
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/8c63db66-352b-3131-9200-cd97bf79e86f.roa
File: 8c63db66-352b-3131-9200-cd97bf79e86f.roa (raw, json)
Hash identifier: qDJaPbDf9+DCTxbZIPS6hWchjf33jeiEWgdIGxuZ46c=
Subject key identifier: 35:DA:D3:B4:3F:05:6D:D4:78:ED:AF:39:74:16:F8:ED:0B:DC:B2:73
Certificate issuer: /CN=d862b5c6-40a1-4249-a26e-11938a702985
Certificate serial: 010D0C9F4328584CCBA75DF6603E29C337DE91BA
Authority key identifier: 81:FC:0E:8B:83:2F:BA:DE:FF:FC:A3:85:C2:31:3C:E6:28:AA:19:D0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/8c63db66-352b-3131-9200-cd97bf79e86f.roa
Signing time: Sun 08 Feb 2026 14:00:41 +0000
ROA not before: Sun 08 Feb 2026 14:00:41 +0000
ROA not after: Sat 09 May 2026 13:00:41 +0000
asID: 15257
IP address blocks: 173.195.224.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/d862b5c6-40a1-4249-a26e-11938a702985.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/d862b5c6-40a1-4249-a26e-11938a702985.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:cb:a7:5d:f6:60:3e:29:c3:37:de:91:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d862b5c6-40a1-4249-a26e-11938a702985
Validity
Not Before: Feb 8 14:00:41 2026 GMT
Not After : May 9 13:00:41 2026 GMT
Subject: CN=a78ec1c5-9abe-4e8d-a931-02cb35d2d8d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7d:e0:5e:ad:db:0e:be:8e:8a:ad:00:5c:0a:
b7:86:5b:4b:a9:3e:03:41:da:a6:94:8c:1b:83:ad:
0e:a3:9f:52:d2:96:c3:a3:62:05:02:04:6b:c2:52:
bc:46:15:66:23:29:a2:14:b7:4f:ca:5a:06:28:08:
7b:bd:6f:3a:1f:ae:6b:4e:c1:ff:22:e6:43:04:9f:
5c:5b:2e:17:fa:07:a0:96:9b:fc:1d:27:d7:bd:e7:
40:da:c2:88:10:8b:d4:99:5b:76:63:a2:06:df:6f:
32:dd:f7:ff:de:07:b8:e5:a5:9b:00:d9:d8:42:af:
67:dc:26:a1:ab:7d:cb:2a:65:01:0e:34:c6:44:b2:
3c:49:78:a6:40:c9:e7:55:f9:1a:12:0b:ab:8b:c1:
7c:1e:90:df:ae:ef:80:8a:a0:5f:91:15:6f:10:90:
bc:88:50:58:93:94:3e:23:a6:88:76:4b:7b:40:3a:
57:f5:bb:cd:7e:30:e5:4d:1d:09:af:eb:df:6b:f1:
63:e9:19:33:69:0b:f2:05:9a:53:18:8e:0d:c4:1c:
9c:90:9b:e7:55:d8:92:09:7f:db:e6:f0:82:1b:77:
ce:4d:87:ed:32:ee:9d:14:8e:6e:1d:bd:48:3c:1b:
59:fd:0e:1d:03:8c:fa:13:5b:1c:77:f6:a1:1e:dc:
2f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:DA:D3:B4:3F:05:6D:D4:78:ED:AF:39:74:16:F8:ED:0B:DC:B2:73
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/8c63db66-352b-3131-9200-cd97bf79e86f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985/d862b5c6-40a1-4249-a26e-11938a702985.crl
X509v3 Authority Key Identifier:
keyid:81:FC:0E:8B:83:2F:BA:DE:FF:FC:A3:85:C2:31:3C:E6:28:AA:19:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d862b5c6-40a1-4249-a26e-11938a702985.cer
sbgp-ipAddrBlock: critical
IPv4:
173.195.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:4c:a3:09:98:5a:24:b5:a1:08:2a:ea:30:66:dc:db:97:d3:
62:39:1d:46:1a:de:d4:c6:83:38:90:43:d9:3a:ca:05:bb:68:
55:d6:15:99:5f:ef:99:8c:29:68:91:9d:ef:11:03:21:fb:b7:
ab:24:a1:47:aa:f6:7b:0f:9a:8f:f4:0c:1f:d6:8d:17:86:73:
64:b9:08:05:17:ed:8e:05:ca:cf:21:ae:3c:f9:13:48:bc:81:
d6:5a:47:3c:c7:1a:c9:9b:29:e9:ff:de:a0:37:2f:3e:14:b6:
ea:f7:8c:00:14:7d:52:88:f4:9b:4d:71:90:79:2a:69:3c:ef:
3e:2b:ce:94:72:c8:5f:81:7c:4e:e0:d0:2d:59:ac:17:b0:ee:
b1:ae:bf:37:c3:b7:ea:d1:ae:d3:72:b1:ab:8e:57:7c:21:a7:
f8:d5:f0:62:d7:62:d2:4e:ef:2e:63:e9:20:af:fe:2b:51:e2:
1e:77:fc:6f:d9:01:53:8c:98:d1:cd:aa:d4:31:7c:b8:e0:16:
11:56:0a:15:af:65:41:2f:4b:c9:00:ee:25:9c:22:64:88:6d:
f8:6f:89:52:7a:68:8b:a7:c3:71:ee:4b:28:96:25:2e:f7:ad:
80:4f:78:d0:8d:bc:13:9d:06:a3:bb:e5:2f:63:30:8b:1a:1b:
86:96:ae:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 02:54:55 2026 by rpki-client