
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac4576d4-b383-4f58-8da4-316d12d38f36/1d22327a-573b-3949-b5c8-d7ea3bb1607c.roa
File: 1d22327a-573b-3949-b5c8-d7ea3bb1607c.roa (raw, json)
Hash identifier: F9wvRWKpGt9JMQq/q+bkJO13IhI5kddSlRU6ZSJoZfo=
Subject key identifier: DF:E8:C4:69:8C:47:D1:3E:27:9A:97:91:E3:71:BA:74:8C:85:41:9B
Certificate issuer: /CN=ac4576d4-b383-4f58-8da4-316d12d38f36
Certificate serial: 010D0C9F4328584D73461774DBCC075359A8AE00
Authority key identifier: 88:85:79:92:5C:D9:E3:38:2D:2A:D0:3D:DF:00:D2:66:92:C9:A7:EF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac4576d4-b383-4f58-8da4-316d12d38f36.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac4576d4-b383-4f58-8da4-316d12d38f36/1d22327a-573b-3949-b5c8-d7ea3bb1607c.roa
Signing time: Thu 09 Apr 2026 15:00:46 +0000
ROA not before: Thu 09 Apr 2026 15:00:46 +0000
ROA not after: Wed 08 Jul 2026 15:00:46 +0000
asID: 6079
IP address blocks: 170.124.0.0/19 maxlen: 24
170.124.32.0/19 maxlen: 24
170.124.64.0/19 maxlen: 24
170.124.96.0/19 maxlen: 24
170.124.128.0/19 maxlen: 24
170.124.160.0/19 maxlen: 24
170.124.192.0/19 maxlen: 24
170.124.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac4576d4-b383-4f58-8da4-316d12d38f36/ac4576d4-b383-4f58-8da4-316d12d38f36.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac4576d4-b383-4f58-8da4-316d12d38f36/ac4576d4-b383-4f58-8da4-316d12d38f36.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac4576d4-b383-4f58-8da4-316d12d38f36.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:73:46:17:74:db:cc:07:53:59:a8:ae:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac4576d4-b383-4f58-8da4-316d12d38f36
Validity
Not Before: Apr 9 15:00:46 2026 GMT
Not After : Jul 8 15:00:46 2026 GMT
Subject: CN=ba0fda0b-a10d-4552-818b-f66a518a0e7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a8:38:6c:c8:01:18:cd:fa:79:d1:9e:52:1a:
c2:f8:e8:b7:43:f7:5c:fe:03:9e:de:dc:f7:cf:40:
ac:33:9a:8a:23:bd:43:2e:4e:91:83:b5:bf:17:57:
d8:a4:bb:0b:06:54:71:f2:6a:09:b7:b0:10:13:2d:
9b:77:1e:5f:10:35:94:30:89:e5:a8:54:ca:53:36:
42:4e:39:f2:7a:9d:49:1f:11:b1:5c:8e:5c:ad:50:
92:4f:b6:80:0a:98:07:e2:f8:4a:33:08:4f:8b:96:
75:0a:df:2b:4e:17:d5:1b:ab:52:c3:d5:3f:0e:d5:
f7:d6:73:5d:af:9e:bf:a7:bb:93:3a:c8:0c:f0:82:
3c:a1:e9:1a:44:b6:78:56:ab:f0:d8:85:09:b0:ee:
5a:2f:5b:dd:ed:57:08:4b:67:51:12:ed:f1:a5:a5:
b5:94:83:ff:b4:98:5e:f7:c3:3d:ea:86:21:b1:05:
d1:74:f8:47:3a:51:7f:27:7b:26:de:03:53:ee:00:
89:57:9d:46:ad:89:84:56:5a:73:66:c4:f1:49:54:
32:35:fa:f1:90:4d:36:c7:5c:c1:ce:e3:ba:16:e8:
fd:8c:bc:2d:a0:9e:40:88:ea:73:6b:a5:6b:54:f0:
de:15:8b:de:72:12:92:f9:a2:38:48:61:11:01:c1:
b7:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:E8:C4:69:8C:47:D1:3E:27:9A:97:91:E3:71:BA:74:8C:85:41:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac4576d4-b383-4f58-8da4-316d12d38f36/1d22327a-573b-3949-b5c8-d7ea3bb1607c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac4576d4-b383-4f58-8da4-316d12d38f36/ac4576d4-b383-4f58-8da4-316d12d38f36.crl
X509v3 Authority Key Identifier:
keyid:88:85:79:92:5C:D9:E3:38:2D:2A:D0:3D:DF:00:D2:66:92:C9:A7:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ac4576d4-b383-4f58-8da4-316d12d38f36.cer
sbgp-ipAddrBlock: critical
IPv4:
170.124.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:c8:4f:42:9e:7f:73:10:8a:a4:5f:d0:0b:fa:70:97:b3:07:
22:41:17:b2:2c:be:f8:a7:1d:dc:6a:cc:1a:23:20:96:cc:7c:
84:62:0f:0c:63:ce:2b:1a:ce:0b:c0:11:18:59:6a:42:9f:64:
9b:ea:7d:8d:62:65:9e:96:d2:cb:fd:a5:71:9e:84:68:55:0b:
cd:36:86:ee:20:47:2b:1c:be:37:20:50:95:71:98:ff:a9:38:
6e:7d:85:e8:67:59:26:ab:33:76:28:23:d4:1d:8b:42:9c:01:
16:7b:6d:da:d7:8d:a4:ab:19:2c:9a:63:2a:30:9e:ac:b9:55:
74:a9:f2:b9:17:c9:1c:0e:4c:bc:4c:e2:88:b3:c9:79:8b:ce:
06:77:d5:8b:43:03:f7:2b:86:92:f7:62:39:96:ff:ad:ab:64:
ae:44:42:05:82:31:71:6a:63:c8:34:5f:70:6b:6d:7c:c1:03:
81:d6:db:c7:a5:c4:a6:77:61:32:a9:5c:50:fb:2f:03:dc:92:
38:60:46:51:20:be:a7:0f:fb:10:fc:c1:11:ac:ec:74:33:0b:
6e:02:82:9b:53:14:a8:19:4a:25:7c:80:76:af:fc:56:1d:2f:
9a:b4:e5:ac:32:f1:ee:f7:ff:36:0f:db:64:7e:e6:85:fc:5b:
6d:c3:72:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:26:02 2026 by rpki-client