
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/3be94cbf-9435-3c9c-bb9d-6db1de3d9aa3.roa
File: 3be94cbf-9435-3c9c-bb9d-6db1de3d9aa3.roa (raw, json)
Hash identifier: gBJRZd9RF9JedNAkkEal3hOFv78dl8e5TpxDqBAfRaI=
Subject key identifier: B1:45:75:B1:28:D1:7B:55:71:95:56:8D:07:44:FD:37:79:FA:B3:CA
Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial: 010D0C9F4328584D44FA74D7B6A40C5BDB8005A0
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/3be94cbf-9435-3c9c-bb9d-6db1de3d9aa3.roa
Signing time: Tue 24 Mar 2026 01:00:31 +0000
ROA not before: Tue 24 Mar 2026 01:00:31 +0000
ROA not after: Mon 22 Jun 2026 01:00:31 +0000
asID: 23473
IP address blocks: 173.230.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:44:fa:74:d7:b6:a4:0c:5b:db:80:05:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Validity
Not Before: Mar 24 01:00:31 2026 GMT
Not After : Jun 22 01:00:31 2026 GMT
Subject: CN=24dd96da-402c-4d45-b382-8dff3c64ac89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:30:ae:a8:6f:3e:7e:d0:70:cf:f5:99:0e:39:
ed:b7:24:66:d2:a5:ed:a8:85:a5:8a:57:35:78:3e:
35:34:ba:13:2c:bb:ca:54:cf:56:60:71:db:ae:38:
25:fa:cd:51:ce:21:8f:a6:16:3b:be:8c:30:e4:0b:
5a:be:1a:21:1f:5e:67:9c:d7:6f:0d:8a:34:37:7b:
e8:82:b2:a5:2c:b5:0b:1d:b8:c8:03:e4:f7:0d:99:
57:90:32:ff:c7:a1:c3:6b:67:34:47:70:7e:a6:67:
27:ec:20:08:b2:7f:f4:d0:18:b6:f8:3e:f2:15:45:
b7:8e:63:e0:1a:f1:26:eb:6a:0f:e2:41:98:34:79:
d7:17:54:bd:ea:6a:4d:47:2a:b6:1b:f5:06:38:ee:
3c:ef:c0:3e:97:da:2f:4a:2f:08:99:44:a4:bd:86:
92:a7:bb:11:da:a4:bf:e1:09:6c:94:de:9c:ad:6e:
dd:27:a5:93:b9:7a:bc:11:18:58:6f:13:21:48:c2:
27:ce:41:75:7e:b1:1e:1d:16:83:12:30:b9:52:a5:
09:83:67:21:0d:66:26:1a:87:93:b9:80:8d:72:5d:
bf:6e:80:8d:b1:dd:38:4a:57:47:61:46:8d:0d:bb:
47:0b:26:f5:1b:ad:74:14:5d:93:8a:5c:a3:45:d6:
9c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:45:75:B1:28:D1:7B:55:71:95:56:8D:07:44:FD:37:79:FA:B3:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/3be94cbf-9435-3c9c-bb9d-6db1de3d9aa3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
X509v3 Authority Key Identifier:
keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
sbgp-ipAddrBlock: critical
IPv4:
173.230.52.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:35:88:c5:1c:e6:c5:d1:71:58:7c:89:58:b2:3c:41:7c:f5:
08:6c:d4:a8:4a:6b:32:33:bf:76:93:a7:6c:5b:19:98:ee:cb:
4a:30:f8:9f:5d:06:f7:7c:db:29:30:e2:43:db:8d:78:f9:91:
8f:9c:6f:28:fa:de:80:4f:5a:ed:41:56:02:09:d9:66:27:9f:
4e:5f:00:f7:9c:8f:65:c5:27:bb:37:8f:a3:55:24:f9:18:59:
18:24:cf:4b:af:ba:be:e6:b9:77:4b:82:f2:21:ff:51:ef:14:
97:fb:8b:ef:62:de:8c:45:36:d3:8a:59:61:42:6a:e5:d1:24:
a0:20:83:92:63:32:c7:0a:07:be:f7:67:92:89:91:ad:19:82:
ad:f4:fb:51:92:1c:43:eb:d4:50:1e:64:22:a7:1b:56:c0:56:
e3:3c:23:d6:19:18:3a:ba:a4:cd:7a:68:18:1b:dc:ba:73:b0:
d1:05:48:bf:4c:de:a7:fc:18:7c:98:5a:c0:cc:5a:bf:3a:76:
1b:3a:ca:d5:b2:c8:89:fd:74:a6:01:7e:ce:1e:5e:09:6b:ae:
61:f4:01:29:87:16:c2:f1:24:4f:f7:b8:fe:eb:04:b1:4c:fa:
83:46:6a:ae:6f:d3:f8:c8:77:3b:2d:d5:10:f2:3b:ca:02:1b:
9e:d6:57:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:27:58 2026 by rpki-client