
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/cf904611-65ee-35b8-9efc-7fc2aec65bb5.roa
File: cf904611-65ee-35b8-9efc-7fc2aec65bb5.roa (raw, json)
Hash identifier: Y453x4yhJeOh8TYaPiC+ZCQqbEn5eZp9PZIQActgYb8=
Subject key identifier: 54:14:E2:96:F9:C5:E7:89:35:A3:7C:78:BB:28:28:92:95:A5:93:4F
Certificate issuer: /CN=8450660f-e06c-43ee-910d-d4b472fdc395
Certificate serial: 010D0C9F4328584D7E3525FCC5E3A0BA5F93C720
Authority key identifier: 69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/cf904611-65ee-35b8-9efc-7fc2aec65bb5.roa
Signing time: Mon 13 Apr 2026 13:00:30 +0000
ROA not before: Mon 13 Apr 2026 13:00:30 +0000
ROA not after: Sun 12 Jul 2026 13:00:30 +0000
asID: 23316
IP address blocks: 72.37.134.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:7e:35:25:fc:c5:e3:a0:ba:5f:93:c7:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8450660f-e06c-43ee-910d-d4b472fdc395
Validity
Not Before: Apr 13 13:00:30 2026 GMT
Not After : Jul 12 13:00:30 2026 GMT
Subject: CN=617c52f3-db3e-437a-8ce7-e1960dc682ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:01:c3:d2:53:65:f9:1d:be:bf:ef:cc:6e:d0:
69:06:36:23:0a:bd:b6:3f:c4:a0:89:8b:ea:68:1c:
a8:d6:f0:e0:65:91:0d:df:dd:bf:d1:c1:29:07:95:
fa:9d:eb:da:c2:f8:5c:94:be:40:cd:20:a4:26:77:
90:a5:12:42:d9:25:7b:89:54:01:cb:88:30:f2:c5:
07:18:a2:40:b9:a9:f6:9f:93:0e:68:72:6a:be:b8:
12:23:d0:03:3d:52:f7:e3:05:52:9b:3e:51:98:b0:
bb:b9:19:3b:a7:ee:6a:34:e7:7f:58:24:8f:b7:68:
96:ae:39:6e:67:5b:c8:07:05:a0:c2:56:f8:db:71:
e4:0c:da:18:63:91:7b:e5:1a:22:6c:73:40:b0:e0:
2a:83:ee:ad:c9:0c:7f:52:a1:1b:38:22:ad:65:6c:
0f:00:6f:ce:8e:f8:70:56:6e:e8:13:9b:6e:83:1f:
38:63:fe:e2:b3:d2:33:32:c1:8f:eb:e4:eb:37:f1:
90:d8:59:40:69:4a:0c:a4:23:9e:21:c1:df:65:83:
a5:36:bf:da:5e:82:4f:6a:2b:9b:21:be:0d:9a:ec:
7d:46:d0:c1:e2:51:2f:d8:04:3b:ed:0a:dc:a9:76:
71:95:fc:19:72:7a:56:88:37:81:b6:dc:93:57:07:
40:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:14:E2:96:F9:C5:E7:89:35:A3:7C:78:BB:28:28:92:95:A5:93:4F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/cf904611-65ee-35b8-9efc-7fc2aec65bb5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl
X509v3 Authority Key Identifier:
keyid:69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer
sbgp-ipAddrBlock: critical
IPv4:
72.37.134.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:5a:c2:e6:54:30:59:8d:12:bd:eb:d3:27:25:02:65:85:47:
b1:be:12:b9:44:4a:83:5a:b6:09:35:a0:c4:19:ed:ca:59:61:
17:6f:05:8e:f9:60:63:d9:13:cc:9f:98:73:7e:fb:d0:f3:45:
55:a7:47:3e:cc:e7:35:02:ef:60:d0:63:46:9f:98:ea:54:33:
f3:db:53:48:7a:14:d3:5e:9d:f5:28:8f:60:29:04:c9:89:bb:
7c:f3:09:62:75:7b:50:15:85:a3:e9:ca:ef:d5:84:91:4b:c2:
c5:d9:d6:8f:71:3e:09:0f:fa:b4:56:5f:fd:bb:8f:5e:92:5e:
10:39:bb:4a:4e:5d:15:e0:76:6b:d9:2d:37:28:0b:8d:55:d0:
92:6a:8b:99:8d:05:66:d0:69:4e:f1:63:14:f8:aa:5b:1d:6a:
5b:c3:a6:3c:f2:65:a1:42:b5:e5:86:30:a4:d6:97:49:17:95:
e0:dd:5a:b4:c4:a3:c4:f5:e6:58:3c:14:22:a3:62:40:ad:bf:
76:c8:72:3f:a3:c2:fa:e2:7d:30:2d:36:24:f1:9c:59:df:1b:
2d:70:e4:bc:a8:fd:47:18:78:23:91:18:8a:4b:17:4a:0d:d3:
92:97:7d:88:0d:2e:7e:7b:23:1f:cb:17:29:cd:b9:5f:e6:c1:
6d:f7:e6:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:14:50 2026 by rpki-client