
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4680d191-3a38-4cef-89dd-c84240e3a1cf/85f6b1e1-8345-33b2-9c2a-4c59ec9d4566.roa
File: 85f6b1e1-8345-33b2-9c2a-4c59ec9d4566.roa (raw, json)
Hash identifier: MtwnHPNMtEQAPVqUh3GS84oYXTxthrTOT14tLz0x4Uo=
Subject key identifier: 19:F0:41:94:60:43:C0:54:34:D9:A7:D0:5B:DE:CB:67:8C:B1:38:15
Certificate issuer: /CN=4680d191-3a38-4cef-89dd-c84240e3a1cf
Certificate serial: 010D0C9F4328584E7FFA507B20F560DB62FF4380
Authority key identifier: 40:11:85:32:F0:2C:81:06:59:39:53:27:44:F4:29:80:68:DE:64:17
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4680d191-3a38-4cef-89dd-c84240e3a1cf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4680d191-3a38-4cef-89dd-c84240e3a1cf/85f6b1e1-8345-33b2-9c2a-4c59ec9d4566.roa
Signing time: Tue 14 Jul 2026 21:00:12 +0000
ROA not before: Tue 14 Jul 2026 21:00:12 +0000
ROA not after: Mon 12 Oct 2026 21:00:12 +0000
asID: 25968
IP address blocks: 147.174.0.0/16 maxlen: 16
147.174.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4680d191-3a38-4cef-89dd-c84240e3a1cf/4680d191-3a38-4cef-89dd-c84240e3a1cf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4680d191-3a38-4cef-89dd-c84240e3a1cf/4680d191-3a38-4cef-89dd-c84240e3a1cf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4680d191-3a38-4cef-89dd-c84240e3a1cf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:7f:fa:50:7b:20:f5:60:db:62:ff:43:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4680d191-3a38-4cef-89dd-c84240e3a1cf
Validity
Not Before: Jul 14 21:00:12 2026 GMT
Not After : Oct 12 21:00:12 2026 GMT
Subject: CN=64d66109-9ae7-4883-acba-cd18b9b59f43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:bb:11:7c:6a:f8:74:af:ef:d3:ba:f9:68:af:
ab:ae:97:0d:9a:51:b7:21:ed:1b:35:04:71:37:6f:
9a:9e:0d:33:1d:48:cb:77:b6:b3:5f:0a:71:9a:94:
a0:40:4b:91:af:b0:b0:05:61:26:ff:7d:96:1b:be:
5d:fa:e1:0e:bf:c9:48:e4:6f:69:63:be:86:b6:61:
80:cd:63:b5:cc:18:69:6c:31:b5:2f:10:b5:b1:e7:
d7:c8:a6:08:90:28:99:72:c7:76:37:90:b4:73:c0:
f5:ef:db:1e:01:ab:09:68:ce:b8:7a:cc:f2:f3:f2:
09:10:68:07:cc:79:7b:21:a8:67:6d:8f:72:6d:eb:
98:74:1f:60:92:06:4b:bf:03:0c:f9:d8:4c:12:e9:
50:38:8c:b0:7a:62:84:95:3a:ab:c8:2d:88:5f:d4:
35:e5:6e:3a:e4:2f:74:2d:d4:a8:46:23:1b:18:66:
00:d7:fc:4d:19:d0:51:2b:61:ca:82:7b:3e:ca:ce:
20:47:0e:84:23:87:bd:e3:cc:33:d9:21:4e:6e:8d:
d4:39:68:10:f7:5c:f2:00:67:d7:e7:f7:ac:7b:1f:
65:76:21:f3:a7:5c:82:4b:22:f8:ff:2c:a9:c7:6b:
b3:cf:3e:c9:b3:3b:38:be:cd:ad:8f:60:60:df:34:
35:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:F0:41:94:60:43:C0:54:34:D9:A7:D0:5B:DE:CB:67:8C:B1:38:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4680d191-3a38-4cef-89dd-c84240e3a1cf/85f6b1e1-8345-33b2-9c2a-4c59ec9d4566.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4680d191-3a38-4cef-89dd-c84240e3a1cf/4680d191-3a38-4cef-89dd-c84240e3a1cf.crl
X509v3 Authority Key Identifier:
keyid:40:11:85:32:F0:2C:81:06:59:39:53:27:44:F4:29:80:68:DE:64:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4680d191-3a38-4cef-89dd-c84240e3a1cf.cer
sbgp-ipAddrBlock: critical
IPv4:
147.174.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:b8:16:03:38:cd:be:9c:07:6a:0a:ae:f1:1b:6d:b0:55:e3:
ec:fa:29:2b:36:ae:4c:a8:99:48:b3:f0:10:b8:a6:57:27:f4:
61:14:5f:6e:ae:72:21:d2:4d:c8:2d:2a:8d:5a:50:19:1b:50:
f2:d3:4b:e8:5e:bf:42:d6:ae:81:44:50:80:a5:21:8e:c9:db:
f3:93:a3:50:0a:8e:2b:ba:62:89:ac:6f:1d:c3:d9:07:b0:32:
0e:26:0d:31:91:27:2d:84:c9:3d:46:58:0a:5d:52:f1:dd:48:
a7:c8:11:51:98:62:0a:df:cd:04:c9:f6:2a:cf:5c:71:38:fe:
7d:ee:22:f7:4d:7d:fc:83:66:61:81:fd:67:50:24:73:ca:88:
55:86:95:9a:d9:af:64:dd:9e:f4:4a:04:89:fe:69:a3:0e:f9:
51:32:41:09:a6:0b:7b:42:cf:59:92:1b:b2:b2:ce:4c:04:44:
f1:0a:a3:13:4d:b2:bd:bb:c8:1f:0e:b2:c3:6a:18:3f:1e:62:
d0:80:3b:53:a7:2b:fb:45:2b:c8:eb:c4:1b:b2:41:5d:b6:ab:
e3:85:5e:91:45:2e:b4:c6:45:ed:4c:25:93:87:b7:78:1e:e4:
76:9f:59:8f:4c:85:2a:a7:98:38:bb:a3:b9:71:c4:6d:a5:b7:
55:e4:7e:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:36:47 2026 by rpki-client