
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/472e14ed-5432-4736-a4d2-f21c573a3c6c/da3009a3-e762-39fb-8667-ec3c96699ae9.roa
File: da3009a3-e762-39fb-8667-ec3c96699ae9.roa (raw, json)
Hash identifier: tAaSjTRStU0my/PzsclhdIb7hwjrOXoOLMkpEZIAKjw=
Subject key identifier: 1A:40:F4:9D:E1:36:3F:26:E7:2C:15:1E:10:4A:94:20:86:8F:DE:71
Certificate issuer: /CN=472e14ed-5432-4736-a4d2-f21c573a3c6c
Certificate serial: 010D0C9F4328584CB2871A2F7A1694FED9952500
Authority key identifier: 8B:A2:BA:D7:51:5F:82:21:64:65:FB:12:18:B3:E5:AD:C2:E1:77:D4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/472e14ed-5432-4736-a4d2-f21c573a3c6c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/472e14ed-5432-4736-a4d2-f21c573a3c6c/da3009a3-e762-39fb-8667-ec3c96699ae9.roa
Signing time: Fri 30 Jan 2026 14:00:40 +0000
ROA not before: Fri 30 Jan 2026 14:00:40 +0000
ROA not after: Thu 30 Apr 2026 13:00:40 +0000
asID: 19211
IP address blocks: 131.143.32.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/472e14ed-5432-4736-a4d2-f21c573a3c6c/472e14ed-5432-4736-a4d2-f21c573a3c6c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/472e14ed-5432-4736-a4d2-f21c573a3c6c/472e14ed-5432-4736-a4d2-f21c573a3c6c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/472e14ed-5432-4736-a4d2-f21c573a3c6c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:b2:87:1a:2f:7a:16:94:fe:d9:95:25:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=472e14ed-5432-4736-a4d2-f21c573a3c6c
Validity
Not Before: Jan 30 14:00:40 2026 GMT
Not After : Apr 30 13:00:40 2026 GMT
Subject: CN=fd345820-6e23-4b43-a3f4-9bf9d94b5fd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:79:e2:90:36:dc:b5:4b:b2:91:84:89:da:49:
9c:ed:a6:48:b1:29:fd:e9:7b:c0:25:40:91:74:26:
8f:6d:d1:8a:e4:97:a8:56:e4:5a:c6:34:6d:ac:c4:
a5:a6:7e:60:57:11:f7:10:22:a4:cc:a3:c0:4d:a2:
dc:7c:2b:c9:0e:a8:cb:0b:3d:1f:54:70:16:a8:64:
8b:c4:37:57:1d:f2:e3:ba:2b:1a:7c:5a:9a:55:40:
27:0f:98:c3:0c:41:18:ff:ad:bf:18:70:62:47:c4:
f5:ff:f3:03:cc:73:80:0b:4f:0c:85:41:1d:66:4d:
00:d1:21:b0:22:f1:3f:a2:63:cd:05:2c:f9:5e:6a:
50:36:eb:b2:4e:22:46:69:e9:b8:84:b3:ce:7f:f8:
23:75:91:0c:06:46:55:71:12:d2:35:13:8c:0e:af:
04:f2:4f:41:97:6d:9b:77:17:a5:54:f5:4f:0f:8f:
a9:49:39:5b:6b:fa:6e:ad:f9:71:71:15:cb:f0:36:
67:bc:6e:98:28:81:61:43:be:a3:9c:c9:2e:1c:2a:
ce:55:d6:6a:0e:c0:18:e7:28:2f:82:da:70:fc:18:
e9:03:19:0e:38:4c:af:fa:19:32:e2:01:fc:78:d9:
41:62:65:5e:95:5e:40:74:dc:48:69:42:20:ec:bc:
21:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:40:F4:9D:E1:36:3F:26:E7:2C:15:1E:10:4A:94:20:86:8F:DE:71
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/472e14ed-5432-4736-a4d2-f21c573a3c6c/da3009a3-e762-39fb-8667-ec3c96699ae9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/472e14ed-5432-4736-a4d2-f21c573a3c6c/472e14ed-5432-4736-a4d2-f21c573a3c6c.crl
X509v3 Authority Key Identifier:
keyid:8B:A2:BA:D7:51:5F:82:21:64:65:FB:12:18:B3:E5:AD:C2:E1:77:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/472e14ed-5432-4736-a4d2-f21c573a3c6c.cer
sbgp-ipAddrBlock: critical
IPv4:
131.143.32.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:24:88:21:e8:98:f9:83:ca:af:d5:5c:13:01:ed:c5:59:46:
e0:71:6c:78:4e:40:19:f2:d5:45:78:49:28:77:4a:a4:8b:73:
10:1a:0b:7a:99:66:f6:eb:80:61:08:cd:ff:3f:e7:e0:81:af:
ca:e3:ce:74:a6:9d:74:51:cb:29:5d:03:7f:52:59:f9:a1:3d:
3c:ce:1d:82:99:b8:1c:93:2c:80:c9:87:08:bf:80:f5:74:f9:
b8:f4:b9:6c:12:8b:23:a7:cb:13:0c:02:cf:0d:8a:ab:99:1e:
23:42:f9:a5:d2:1b:a1:c9:59:ba:ea:01:71:42:97:f1:bd:d9:
80:3e:e3:07:b8:14:18:2d:88:e8:af:d2:3b:3d:7b:a8:a3:e0:
35:7b:57:12:7e:db:27:b4:7f:5b:35:67:36:3a:37:88:05:e5:
63:9a:6b:11:78:f3:4e:66:1f:cb:26:69:41:cf:6f:fe:3b:83:
bf:2c:b5:cb:eb:17:7d:5a:1f:6a:24:1a:ff:a5:44:eb:6e:df:
89:3e:72:fb:74:81:6a:10:bd:4e:c2:b8:35:8d:e2:19:7f:71:
60:4e:b9:f3:2d:1e:dd:50:d4:9a:d2:9b:8a:8f:f2:76:80:45:
db:47:11:bb:a7:cc:25:70:97:f0:36:db:d6:fb:c2:04:55:9a:
11:ab:bf:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:35:12 2026 by rpki-client