
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/884e19ff-f655-3f4a-8e03-25fdb0a0d273.roa
File: 884e19ff-f655-3f4a-8e03-25fdb0a0d273.roa (raw, json)
Hash identifier: PWxea4pXDKv7lckLgOGJ+uXrxQd0luV/H3ElP3fKpeA=
Subject key identifier: 84:21:EA:FF:6C:06:4A:84:38:87:75:5B:F3:BA:A2:24:AB:31:F9:C5
Certificate issuer: /CN=a32c2393-27b5-4456-8f30-13915a38d80a
Certificate serial: 010D0C9F4328584D300A18633B136B1F5DDB5600
Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/884e19ff-f655-3f4a-8e03-25fdb0a0d273.roa
Signing time: Mon 16 Mar 2026 13:00:40 +0000
ROA not before: Mon 16 Mar 2026 13:00:40 +0000
ROA not after: Sun 14 Jun 2026 13:00:40 +0000
asID: 14114
IP address blocks: 157.133.60.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:30:0a:18:63:3b:13:6b:1f:5d:db:56:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a
Validity
Not Before: Mar 16 13:00:40 2026 GMT
Not After : Jun 14 13:00:40 2026 GMT
Subject: CN=708a5219-0164-419b-8688-d1dfa551e353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:22:d1:9e:39:eb:96:08:16:1d:53:59:5c:1a:
57:38:cb:44:e1:c6:38:62:64:e7:57:fb:c8:a2:52:
ce:a5:a9:31:81:7b:65:86:2d:11:31:97:a5:ac:82:
5c:c2:c4:85:03:2f:cf:eb:33:e0:db:23:b8:a4:73:
05:58:2b:1d:f0:d3:9c:96:9f:fa:e0:50:a6:f6:0a:
ac:22:88:54:a4:96:aa:0c:cc:89:de:41:2d:e0:15:
17:2d:2f:b2:46:dc:28:62:6b:72:1a:c7:4f:79:7f:
88:c6:5e:85:e8:48:13:ce:b1:ff:48:de:06:f3:66:
36:b5:cd:ea:c0:48:80:43:36:8e:c9:be:a5:92:dd:
a8:66:bc:ad:d5:03:10:b1:ae:8f:7b:67:3d:3d:6f:
03:7a:83:70:78:b3:e8:4b:cf:fb:04:8d:02:c0:6c:
1a:6e:c6:2d:8c:43:a4:2c:15:0a:c6:f1:6b:88:2a:
0a:47:06:0a:59:d0:25:3a:09:b0:ef:b2:24:c3:2e:
1a:07:39:71:e6:28:98:75:79:69:53:ea:b4:04:e0:
8e:2f:a6:33:3e:57:91:c4:84:43:27:b3:94:15:fa:
3e:a7:3f:1e:08:58:0f:4d:fe:96:81:22:3d:f4:d9:
d7:72:2f:70:c8:ab:15:be:57:55:cf:d4:79:97:07:
c2:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:21:EA:FF:6C:06:4A:84:38:87:75:5B:F3:BA:A2:24:AB:31:F9:C5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/884e19ff-f655-3f4a-8e03-25fdb0a0d273.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl
X509v3 Authority Key Identifier:
keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
sbgp-ipAddrBlock: critical
IPv4:
157.133.60.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:85:ac:c3:c9:24:33:14:a2:8a:b6:f6:74:7e:2a:59:31:c5:
79:c3:5d:29:2e:e9:8d:88:cf:64:fb:94:78:07:6f:75:5d:36:
e7:1b:6e:78:b2:e3:07:17:40:6d:36:f5:79:25:36:6a:23:64:
fe:01:f0:4a:4c:29:3e:04:9a:2e:6e:18:ca:74:ff:97:37:23:
c4:d2:ed:4f:f2:30:a5:66:cb:c4:17:f5:5d:08:a8:82:66:1b:
69:70:3d:4a:97:67:d5:09:f1:0c:eb:60:8d:6f:57:df:da:1f:
a8:94:bb:7e:ab:a5:54:3b:f8:c6:05:31:c4:e7:a6:c2:a2:27:
15:0a:75:7a:b5:43:36:89:cf:1b:88:5b:68:e6:8b:05:03:24:
ba:d9:de:9a:42:a6:91:2f:94:ba:a5:41:05:44:1f:63:e6:10:
b3:f3:96:83:ce:db:88:30:35:b1:49:dd:19:f7:0a:f6:06:7f:
cb:7f:bd:27:9a:22:89:cb:7b:53:84:9f:7b:d7:57:34:d4:4b:
b9:43:6a:39:98:2c:ca:a5:9e:2d:13:41:38:75:39:30:b3:87:
2b:e5:ca:c4:de:31:b1:a1:d5:25:96:73:90:3c:b2:19:72:c2:
27:57:e8:df:01:dc:c3:62:8d:38:03:c8:76:d3:5e:0f:e5:cf:
e3:33:90:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:21:42 2026 by rpki-client