
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/a83f508b-01f3-3b6d-86bf-4bc5a7a71caa.roa
File: a83f508b-01f3-3b6d-86bf-4bc5a7a71caa.roa (raw, json)
Hash identifier: rx+/qRn6zpX3Z7n+f+GQ2ra/5cnySVV4hPG5vITK3Eg=
Subject key identifier: 78:34:B0:88:B3:6B:6D:B9:08:B9:A3:76:47:40:C8:F1:3E:CF:79:E9
Certificate issuer: /CN=5a154205-b480-44eb-8ce6-252aa97d28bd
Certificate serial: 010D0C9F4328584DA97ABA14717BAFC5CA964500
Authority key identifier: 67:48:C7:C2:28:0E:25:C4:FF:E9:BC:FB:25:2B:1B:BA:8D:2F:53:C5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/a83f508b-01f3-3b6d-86bf-4bc5a7a71caa.roa
Signing time: Wed 29 Apr 2026 01:00:23 +0000
ROA not before: Wed 29 Apr 2026 01:00:23 +0000
ROA not after: Tue 28 Jul 2026 01:00:23 +0000
asID: 138415
IP address blocks: 43.225.124.0/22 maxlen: 32
43.229.112.0/22 maxlen: 32
43.240.236.0/22 maxlen: 32
43.243.188.0/22 maxlen: 32
45.114.104.0/22 maxlen: 32
103.37.0.0/22 maxlen: 32
103.39.16.0/22 maxlen: 32
103.44.88.0/22 maxlen: 32
103.48.132.0/22 maxlen: 32
103.54.60.0/22 maxlen: 32
103.199.100.0/22 maxlen: 32
137.59.16.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/5a154205-b480-44eb-8ce6-252aa97d28bd.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/5a154205-b480-44eb-8ce6-252aa97d28bd.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:a9:7a:ba:14:71:7b:af:c5:ca:96:45:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a154205-b480-44eb-8ce6-252aa97d28bd
Validity
Not Before: Apr 29 01:00:23 2026 GMT
Not After : Jul 28 01:00:23 2026 GMT
Subject: CN=5385bc67-6b88-44ef-a934-858500c91130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:66:bf:a9:b9:62:e6:29:fd:de:60:40:67:a5:
aa:87:3d:b2:1b:91:1b:f5:51:d6:bd:dd:8d:e0:0c:
2c:fa:35:2a:e5:de:1e:19:eb:3d:86:20:89:cc:6c:
75:3c:0c:e8:69:61:25:77:fd:90:40:3f:83:8f:01:
74:e9:26:5d:04:b3:2e:0c:4a:43:92:4b:67:81:dc:
f8:78:0a:a7:5f:0f:9c:37:72:38:a4:29:a1:c8:48:
77:e4:7c:17:e3:23:e5:3b:ee:41:c2:b2:5c:52:60:
dd:2e:bf:97:89:30:bd:c8:5c:74:44:08:59:c2:42:
42:e3:41:3d:91:f5:7c:df:3d:27:2d:b2:24:08:36:
32:e7:9f:dc:15:95:8b:36:a7:22:a3:e3:22:d0:a0:
b8:72:7d:c7:a5:25:4c:bc:da:16:0e:05:2f:25:d9:
8b:52:49:04:e8:2b:cb:c8:3a:ba:ba:f9:71:3f:0a:
46:9a:c1:e7:90:9b:dc:7d:99:aa:8f:3b:88:87:c9:
6f:c7:f9:94:d4:2d:17:b3:e3:e4:3c:cc:68:85:af:
f9:0a:ee:ad:17:ff:6a:f5:52:1e:e9:98:59:e4:c0:
66:d9:0f:00:f7:a3:af:bf:2b:18:1f:3e:36:b7:73:
91:1b:db:de:42:a5:6a:94:39:4d:37:77:4a:64:3e:
07:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:34:B0:88:B3:6B:6D:B9:08:B9:A3:76:47:40:C8:F1:3E:CF:79:E9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/a83f508b-01f3-3b6d-86bf-4bc5a7a71caa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd/5a154205-b480-44eb-8ce6-252aa97d28bd.crl
X509v3 Authority Key Identifier:
keyid:67:48:C7:C2:28:0E:25:C4:FF:E9:BC:FB:25:2B:1B:BA:8D:2F:53:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5a154205-b480-44eb-8ce6-252aa97d28bd.cer
sbgp-ipAddrBlock: critical
IPv4:
43.225.124.0/22
43.229.112.0/22
43.240.236.0/22
43.243.188.0/22
45.114.104.0/22
103.37.0.0/22
103.39.16.0/22
103.44.88.0/22
103.48.132.0/22
103.54.60.0/22
103.199.100.0/22
137.59.16.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:76:df:d6:6d:9b:01:5f:13:0d:40:9b:7a:97:64:7f:85:bb:
c2:1c:e0:6e:a3:ea:0c:4f:9c:38:2a:99:51:c1:38:40:1f:dc:
34:31:12:b7:be:5c:72:5c:06:c2:b0:5f:7b:be:19:16:cc:5d:
af:cb:b9:25:bf:dc:86:06:85:d2:a0:98:46:1f:5a:84:64:b8:
83:a2:d5:f1:c2:32:9d:0f:4c:42:97:2b:d5:21:16:e8:61:66:
d4:15:ee:7d:18:ab:91:91:d9:eb:4b:80:78:cc:d0:40:44:09:
ff:3a:0a:d9:b4:94:be:33:44:43:2d:ef:db:ef:33:ae:6f:ac:
d9:2e:7f:d2:4d:b5:fb:20:26:a2:7a:fd:29:5b:63:d4:12:5b:
59:78:94:2d:c3:83:25:10:20:ba:2e:dc:84:c2:57:80:f3:11:
fa:0c:e1:dc:3d:b1:aa:83:0d:13:0b:35:d3:8b:28:e8:3f:2d:
ff:2c:c0:f7:2f:26:3e:a0:42:cc:b6:5a:35:02:3f:b0:7b:12:
69:e1:b6:58:d6:b5:a3:34:b6:9f:24:76:a9:d4:61:9e:17:95:
6a:c1:2e:9e:dd:74:52:d0:af:4b:db:46:63:ba:a0:41:d1:51:
90:25:47:38:44:d0:48:1b:59:7a:20:78:20:43:9e:e8:4c:cb:
7b:57:09:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:29:28 2026 by rpki-client