
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/8920d918-6c0c-35be-9466-ec3c3e762b2a.roa
File: 8920d918-6c0c-35be-9466-ec3c3e762b2a.roa (raw, json)
Hash identifier: ysk6bSnuOXVit+xODrnS03mVjcAmxM6ERDbz/vHwxcA=
Subject key identifier: F4:6A:B5:D1:F7:5F:3C:25:53:A8:53:00:50:67:B6:9A:0A:30:76:45
Certificate issuer: /CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
Certificate serial: 010D0C9F4328584D5E1A851F500518890CD05700
Authority key identifier: 89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/8920d918-6c0c-35be-9466-ec3c3e762b2a.roa
Signing time: Thu 02 Apr 2026 01:00:23 +0000
ROA not before: Thu 02 Apr 2026 01:00:23 +0000
ROA not after: Wed 01 Jul 2026 01:00:23 +0000
asID: 398391
IP address blocks: 131.226.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:5e:1a:85:1f:50:05:18:89:0c:d0:57:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64239825-d3e6-4b1f-a339-f73f2db89ee9
Validity
Not Before: Apr 2 01:00:23 2026 GMT
Not After : Jul 1 01:00:23 2026 GMT
Subject: CN=565137af-caf6-4ade-bc44-73336e471cc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:2b:46:c1:de:76:ef:6f:23:eb:8d:a7:19:ff:
c6:7d:72:ff:9a:90:fb:af:dd:99:9a:7f:ff:48:a8:
b0:36:6f:f6:a9:dc:a5:fb:56:98:2e:bd:9f:c5:c5:
a1:14:e6:26:4e:5f:65:d0:ae:cd:76:86:f5:0c:37:
5f:e5:7a:6f:ba:c2:7c:3a:7b:1d:37:84:f3:c7:81:
27:6f:5f:6c:cf:a9:88:98:f0:0b:2b:c5:01:82:db:
95:91:81:72:b4:96:a4:99:ab:d3:bf:b4:61:98:57:
be:65:f7:76:11:9d:d1:7e:f8:ec:87:69:2e:d3:b9:
ef:ff:b4:e4:19:c7:ab:72:a7:2a:23:ac:20:93:87:
9b:e1:f3:42:ad:77:db:7e:2b:b4:85:2b:52:d4:79:
f5:9b:e6:5d:a9:4d:b1:6f:71:d9:38:c7:b3:ac:43:
83:c9:5d:b6:48:33:97:7e:ee:ae:6c:70:f2:16:6c:
13:c4:04:63:db:fe:22:cb:25:ed:b0:b6:57:93:e8:
59:ee:3b:63:14:30:56:68:9a:ce:48:2c:21:5b:fa:
e6:e5:03:d1:c1:f6:72:b2:76:72:0d:cd:de:3c:10:
71:85:be:03:81:86:b5:cd:ac:2e:27:80:15:44:1d:
c8:81:8c:e6:55:f5:03:6a:c1:a3:78:9e:ce:83:81:
5f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:6A:B5:D1:F7:5F:3C:25:53:A8:53:00:50:67:B6:9A:0A:30:76:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/8920d918-6c0c-35be-9466-ec3c3e762b2a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9/64239825-d3e6-4b1f-a339-f73f2db89ee9.crl
X509v3 Authority Key Identifier:
keyid:89:8A:BE:E2:5A:C6:20:65:B0:9B:12:9A:09:45:2E:CB:6A:B9:AC:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/64239825-d3e6-4b1f-a339-f73f2db89ee9.cer
sbgp-ipAddrBlock: critical
IPv4:
131.226.38.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:b9:26:ea:45:9b:48:df:73:09:5b:df:ce:f8:c8:46:51:8c:
a1:9c:a9:f8:44:f7:08:2d:92:56:fb:7e:f1:49:2a:66:42:b2:
0e:75:a9:be:0d:d3:e7:75:0d:e9:72:03:18:4b:ec:3b:4f:52:
02:17:2e:85:0e:02:20:a9:7e:40:13:aa:5b:5d:84:fd:9a:88:
60:34:bd:40:a5:0f:88:b0:05:0b:f8:63:a5:c9:05:14:db:4e:
2f:59:9b:53:ae:02:e1:45:6a:12:40:fb:4f:44:71:52:6f:44:
2d:4d:2f:92:b8:a4:92:ea:a3:3c:f2:70:9e:32:eb:e3:fc:d9:
ec:11:94:e2:7b:ce:ac:ce:a4:c3:f1:18:92:5a:ff:18:59:3d:
0c:36:7a:9e:97:42:3b:98:9d:05:88:5b:4a:de:4d:a6:fb:f5:
1d:5e:12:b9:11:a3:32:1b:98:7f:05:af:4b:42:42:ab:e7:ec:
2d:8f:74:0e:75:e8:4e:ed:dc:5e:11:b8:d4:c4:0e:01:5c:8e:
a2:4e:d7:21:ff:1b:74:9c:a4:81:0f:2b:dc:16:0d:19:01:34:
3f:5b:91:3a:b3:b5:48:21:10:b6:04:f9:57:db:14:42:c4:7b:
3f:4c:89:ed:da:eb:f7:5e:af:8f:6c:97:f3:51:af:20:86:d6:
8d:35:95:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:09:26 2026 by rpki-client