0000
ROA not after: Mon 13 Jul 2026 01:00:24 +0000
asID: 20940
IP address blocks: 198.173.160.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:7f:9a:8c:29:49:f7:a4:d2:a0:44:33:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: Apr 14 01:00:24 2026 GMT
Not After : Jul 13 01:00:24 2026 GMT
Subject: CN=baa50433-d759-4e63-8a91-23c8613d36a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3d:bc:95:ea:c4:43:46:a1:25:dc:77:22:ea:
34:d4:7d:f7:52:af:08:75:5f:66:50:80:6a:e5:dd:
6b:9d:94:32:91:8a:ec:94:0e:d8:54:7a:88:5f:1c:
be:1b:b0:92:ce:39:d5:4f:67:88:82:dd:a3:b4:f2:
45:cf:c6:f4:3f:e1:7d:60:18:70:3b:a2:a8:6c:d8:
2f:ca:ea:bd:60:9f:90:fc:94:9e:a9:3f:22:24:e0:
bc:5d:03:85:90:9b:3e:02:33:2f:e0:82:ba:4b:a0:
2f:79:d8:fc:54:20:22:47:6b:82:96:cb:99:d9:08:
b8:64:73:4d:e9:02:63:e0:63:aa:4f:df:f7:59:5a:
b2:1d:63:9d:19:f4:d8:08:69:9b:71:77:1d:49:39:
3f:91:67:c1:ec:b8:a2:ea:fb:2b:75:56:aa:17:c8:
fc:38:52:87:c2:42:5f:22:45:5a:92:48:05:1a:25:
11:6e:ea:0d:71:b5:bf:65:61:00:37:0e:2a:69:cc:
b7:63:e6:ba:48:d3:86:bc:35:c4:90:02:85:f0:ff:
cd:1f:30:ed:a8:69:07:20:ec:ee:8a:1d:64:ca:54:
1b:5c:ac:a4:05:a0:7c:83:69:40:d9:2c:6e:ed:3f:
7a:27:5e:fd:68:af:a9:db:0a:83:00:1f:3d:e2:b5:
c4:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:03:BD:39:12:F5:31:84:B5:F7:57:57:A1:E1:2F:D6:FB:C0:D6:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/cd8ca1c3-476e-30e3-8ddf-9863dab53845.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv4:
198.173.160.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:80:98:86:11:3f:c2:13:ca:45:26:15:f3:50:84:f6:b0:fe:
39:91:48:ce:28:0a:f4:f3:be:4a:bc:e2:07:c4:78:c2:52:fa:
c9:58:fe:43:09:c7:f5:fb:dc:d5:27:a4:db:83:97:03:6a:4c:
c0:aa:d5:c2:75:0d:30:a4:e2:59:4d:c2:dc:ed:67:87:47:ea:
be:15:89:78:b5:45:8e:d2:59:bb:52:1d:9d:e5:66:9f:45:05:
69:f4:d3:69:00:25:70:6a:38:1a:70:26:09:29:1f:a3:e5:4c:
42:5f:f4:eb:6a:2c:b0:bf:74:e6:60:13:ca:2b:a9:5c:90:bb:
63:3b:1f:b9:47:b1:1d:02:ca:1a:98:33:a9:e4:33:1c:0b:16:
5f:e3:62:d8:92:16:3a:30:a2:eb:7d:98:1c:ca:f1:a9:eb:92:
1c:2f:b0:ac:a3:95:76:d7:b5:62:ac:6a:13:0c:ab:1b:64:e5:
0f:45:20:dd:f1:3d:70:07:66:6b:af:1e:ac:16:a5:88:39:1a:
a5:fb:6d:a7:bd:88:1e:bc:71:24:86:e4:9f:11:da:31:5f:4c:
8c:78:b8:b1:fb:55:ac:6c:a9:ab:51:64:11:f7:be:19:2f:41:
99:d4:18:da:74:06:e3:90:b8:84:5c:df:cf:51:32:ce:b1:19:
c9:25:8c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:44:58 2026 by rpki-client