
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/46369a04-d9fc-4dd8-bc96-cf22af084843/99631ecb-201d-3ba2-b6c7-26f44ee29fb0.roa
File: 99631ecb-201d-3ba2-b6c7-26f44ee29fb0.roa (raw, json)
Hash identifier: A11iq/B9k+k7obdPb5RbRBM699b6BgQtPIlhob+67OI=
Subject key identifier: D4:BE:D6:36:36:BB:C1:34:23:73:A2:F4:0A:9C:13:64:3A:37:46:31
Certificate issuer: /CN=46369a04-d9fc-4dd8-bc96-cf22af084843
Certificate serial: 010D0C9F4328584CAE5E7F0C25A7A31386D65340
Authority key identifier: B9:68:B7:2D:27:25:1F:8B:2F:08:14:1E:50:FE:82:74:A6:BB:C0:0D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/46369a04-d9fc-4dd8-bc96-cf22af084843.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/46369a04-d9fc-4dd8-bc96-cf22af084843/99631ecb-201d-3ba2-b6c7-26f44ee29fb0.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 400550
IP address blocks: 23.133.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/46369a04-d9fc-4dd8-bc96-cf22af084843/46369a04-d9fc-4dd8-bc96-cf22af084843.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/46369a04-d9fc-4dd8-bc96-cf22af084843/46369a04-d9fc-4dd8-bc96-cf22af084843.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/46369a04-d9fc-4dd8-bc96-cf22af084843.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 07:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:5e:7f:0c:25:a7:a3:13:86:d6:53:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46369a04-d9fc-4dd8-bc96-cf22af084843
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=1e3ce876-1dfd-4398-b00a-2e2db14bde9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:b4:b5:60:4d:de:cd:47:cd:b8:99:d4:1a:a7:
b6:91:18:95:f5:7c:9d:d4:43:83:39:3b:7d:8f:32:
71:83:1b:42:0b:fd:05:5a:b7:82:e4:62:ea:95:73:
10:5c:73:ab:a7:01:ff:b5:ef:e1:cc:76:e1:09:1e:
ae:11:29:58:45:05:f6:c1:42:56:7e:38:a0:b0:45:
eb:17:58:43:dc:b6:28:95:5f:99:3f:d8:8c:3b:8e:
52:e1:c3:c6:23:40:82:9c:4b:be:f8:fd:d1:a6:ea:
01:74:33:ec:54:c5:cb:46:f8:7e:6a:c7:1c:c4:aa:
63:b1:9b:49:66:7a:0e:d5:99:53:52:4f:e7:d9:72:
55:04:bd:f6:b5:02:5e:72:62:41:1f:7b:83:68:0a:
c5:19:5a:e4:6e:ad:05:2d:06:fd:f2:66:fe:a3:7c:
7a:6a:bd:93:f4:1f:9d:ab:de:fc:a8:53:ad:d2:26:
e1:eb:da:91:b6:0b:12:b2:c2:b0:83:ad:2f:1d:50:
19:a6:fc:47:5b:e1:5d:16:cb:1a:fd:9f:bd:f0:9a:
65:38:c5:0b:35:61:31:6a:c8:e6:55:ed:4f:b6:0a:
bf:c9:da:22:46:85:87:3e:25:3c:13:5a:f1:1b:0b:
0f:e8:be:0a:96:cd:29:8d:49:aa:10:67:97:49:64:
1e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:BE:D6:36:36:BB:C1:34:23:73:A2:F4:0A:9C:13:64:3A:37:46:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/46369a04-d9fc-4dd8-bc96-cf22af084843/99631ecb-201d-3ba2-b6c7-26f44ee29fb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/46369a04-d9fc-4dd8-bc96-cf22af084843/46369a04-d9fc-4dd8-bc96-cf22af084843.crl
X509v3 Authority Key Identifier:
keyid:B9:68:B7:2D:27:25:1F:8B:2F:08:14:1E:50:FE:82:74:A6:BB:C0:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/46369a04-d9fc-4dd8-bc96-cf22af084843.cer
sbgp-ipAddrBlock: critical
IPv4:
23.133.232.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:1a:88:f1:e9:c1:58:e4:6d:ce:a3:ea:88:7a:02:2a:2b:a5:
27:b1:d5:65:8c:c4:e8:60:2c:44:a6:ef:8f:9d:9f:29:e6:da:
39:39:4b:c8:35:e7:04:42:24:7d:09:2d:60:1e:11:f7:23:0c:
c6:aa:37:a8:9e:ac:a8:c9:36:dc:70:84:21:1f:e0:e9:5a:3e:
4d:10:d8:f6:3c:a2:c7:f3:f1:d9:c9:b1:19:92:59:30:5c:34:
c5:6a:8a:38:bd:6b:62:b0:9a:5e:27:5b:03:6b:32:2a:f4:fb:
7b:47:94:9d:a9:99:89:0a:94:ed:d1:37:fb:96:f6:8e:30:7a:
7b:a7:f1:b6:41:a7:85:c7:fe:43:24:cb:10:41:c4:ff:0f:51:
fe:66:ba:b9:f7:ca:4c:ef:76:c0:64:90:d4:be:95:83:8a:70:
9a:db:0c:92:e9:9e:6d:eb:a7:a9:b4:a1:00:c5:51:44:57:db:
a9:a6:e6:e6:a8:31:f8:5c:b4:ca:1a:7d:d6:a3:9b:0f:8d:e6:
b5:c0:55:21:f6:53:19:82:5b:02:7d:6f:2b:6e:04:8b:ae:c4:
28:ff:73:0c:78:74:ac:0f:e5:da:90:36:7b:4b:41:d9:2c:34:
1c:cc:6c:14:cc:1a:b7:5c:3b:7d:6e:45:c6:da:06:0d:e8:58:
bd:24:9d:37
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXn8MJaejE4bWU0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDYzNjlhMDQtZDlmYy00ZGQ4LWJjOTYtY2YyMmFmMDg0
ODQzMB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk
MWUzY2U4NzYtMWRmZC00Mzk4LWIwMGEtMmUyZGIxNGJkZTllMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibS1YE3ezUfNuJnUGqe2kRiV9Xyd1EODOTt9
jzJxgxtCC/0FWreC5GLqlXMQXHOrpwH/te/hzHbhCR6uESlYRQX2wUJWfjigsEXr
F1hD3LYolV+ZP9iMO45S4cPGI0CCnEu++P3RpuoBdDPsVMXLRvh+asccxKpjsZtJ
ZnoO1ZlTUk/n2XJVBL32tQJecmJBH3uDaArFGVrkbq0FLQb98mb+o3x6ar2T9B+d
q978qFOt0ibh69qRtgsSssKwg60vHVAZpvxHW+FdFssa/Z+98JplOMULNWExasjm
Ve1Ptgq/ydoiRoWHPiU8E1rxGwsP6L4Kls0pjUmqEGeXSWQe4QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNS+1jY2u8E0I3Oi9AqcE2Q6N0YxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80NjM2
OWEwNC1kOWZjLTRkZDgtYmM5Ni1jZjIyYWYwODQ4NDMvOTk2MzFlY2ItMjAxZC0z
YmEyLWI2YzctMjZmNDRlZTI5ZmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDYzNjlhMDQtZDlmYy00ZGQ4LWJj
OTYtY2YyMmFmMDg0ODQzLzQ2MzY5YTA0LWQ5ZmMtNGRkOC1iYzk2LWNmMjJhZjA4
NDg0My5jcmwwHwYDVR0jBBgwFoAUuWi3LSclH4svCBQeUP6CdKa7wA0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80NjM2OWEwNC1kOWZjLTRkZDgtYmM5Ni1jZjIy
YWYwODQ4NDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4XoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE8aiPHpwVjkbc6j6oh6AiorpSex1WWMxOhgLESm74+dnynm2jk5S8g1
5wRCJH0JLWAeEfcjDMaqN6ierKjJNtxwhCEf4OlaPk0Q2PY8osfz8dnJsRmSWTBc
NMVqiji9a2Kwml4nWwNrMir0+3tHlJ2pmYkKlO3RN/uW9o4wenun8bZBp4XH/kMk
yxBBxP8PUf5murn3ykzvdsBkkNS+lYOKcJrbDJLpnm3rp6m0oQDFUURX26mm5uao
MfhctMoafdajmw+N5rXAVSH2UxmCWwJ9bytuBIuuxCj/cwx4dKwP5dqQNntLQdks
NBzMbBTMGrdcO31uRcbaBg3oWL0knTc=
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:35:00 2026 by rpki-client