
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/00db9840-1a63-3593-bb93-3e91d388db8f.roa
File: 00db9840-1a63-3593-bb93-3e91d388db8f.roa (raw, json)
Hash identifier: tdxTiKKzzL1JqJDqnnjweWFVEjecijngL4z2Y2n4Dtg=
Subject key identifier: 55:30:48:27:7D:15:21:06:A8:04:1F:37:FF:E2:BD:DC:54:E5:07:96
Certificate issuer: /CN=517b063f-7f88-4d7a-a5ad-1e487692f063
Certificate serial: 010D0C9F4328584D48B1B0672A85906BE743C880
Authority key identifier: 05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/00db9840-1a63-3593-bb93-3e91d388db8f.roa
Signing time: Wed 25 Mar 2026 08:56:56 +0000
ROA not before: Wed 25 Mar 2026 08:56:56 +0000
ROA not after: Tue 23 Jun 2026 08:56:56 +0000
asID: 137535
IP address blocks: 104.143.32.0/20 maxlen: 24
172.81.96.0/22 maxlen: 24
172.81.100.0/23 maxlen: 24
198.176.59.0/24 maxlen: 24
198.176.60.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:48:b1:b0:67:2a:85:90:6b:e7:43:c8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=517b063f-7f88-4d7a-a5ad-1e487692f063
Validity
Not Before: Mar 25 08:56:56 2026 GMT
Not After : Jun 23 08:56:56 2026 GMT
Subject: CN=49c1538c-e16d-44f7-80a3-c109af654d3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:80:17:46:03:72:68:66:60:12:6a:f0:2a:a6:
ea:08:26:20:bd:c8:47:14:47:31:f5:90:fa:b8:25:
7e:fe:cc:d5:22:89:90:95:c9:45:73:47:13:7a:71:
69:b8:74:92:5d:eb:07:17:ba:cc:99:05:e1:49:57:
56:8c:57:11:2e:89:39:f1:64:40:bb:87:80:8f:ad:
4f:a7:03:e9:92:d1:d0:90:ee:d6:b8:0e:1e:0d:e7:
49:ca:44:86:95:e0:ae:cc:20:3a:47:cc:19:a8:76:
fd:51:05:66:2e:2e:08:24:64:8d:2b:ad:c5:ff:32:
a3:9d:71:da:24:d1:89:71:04:98:08:f9:94:a7:6b:
c1:2f:2b:bf:2c:5c:7c:1c:c7:0e:1d:53:30:1a:50:
34:42:23:f6:14:62:25:88:2f:f6:b3:47:07:63:65:
ad:8c:a4:2e:ad:48:b6:77:26:b6:a4:4c:ca:84:13:
35:c4:4a:b7:2e:55:3a:4c:27:93:87:b1:81:e9:73:
40:a3:c6:2f:0d:a4:3a:29:eb:3f:f9:a7:c1:9e:e6:
be:e4:fd:b6:52:29:70:87:69:cc:f9:ca:5c:0a:1c:
3b:99:75:5e:60:50:26:64:cc:e3:c6:7c:49:31:c4:
ae:e3:48:10:32:6e:a8:69:4f:a4:1f:1f:7e:16:44:
76:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:30:48:27:7D:15:21:06:A8:04:1F:37:FF:E2:BD:DC:54:E5:07:96
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/00db9840-1a63-3593-bb93-3e91d388db8f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl
X509v3 Authority Key Identifier:
keyid:05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer
sbgp-ipAddrBlock: critical
IPv4:
104.143.32.0/20
172.81.96.0-172.81.101.255
198.176.59.0-198.176.63.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:d9:fb:e2:60:87:49:d7:51:93:61:79:60:47:00:f1:dd:36:
53:74:d0:77:06:6e:51:a0:50:8d:4b:2f:8e:b5:de:7c:a6:54:
0d:aa:3f:90:98:3d:9f:d5:ed:a4:01:06:73:30:83:df:ff:66:
a7:43:29:38:29:0b:f3:ab:02:bb:bd:6b:56:01:da:7d:61:b1:
ef:84:5c:72:67:48:d1:11:e4:f7:ee:bb:7a:5b:69:e4:e8:8a:
5b:3f:8c:84:4c:47:03:0c:a0:30:52:83:80:27:e2:8d:f6:c0:
90:c3:ea:c6:ab:72:8f:f7:29:b9:59:78:bc:32:97:b1:de:86:
a7:f4:89:86:e7:c8:a2:04:9f:87:7d:d7:28:5c:69:80:65:6f:
9f:30:86:2e:fb:eb:ba:f3:09:83:48:a7:b8:d2:bf:cd:09:13:
1d:7f:b3:0a:0f:dc:67:e6:92:18:f7:53:12:4d:bd:1c:6a:16:
34:17:af:42:ba:e4:43:1b:db:3d:70:8f:0a:a1:35:88:c6:78:
54:38:2d:57:bd:09:63:64:1e:7e:f7:80:a0:fa:61:e4:93:7e:
35:c2:6c:e2:b2:0b:3e:14:51:4a:d8:fa:80:87:1a:dd:59:7a:
2e:f7:8f:e3:b1:db:3c:21:89:66:e4:8d:06:3b:3b:cd:c8:3b:
a6:e4:83:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:07:37 2026 by rpki-client