
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/9840afff-984a-3b15-a917-928c300436c0.roa
File: 9840afff-984a-3b15-a917-928c300436c0.roa (raw, json)
Hash identifier: 7s4d7J4Ezdm4HYGA8xTYpYk/5gjtmRzv1XESZibUXwA=
Subject key identifier: FE:F0:F3:1A:8E:EA:4D:4F:40:82:B2:A5:BB:EE:79:53:F8:FD:8D:36
Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial: 010D0C9F4328584F5E62DC1FA876AB21A0AA41C0
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/9840afff-984a-3b15-a917-928c300436c0.roa
Signing time: Fri 02 Oct 2026 13:00:13 +0000
ROA not before: Fri 02 Oct 2026 13:00:13 +0000
ROA not after: Thu 31 Dec 2026 14:00:13 +0000
asID: 27411
IP address blocks: 173.234.32.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:5e:62:dc:1f:a8:76:ab:21:a0:aa:41:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Validity
Not Before: Oct 2 13:00:13 2026 GMT
Not After : Dec 31 14:00:13 2026 GMT
Subject: CN=af1b711c-e338-4495-8e70-8dc1b5aa6f5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ae:e6:9b:e1:46:c6:28:68:07:15:19:bd:69:
aa:50:0a:22:4f:48:88:3c:d2:a6:8b:12:9c:c3:13:
e7:ce:c5:54:79:7d:5d:5f:c6:e4:52:7a:bb:a1:12:
bd:9e:0f:b8:7d:cc:a3:11:84:e4:56:0c:a2:43:2d:
b8:49:c7:f3:ee:99:b5:29:06:82:24:38:c0:b4:ba:
a0:48:39:14:3e:6b:88:f2:70:9e:67:be:60:17:74:
fd:e8:8b:53:31:a1:fc:ab:04:f3:5a:a0:42:ef:a6:
94:53:e7:ba:8d:de:7d:38:74:47:f2:ec:ac:f2:42:
11:34:e8:03:de:07:41:2c:17:b1:47:fc:64:9c:04:
f8:b6:76:49:85:4d:80:35:34:0b:bf:7a:73:be:44:
59:9b:c8:33:50:ca:64:03:86:e1:bf:d9:3c:77:76:
8c:41:8b:b5:cd:29:d6:c3:53:6a:d1:ca:c3:a4:29:
9c:b0:7d:f6:07:bc:bc:fb:b9:06:35:59:ff:89:f0:
37:ac:fa:b5:ac:3e:7d:10:73:28:66:99:da:4b:90:
08:ef:83:96:f5:44:12:19:d1:d9:a4:6d:dd:17:3a:
06:f4:2c:bc:39:8e:0a:79:cc:1d:1b:eb:6f:88:59:
fc:61:ac:3a:73:15:8c:28:5b:41:49:fb:26:f1:67:
22:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:F0:F3:1A:8E:EA:4D:4F:40:82:B2:A5:BB:EE:79:53:F8:FD:8D:36
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/9840afff-984a-3b15-a917-928c300436c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
X509v3 Authority Key Identifier:
keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
sbgp-ipAddrBlock: critical
IPv4:
173.234.32.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:66:e1:c0:e2:22:fd:d9:3d:28:4f:81:b1:9d:29:19:07:5a:
21:b9:73:3d:77:d4:19:08:f4:da:c1:3b:d7:4c:c6:45:8e:a6:
f9:79:ff:f1:22:ec:ba:f3:e3:6c:54:f6:a5:66:09:2a:96:44:
09:e1:cb:c8:be:75:93:0f:65:d9:1c:3c:21:f2:e0:b9:5f:57:
c3:93:2c:00:22:5a:65:6a:0d:ad:2a:d2:f7:00:55:da:e7:80:
6d:ee:b8:d5:79:b1:2a:f9:12:c8:26:2a:37:f8:b5:98:2c:96:
37:32:6c:12:cb:2f:57:bf:d1:1c:11:8c:be:d3:f7:65:f0:93:
32:70:0b:e6:7b:50:82:63:7a:06:57:e6:cd:63:b0:fd:6b:d4:
ad:05:1d:cc:37:51:e1:ff:e5:9f:91:8e:74:cc:fb:ec:bf:6b:
9d:5c:37:56:96:33:c0:50:e3:d4:83:c1:44:f4:b3:e7:f0:b0:
70:4c:ee:21:94:1a:91:ee:42:15:4a:3f:26:20:54:9c:b4:21:
9e:e8:d6:1e:26:a8:59:07:9b:44:fa:d7:bf:96:88:18:1f:cf:
7d:0e:a3:f9:a5:06:0e:8a:92:92:cd:20:1e:fa:c0:6b:78:19:
26:6a:17:f5:ce:5a:05:53:9c:35:a5:70:56:07:76:00:60:d7:
42:5a:c2:25
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9eYtwfqHarIaCqQcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5
OTdkMB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk
YWYxYjcxMWMtZTMzOC00NDk1LThlNzAtOGRjMWI1YWE2ZjVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4a7mm+FGxihoBxUZvWmqUAoiT0iIPNKmixKc
wxPnzsVUeX1dX8bkUnq7oRK9ng+4fcyjEYTkVgyiQy24Scfz7pm1KQaCJDjAtLqg
SDkUPmuI8nCeZ75gF3T96ItTMaH8qwTzWqBC76aUU+e6jd59OHRH8uys8kIRNOgD
3gdBLBexR/xknAT4tnZJhU2ANTQLv3pzvkRZm8gzUMpkA4bhv9k8d3aMQYu1zSnW
w1Nq0crDpCmcsH32B7y8+7kGNVn/ifA3rPq1rD59EHMoZpnaS5AI74OW9UQSGdHZ
pG3dFzoG9Cy8OY4KecwdG+tviFn8Yaw6cxWMKFtBSfsm8Wci+QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP7w8xqO6k1PQIKypbvueVP4/Y02MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy
ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvOTg0MGFmZmYtOTg0YS0z
YjE1LWE5MTctOTI4YzMwMDQzNmMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx
YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5
OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy
ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCreogMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD9m4cDiIv3ZPShPgbGdKRkHWiG5cz131BkI9NrBO9dMxkWOpvl5//Ei
7Lrz42xU9qVmCSqWRAnhy8i+dZMPZdkcPCHy4LlfV8OTLAAiWmVqDa0q0vcAVdrn
gG3uuNV5sSr5EsgmKjf4tZgsljcybBLLL1e/0RwRjL7T92XwkzJwC+Z7UIJjegZX
5s1jsP1r1K0FHcw3UeH/5Z+RjnTM++y/a51cN1aWM8BQ49SDwUT0s+fwsHBM7iGU
GpHuQhVKPyYgVJy0IZ7o1h4mqFkHm0T617+WiBgfz30Oo/mlBg6KkpLNIB76wGt4
GSZqF/XOWgVTnDWlcFYHdgBg10JawiU=
-----END CERTIFICATE-----
Generated at Sat Oct 10 23:03:53 2026 by rpki-client