
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/b9f125db-882b-3ef0-a5da-59a23c89fe1c.roa
File: b9f125db-882b-3ef0-a5da-59a23c89fe1c.roa (raw, json)
Hash identifier: wWlOIh0sbLRfzVSNVOnra1eB2kKptm8hDXjzuvx2X04=
Subject key identifier: 00:28:7C:68:1D:36:BF:A9:DD:19:BF:7A:28:8C:AC:39:A0:3D:7E:10
Certificate issuer: /CN=174db496-399b-48c7-919e-3e6dfd4a5584
Certificate serial: 010D0C9F4328584DBCDFB3C31F42999AD671E100
Authority key identifier: 9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/b9f125db-882b-3ef0-a5da-59a23c89fe1c.roa
Signing time: Tue 05 May 2026 23:44:17 +0000
ROA not before: Tue 05 May 2026 23:44:17 +0000
ROA not after: Mon 03 Aug 2026 23:44:17 +0000
asID: 40934
IP address blocks: 189.25.32.0/24 maxlen: 24
189.25.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 23:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:bc:df:b3:c3:1f:42:99:9a:d6:71:e1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=174db496-399b-48c7-919e-3e6dfd4a5584
Validity
Not Before: May 5 23:44:17 2026 GMT
Not After : Aug 3 23:44:17 2026 GMT
Subject: CN=363d6cd4-37af-4760-b028-43670ff62c75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:6f:83:f3:4e:c3:ca:e5:bd:13:e3:0e:8e:60:
16:fb:6d:b4:3e:70:22:f5:5f:eb:2e:0b:d4:25:6c:
c3:fe:56:d7:21:94:53:a6:6b:9b:f3:2b:9c:5c:12:
0a:8d:a5:62:81:26:2b:74:87:d8:2e:3f:6a:16:a3:
39:f1:8f:fb:56:81:bb:ee:4f:37:e1:04:5d:76:7f:
8e:74:ec:a2:15:f1:83:d6:b4:3d:15:d7:60:90:e9:
6a:c7:ef:bd:df:c8:18:30:a2:5b:51:69:90:fe:c9:
6f:d2:10:e0:26:2b:f7:6c:94:01:f9:e6:19:ec:8a:
bc:4f:e0:db:20:70:88:b6:f7:85:5d:9b:59:88:8e:
ef:e2:0a:9a:3d:b8:9a:72:68:12:d4:09:d5:af:bf:
c2:c6:bc:bf:18:ad:1a:f3:8d:7c:37:18:67:1e:e4:
86:6a:b6:bc:44:00:54:21:c4:92:44:4c:db:ca:70:
99:be:d3:db:34:df:43:a3:41:28:9f:46:c3:4c:ed:
4b:c5:3e:70:52:82:e8:52:bd:83:6a:11:be:79:7a:
1b:32:b1:be:af:34:8b:5d:08:87:a2:99:ff:2a:6c:
f0:da:45:ee:f2:cc:e0:73:dd:c7:51:92:5f:11:f5:
39:3b:ba:25:ff:d1:ac:b1:6c:f0:d1:75:8c:67:e7:
c5:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:28:7C:68:1D:36:BF:A9:DD:19:BF:7A:28:8C:AC:39:A0:3D:7E:10
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/b9f125db-882b-3ef0-a5da-59a23c89fe1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl
X509v3 Authority Key Identifier:
keyid:9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer
sbgp-ipAddrBlock: critical
IPv4:
189.25.32.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:21:98:6c:e9:0a:f6:c4:25:43:41:9f:a5:e3:09:a7:4f:ec:
fb:29:2a:aa:28:72:ea:e1:80:09:ef:08:b3:18:29:14:a8:81:
8c:d3:94:7d:9c:60:ff:e2:38:0e:fd:7b:ac:01:10:04:14:2a:
cd:f5:6f:99:68:23:3f:d1:93:4f:56:47:62:91:4c:13:45:4a:
ff:cc:6d:c8:ee:14:92:1e:d3:b5:66:27:2c:0d:86:c3:44:ec:
b6:11:62:75:5d:49:5f:2b:4b:c5:ba:b2:b6:86:e5:45:84:c8:
4f:8c:e8:93:d0:d1:b1:7f:d5:31:09:eb:6e:f6:6b:79:8e:fa:
4e:5d:9b:18:00:c5:3a:4c:80:8d:05:09:86:10:f7:da:0c:2f:
00:3c:d6:3d:22:53:3c:2d:7a:2b:5e:0f:ad:23:b6:22:c2:60:
4d:ab:df:5d:59:5f:31:9e:c6:64:ca:61:81:e3:c4:30:85:f1:
06:f6:da:74:bd:b2:f2:d4:04:09:60:5a:66:17:5d:1c:2a:c5:
99:68:b6:2a:6c:94:01:1b:f9:06:df:b3:d3:a4:a8:b0:42:11:
ca:ae:19:fe:44:f1:cf:55:75:c0:8c:70:45:2e:7f:7f:76:25:
ff:39:b4:ee:38:bd:a2:0e:02:d0:63:8f:23:48:70:77:54:ef:
90:f1:dd:dd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2837PDH0KZmtZx4QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTc0ZGI0OTYtMzk5Yi00OGM3LTkxOWUtM2U2ZGZkNGE1
NTg0MB4XDTI2MDUwNTIzNDQxN1oXDTI2MDgwMzIzNDQxN1owLzEtMCsGA1UEAxMk
MzYzZDZjZDQtMzdhZi00NzYwLWIwMjgtNDM2NzBmZjYyYzc1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7m+D807DyuW9E+MOjmAW+220PnAi9V/rLgvU
JWzD/lbXIZRTpmub8yucXBIKjaVigSYrdIfYLj9qFqM58Y/7VoG77k834QRddn+O
dOyiFfGD1rQ9FddgkOlqx++938gYMKJbUWmQ/slv0hDgJiv3bJQB+eYZ7Iq8T+Db
IHCItveFXZtZiI7v4gqaPbiacmgS1AnVr7/Cxry/GK0a8418NxhnHuSGara8RABU
IcSSREzbynCZvtPbNN9Do0Eon0bDTO1LxT5wUoLoUr2DahG+eXobMrG+rzSLXQiH
opn/Kmzw2kXu8szgc93HUZJfEfU5O7ol/9GssWzw0XWMZ+fF5wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAAofGgdNr+p3Rm/eiiMrDmgPX4QMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xNzRk
YjQ5Ni0zOTliLTQ4YzctOTE5ZS0zZTZkZmQ0YTU1ODQvYjlmMTI1ZGItODgyYi0z
ZWYwLWE1ZGEtNTlhMjNjODlmZTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMTc0ZGI0OTYtMzk5Yi00OGM3LTkx
OWUtM2U2ZGZkNGE1NTg0LzE3NGRiNDk2LTM5OWItNDhjNy05MTllLTNlNmRmZDRh
NTU4NC5jcmwwHwYDVR0jBBgwFoAUnbYvqwyEv+F7kStHMMc1sXqvgNEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8xNzRkYjQ5Ni0zOTliLTQ4YzctOTE5ZS0zZTZk
ZmQ0YTU1ODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBvRkgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIkhmGzpCvbEJUNBn6XjCadP7PspKqoocurhgAnvCLMYKRSogYzTlH2c
YP/iOA79e6wBEAQUKs31b5loIz/Rk09WR2KRTBNFSv/MbcjuFJIe07VmJywNhsNE
7LYRYnVdSV8rS8W6sraG5UWEyE+M6JPQ0bF/1TEJ6272a3mO+k5dmxgAxTpMgI0F
CYYQ99oMLwA81j0iUzwteiteD60jtiLCYE2r311ZXzGexmTKYYHjxDCF8Qb22nS9
svLUBAlgWmYXXRwqxZlotipslAEb+Qbfs9OkqLBCEcquGf5E8c9VdcCMcEUuf392
Jf85tO44vaIOAtBjjyNIcHdU75Dx3d0=
-----END CERTIFICATE-----
Generated at Wed May 13 10:36:03 2026 by rpki-client