
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/45f939b0-98c3-3891-921b-a6edd06cebc1.roa
File: 45f939b0-98c3-3891-921b-a6edd06cebc1.roa (raw, json)
Hash identifier: Kweyer3N6CYt493z3Flfgu6XE2wKaaglx7LtFUXaNX0=
Subject key identifier: F0:B7:D4:F1:0F:F2:BE:DC:73:1B:8E:27:2E:3F:30:4A:EB:D1:90:38
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F4328584F2D87C845C92104EE38729CC0
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/45f939b0-98c3-3891-921b-a6edd06cebc1.roa
Signing time: Tue 15 Sep 2026 01:00:12 +0000
ROA not before: Tue 15 Sep 2026 01:00:12 +0000
ROA not after: Mon 14 Dec 2026 02:00:12 +0000
asID: 29852
IP address blocks: 140.174.208.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:2d:87:c8:45:c9:21:04:ee:38:72:9c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: Sep 15 01:00:12 2026 GMT
Not After : Dec 14 02:00:12 2026 GMT
Subject: CN=872e9e4a-cf32-46b0-b32b-f8eba41b0d6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c3:05:66:13:c5:46:46:02:06:32:78:f7:3e:
d9:44:68:a1:44:7f:16:2a:4b:9b:60:c9:b9:c5:6c:
7d:96:c5:25:0e:eb:2a:ed:cc:67:1c:72:3b:9c:84:
b5:c5:23:cf:fe:86:9d:88:81:79:51:92:4c:c9:8a:
6f:b2:97:81:4c:88:19:2a:f5:b7:7e:4a:44:be:96:
4e:ac:b6:1b:fe:a5:08:f4:f8:73:02:1e:a3:09:81:
b2:73:33:ff:e1:84:b4:1e:80:e0:f5:7b:7c:3c:b7:
44:46:49:0f:79:61:44:2f:07:bd:38:4d:47:f4:4e:
11:52:18:52:97:f2:b0:d4:f0:18:64:38:50:7e:11:
8f:fe:f3:05:1c:9b:f0:01:0a:e4:3e:5d:59:ab:e8:
3a:be:55:18:ce:a9:11:61:c8:6f:f2:4d:2f:fd:ef:
f5:e9:f8:c6:5a:39:4f:35:72:80:2a:fb:17:4b:24:
43:6a:b0:85:e1:16:a1:58:9d:45:bd:13:5f:db:23:
7c:94:5a:86:8d:5f:f4:e6:c0:a8:d5:5f:63:3c:12:
6c:fd:de:62:01:00:d4:17:06:a0:61:e0:9a:eb:de:
ef:16:2a:57:aa:02:bf:39:fc:1e:09:8b:5b:dd:ce:
8b:52:bf:8d:2b:11:e5:16:e0:68:d4:86:88:b9:d7:
11:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:B7:D4:F1:0F:F2:BE:DC:73:1B:8E:27:2E:3F:30:4A:EB:D1:90:38
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/45f939b0-98c3-3891-921b-a6edd06cebc1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv4:
140.174.208.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:16:3b:bf:be:94:69:79:4a:98:c7:9c:32:fc:12:da:91:10:
32:d6:48:73:a5:52:b4:6f:64:80:91:eb:86:f7:63:d2:eb:36:
03:92:61:b4:c3:aa:08:2d:f4:6e:7f:fd:ae:76:f5:b5:6a:d0:
d2:d2:12:f6:a9:3f:74:fb:cf:6d:b3:eb:d1:9c:f2:d5:e8:f0:
0a:9e:26:c2:4a:c8:8d:8d:d7:fd:2b:d4:de:da:97:c4:90:56:
ff:96:34:66:87:17:fa:dc:45:0f:9b:1b:10:a2:eb:2f:1c:12:
82:7e:80:98:4e:3a:6a:41:cd:a5:8f:a9:46:02:21:c6:5c:83:
26:3e:2e:c5:38:37:3f:69:3c:b5:31:37:38:8f:2a:12:73:f5:
a0:26:22:de:5c:6f:82:c7:a8:e5:e8:4f:80:98:65:37:7e:57:
e2:2c:b5:13:cd:f7:a8:96:08:a3:af:17:b4:5b:59:2d:d1:a4:
b9:6d:71:ea:f2:b1:5e:31:69:01:f5:78:49:4d:0a:f1:7e:ef:
39:31:52:bd:52:10:dd:d6:98:78:41:89:38:d4:5a:79:d9:e5:
0e:65:b5:cf:57:16:b5:2f:03:70:46:48:87:01:b2:76:30:64:
e5:59:b9:4d:f4:74:8b:ee:0b:60:11:36:3e:0f:e6:48:d7:3e:
40:72:15:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 05:28:03 2026 by rpki-client