
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/a7a900ce-23ee-33b0-85ce-32106cfd925c.roa
File: a7a900ce-23ee-33b0-85ce-32106cfd925c.roa (raw, json)
Hash identifier: HzYoMitCA7ENE+YQciOItNHeTTs6lRuxl1+LFdcbyzc=
Subject key identifier: 70:17:75:1A:E7:F3:24:FB:F8:91:14:7D:24:BA:97:77:FC:50:F1:8B
Certificate issuer: /CN=b32217e1-2473-49a5-919e-08e1896c5019
Certificate serial: 010D0C9F4328584F63F82169F1773655AF50BBC0
Authority key identifier: 48:AE:0D:F8:A0:D7:74:90:58:A4:5A:B5:23:A6:6E:B7:B1:C0:77:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/a7a900ce-23ee-33b0-85ce-32106cfd925c.roa
Signing time: Sun 04 Oct 2026 13:00:13 +0000
ROA not before: Sun 04 Oct 2026 13:00:13 +0000
ROA not after: Sat 02 Jan 2027 14:00:13 +0000
asID: 22191
IP address blocks: 130.45.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/b32217e1-2473-49a5-919e-08e1896c5019.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/b32217e1-2473-49a5-919e-08e1896c5019.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 06 Oct 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:63:f8:21:69:f1:77:36:55:af:50:bb:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b32217e1-2473-49a5-919e-08e1896c5019
Validity
Not Before: Oct 4 13:00:13 2026 GMT
Not After : Jan 2 14:00:13 2027 GMT
Subject: CN=eb7b471b-752c-453e-84c8-a80460af8583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2d:65:28:6d:88:4d:eb:10:9a:9b:f7:59:3d:
9e:ef:79:9f:c9:08:65:c8:92:b6:5e:13:f1:fe:06:
3c:6c:2a:40:09:8b:90:03:5b:de:fa:79:5a:09:e0:
29:b9:f4:04:60:a7:34:f8:c8:3f:bb:bf:31:9d:8f:
51:4a:53:01:af:06:6a:aa:41:3d:7e:9f:7e:0b:9a:
a5:c6:3c:bc:94:7c:b5:76:01:74:4b:07:18:eb:c6:
c1:86:f2:c9:6b:63:56:ea:ee:ef:d1:91:e3:65:9d:
3e:e7:0a:af:0b:29:c2:f1:d4:78:10:77:34:bc:c1:
d2:07:7c:36:14:ad:09:fa:83:ee:a2:6b:00:6d:fd:
2a:c4:35:00:15:69:3b:a9:02:52:a1:5f:43:1a:f6:
75:ab:05:a2:f7:7e:4d:ca:fa:79:4c:bc:fc:80:73:
5e:3a:07:d4:1f:4a:8e:ac:63:2a:02:83:f6:af:78:
41:7d:64:0e:bb:2b:8b:6b:cc:a9:58:e6:1d:eb:91:
27:23:b4:d9:8e:00:23:d4:2e:ac:2e:ff:ea:3c:c7:
fb:0f:67:51:e5:75:26:b6:2f:ca:44:f6:01:08:29:
96:ec:76:1c:36:ed:ee:1e:96:02:df:dc:0d:74:15:
a7:7a:5d:6d:5f:c2:ef:55:64:d6:55:61:3a:75:57:
86:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:17:75:1A:E7:F3:24:FB:F8:91:14:7D:24:BA:97:77:FC:50:F1:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/a7a900ce-23ee-33b0-85ce-32106cfd925c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/b32217e1-2473-49a5-919e-08e1896c5019.crl
X509v3 Authority Key Identifier:
keyid:48:AE:0D:F8:A0:D7:74:90:58:A4:5A:B5:23:A6:6E:B7:B1:C0:77:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019.cer
sbgp-ipAddrBlock: critical
IPv4:
130.45.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:7c:55:38:0c:51:fc:26:4c:e9:dc:08:ba:57:03:9f:66:d7:
28:af:c0:33:a4:cf:a8:1e:99:85:a6:2d:80:66:04:d7:cd:31:
0e:e5:01:90:5c:0c:38:bc:df:0e:9e:41:5b:61:05:dc:84:04:
ca:54:a2:4f:70:a5:84:de:9d:57:2a:67:e3:ab:eb:3e:3d:b4:
48:09:3c:cd:e2:de:db:02:7f:75:80:8c:e0:b1:10:3a:6e:1f:
49:3b:a4:5c:3d:c9:ee:f9:bb:ca:3b:53:09:ec:b9:36:52:cb:
12:f6:ac:56:0c:db:b8:5b:5a:d2:ee:64:fb:5c:8e:03:c6:73:
43:a7:9f:ba:10:01:43:0d:30:b7:12:c0:a0:04:07:67:83:48:
62:57:fb:2a:93:85:bd:2b:37:8d:f8:1e:6f:9a:ae:58:8c:0b:
33:06:d2:a5:5b:08:14:e6:d0:67:26:28:50:e8:6d:a2:a3:77:
c8:8d:b4:80:16:43:db:68:48:56:d3:0a:60:da:bb:5b:1e:d3:
74:39:18:2a:42:01:b8:b1:42:af:b4:c0:3f:89:a4:75:7c:b6:
d4:44:69:9f:5a:b8:28:d9:5b:43:f1:3c:01:88:ef:bf:2d:b2:
af:cd:a0:8b:e9:08:e1:a4:b0:1a:e9:d6:e2:7c:ee:39:d8:8f:
22:08:79:13
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9j+CFp8Xc2Va9Qu8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjMyMjE3ZTEtMjQ3My00OWE1LTkxOWUtMDhlMTg5NmM1
MDE5MB4XDTI2MTAwNDEzMDAxM1oXDTI3MDEwMjE0MDAxM1owLzEtMCsGA1UEAxMk
ZWI3YjQ3MWItNzUyYy00NTNlLTg0YzgtYTgwNDYwYWY4NTgzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAti1lKG2ITesQmpv3WT2e73mfyQhlyJK2XhPx
/gY8bCpACYuQA1ve+nlaCeApufQEYKc0+Mg/u78xnY9RSlMBrwZqqkE9fp9+C5ql
xjy8lHy1dgF0SwcY68bBhvLJa2NW6u7v0ZHjZZ0+5wqvCynC8dR4EHc0vMHSB3w2
FK0J+oPuomsAbf0qxDUAFWk7qQJSoV9DGvZ1qwWi935Nyvp5TLz8gHNeOgfUH0qO
rGMqAoP2r3hBfWQOuyuLa8ypWOYd65EnI7TZjgAj1C6sLv/qPMf7D2dR5XUmti/K
RPYBCCmW7HYcNu3uHpYC39wNdBWnel1tX8LvVWTWVWE6dVeGgQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHAXdRrn8yT7+JEUfSS6l3f8UPGLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iMzIy
MTdlMS0yNDczLTQ5YTUtOTE5ZS0wOGUxODk2YzUwMTkvYTdhOTAwY2UtMjNlZS0z
M2IwLTg1Y2UtMzIxMDZjZmQ5MjVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjMyMjE3ZTEtMjQ3My00OWE1LTkx
OWUtMDhlMTg5NmM1MDE5L2IzMjIxN2UxLTI0NzMtNDlhNS05MTllLTA4ZTE4OTZj
NTAxOS5jcmwwHwYDVR0jBBgwFoAUSK4N+KDXdJBYpFq1I6Zut7HAd7YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9iMzIyMTdlMS0yNDczLTQ5YTUtOTE5ZS0wOGUx
ODk2YzUwMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHgi2AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACB8VTgMUfwmTOncCLpXA59m1yivwDOkz6gemYWmLYBmBNfNMQ7lAZBc
DDi83w6eQVthBdyEBMpUok9wpYTenVcqZ+Or6z49tEgJPM3i3tsCf3WAjOCxEDpu
H0k7pFw9ye75u8o7UwnsuTZSyxL2rFYM27hbWtLuZPtcjgPGc0Onn7oQAUMNMLcS
wKAEB2eDSGJX+yqThb0rN434Hm+arliMCzMG0qVbCBTm0GcmKFDobaKjd8iNtIAW
Q9toSFbTCmDau1se03Q5GCpCAbixQq+0wD+JpHV8ttREaZ9auCjZW0PxPAGI778t
sq/NoIvpCOGksBrp1uJ87jnYjyIIeRM=
-----END CERTIFICATE-----
Generated at Mon Oct 5 06:51:43 2026 by rpki-client