
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4b7340fc-698a-4488-b211-325f4ded4152/ca88a54e-0b3e-3c48-a255-1c9a7efa98bb.roa
File: ca88a54e-0b3e-3c48-a255-1c9a7efa98bb.roa (raw, json)
Hash identifier: aSXVX/yQOD+AuuRz0Z1bgt8lVOHqUdGv2fOycF7N08Y=
Subject key identifier: 5A:80:6F:B1:B2:B6:07:56:0E:F8:23:E4:47:E1:63:F0:53:6A:F8:35
Certificate issuer: /CN=4b7340fc-698a-4488-b211-325f4ded4152
Certificate serial: 010D0C9F4328584CAE5E767D029D155DE252B800
Authority key identifier: 23:3D:5E:57:55:04:17:3A:3B:29:FB:12:AF:F5:98:0C:ED:D6:77:A2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4b7340fc-698a-4488-b211-325f4ded4152.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4b7340fc-698a-4488-b211-325f4ded4152/ca88a54e-0b3e-3c48-a255-1c9a7efa98bb.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 9009
IP address blocks: 162.252.172.0/24 maxlen: 24
162.252.173.0/24 maxlen: 24
162.252.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4b7340fc-698a-4488-b211-325f4ded4152/4b7340fc-698a-4488-b211-325f4ded4152.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4b7340fc-698a-4488-b211-325f4ded4152/4b7340fc-698a-4488-b211-325f4ded4152.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4b7340fc-698a-4488-b211-325f4ded4152.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:5e:76:7d:02:9d:15:5d:e2:52:b8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b7340fc-698a-4488-b211-325f4ded4152
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=4d02f10b-ecad-4abf-bf25-c39d56436914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3c:d3:1e:47:ad:89:08:fd:22:6f:93:d3:c4:
e6:6b:12:e0:f7:92:6f:72:2f:ed:1f:29:35:a4:72:
52:4c:95:b1:04:ee:c5:b7:4d:68:25:b5:7e:6b:23:
32:97:63:23:3f:b8:40:d5:28:52:e3:76:0f:23:a7:
21:8f:84:11:9c:69:d0:cf:f1:21:63:6a:ff:7b:72:
7e:d7:af:d4:a2:3a:df:fc:69:76:2a:e9:66:60:02:
84:31:9f:6e:9e:19:86:92:d8:ab:1f:4a:fa:c0:65:
a0:d4:d1:4e:ba:02:dc:b8:68:8a:b8:3c:40:5a:bd:
54:15:ca:69:de:f6:77:89:f0:f5:cf:5b:71:db:55:
3c:e6:58:08:35:0b:dd:34:1a:49:6c:ac:aa:63:dc:
c4:bc:77:9e:2b:a0:b6:4b:dc:07:fa:1f:f2:61:0f:
ac:fc:59:be:8e:40:27:18:43:4c:86:28:24:a6:a1:
e4:cf:9b:e2:bd:ed:54:d5:8f:83:7b:e1:30:78:fd:
fa:7a:2f:26:30:26:c6:43:00:d7:c0:27:b8:f6:2e:
c0:6a:7c:80:b1:2b:4f:50:99:01:00:03:2c:fb:dd:
1a:d8:44:f2:23:c4:93:f3:2e:27:6f:49:f1:80:de:
60:b1:ba:77:c8:e8:96:4e:33:b3:29:05:66:35:ec:
cf:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:80:6F:B1:B2:B6:07:56:0E:F8:23:E4:47:E1:63:F0:53:6A:F8:35
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4b7340fc-698a-4488-b211-325f4ded4152/ca88a54e-0b3e-3c48-a255-1c9a7efa98bb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4b7340fc-698a-4488-b211-325f4ded4152/4b7340fc-698a-4488-b211-325f4ded4152.crl
X509v3 Authority Key Identifier:
keyid:23:3D:5E:57:55:04:17:3A:3B:29:FB:12:AF:F5:98:0C:ED:D6:77:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4b7340fc-698a-4488-b211-325f4ded4152.cer
sbgp-ipAddrBlock: critical
IPv4:
162.252.172.0-162.252.174.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:3d:25:61:70:d8:2d:54:2c:26:be:a1:b9:08:b5:3c:d5:a5:
40:82:64:a5:11:e1:3c:64:a8:56:63:a2:35:e1:c4:13:78:b7:
d9:b2:bb:36:7a:9f:22:1d:da:9b:07:06:4f:2c:4c:6d:f4:34:
25:43:11:74:08:20:a3:35:0f:5f:36:1c:8c:51:f6:00:f2:5b:
30:43:21:f3:04:61:75:94:a1:a7:64:34:22:8d:2a:30:97:fb:
e1:d4:63:cc:72:97:49:37:33:20:fb:3b:d4:88:64:44:b7:ab:
53:36:77:f2:e0:76:38:1a:b7:0c:88:a0:78:20:51:ec:b3:37:
9a:9d:78:42:3e:bd:b5:96:31:2f:4f:49:b1:24:b4:73:28:af:
c8:0d:48:34:34:9e:0b:c3:4b:d8:1c:82:7e:1f:07:e3:1b:32:
b3:2f:23:f4:c8:6c:5f:2d:9e:ac:69:8f:90:02:43:a2:4f:51:
f0:b8:d0:94:ae:8b:88:34:6c:57:f2:34:53:56:ae:bb:9a:f0:
4d:d3:d0:a3:58:e2:fe:67:68:af:4b:2e:47:81:57:13:2b:55:
bd:66:4e:8e:72:8f:9c:32:aa:a7:da:9e:37:4e:0b:7b:3c:0c:
33:e4:d1:b9:22:c7:3c:34:4d:97:e3:1e:9b:83:c0:d8:ed:97:
13:4a:a9:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:20:44 2026 by rpki-client