
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/14c35ee5-b49d-3b99-820a-3475199d9501.roa
File: 14c35ee5-b49d-3b99-820a-3475199d9501.roa (raw, json)
Hash identifier: XZn3PuZhC8BFKxxi8ZwPE0qIkahEc47fMO7s7+uCgP8=
Subject key identifier: F3:D4:23:5F:75:F4:83:40:3D:BD:78:4E:48:61:D6:AC:75:7A:76:31
Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial: 010D0C9F4328584D9A2016227C364BD348823D80
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/14c35ee5-b49d-3b99-820a-3475199d9501.roa
Signing time: Thu 23 Apr 2026 13:00:32 +0000
ROA not before: Thu 23 Apr 2026 13:00:32 +0000
ROA not after: Wed 22 Jul 2026 13:00:32 +0000
asID: 62904
IP address blocks: 173.232.140.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:9a:20:16:22:7c:36:4b:d3:48:82:3d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Validity
Not Before: Apr 23 13:00:32 2026 GMT
Not After : Jul 22 13:00:32 2026 GMT
Subject: CN=102cfb3a-cd16-4dfa-927b-55b33f23ec80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:20:cb:81:27:fb:6c:7d:14:42:3a:0a:fd:6d:
50:73:f0:bd:27:75:c2:8f:6a:15:80:ac:91:ff:4e:
bf:9a:cd:54:5c:b4:4b:d2:76:f5:2f:35:b6:a6:71:
45:20:9a:5a:34:a8:10:8d:47:02:81:fc:7d:bb:2b:
a4:77:3b:51:55:4e:38:75:16:d0:71:34:9a:ac:d3:
77:f7:55:09:23:4a:f5:a2:e2:a3:1e:95:98:06:e0:
04:60:f5:d4:14:52:82:68:8c:9c:87:c7:d3:c7:54:
b7:5c:d2:fd:93:54:53:b0:ea:4e:a3:d2:2e:84:66:
83:3c:43:a8:d7:ba:52:c8:dd:ab:76:30:ae:7e:b7:
22:e4:ea:d2:3b:37:b8:76:a6:b6:45:81:8a:2b:91:
3f:89:fa:29:e0:74:98:8d:07:64:c3:2e:34:42:6e:
d0:36:22:22:8f:4e:f9:12:6a:ce:d9:7d:6d:42:81:
6f:5a:e5:c4:b4:3e:b6:05:4a:ef:83:86:a8:10:8c:
c5:66:80:dd:52:ab:98:92:57:5c:c9:79:70:e9:b3:
61:c6:b7:3a:5e:f1:df:e2:1d:fc:de:69:87:92:9f:
af:69:b3:17:b9:b2:91:5a:2c:03:5b:c5:23:f4:d5:
c3:79:1a:e7:89:9d:31:5f:ff:5c:4c:64:71:6b:46:
70:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:D4:23:5F:75:F4:83:40:3D:BD:78:4E:48:61:D6:AC:75:7A:76:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/14c35ee5-b49d-3b99-820a-3475199d9501.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
X509v3 Authority Key Identifier:
keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
sbgp-ipAddrBlock: critical
IPv4:
173.232.140.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:79:3a:76:e6:95:8e:bc:bd:75:60:b0:39:11:1a:65:c1:6f:
25:3c:06:87:c3:d1:f6:bd:28:5c:8c:e8:59:91:9f:8c:df:9c:
6d:e8:94:37:ff:f6:f4:0b:38:f0:2a:d2:07:7a:9d:0b:56:0c:
7e:57:01:c5:61:5a:b1:d7:ed:eb:e9:2e:17:42:bd:8c:40:38:
c6:56:27:d6:db:ee:34:fb:0b:8b:ba:71:8c:e4:c5:cf:fe:dd:
7f:51:03:cc:ef:20:ef:df:6f:09:4f:8e:ca:70:57:18:97:a9:
3b:aa:f3:6d:1c:2d:85:ef:c3:34:4b:c1:d0:11:ee:c0:01:bd:
2e:c9:04:6c:d8:7d:dc:b9:0a:48:b3:c5:0b:bc:44:5c:57:a8:
76:4f:33:23:46:6a:0b:e1:b3:62:ec:f3:25:cd:39:71:1a:37:
18:e8:26:dc:16:b4:32:1e:d0:f3:be:fc:62:5c:3d:55:c8:c7:
61:6f:dc:2a:43:ee:6a:ca:97:5e:79:9d:e2:bc:12:36:90:68:
49:23:b0:5c:a6:58:fc:82:e6:18:fa:5a:8e:75:f1:82:b2:96:
4f:3e:61:a2:95:6e:43:f0:be:64:f4:a3:67:4e:5e:d1:29:ab:
06:bb:56:02:64:86:5f:7a:54:2b:e4:39:cb:c6:ff:36:b6:19:
5e:ca:a9:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:18:03 2026 by rpki-client