
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/3855a988-062b-3485-808c-4e1a37cecf3f.roa
File: 3855a988-062b-3485-808c-4e1a37cecf3f.roa (raw, json)
Hash identifier: 8po+Ya/9MWS2JBU5FfL/umCsRIT4fvk7ERgomIud+dE=
Subject key identifier: AF:8C:EF:5A:58:BA:F4:7D:39:1F:DB:2D:E6:C7:77:C0:01:E1:DD:12
Certificate issuer: /CN=4fce230e-0fe6-4ddf-979c-0be2349b7c0b
Certificate serial: 010D0C9F4328584DAF101994530036164D111100
Authority key identifier: B3:34:32:A1:5F:60:BA:95:31:B8:25:F3:92:BD:4A:F5:D2:53:E7:28
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/3855a988-062b-3485-808c-4e1a37cecf3f.roa
Signing time: Fri 01 May 2026 01:00:24 +0000
ROA not before: Fri 01 May 2026 01:00:24 +0000
ROA not after: Thu 30 Jul 2026 01:00:24 +0000
asID: 11377
IP address blocks: 149.72.1.0/24 maxlen: 24
149.72.4.0/22 maxlen: 22
149.72.8.0/22 maxlen: 22
149.72.12.0/22 maxlen: 22
149.72.19.0/24 maxlen: 24
149.72.20.0/22 maxlen: 22
149.72.24.0/21 maxlen: 21
149.72.32.0/19 maxlen: 19
149.72.64.0/19 maxlen: 19
167.89.0.0/18 maxlen: 18
167.89.64.0/19 maxlen: 19
167.89.96.0/20 maxlen: 20
167.89.112.0/24 maxlen: 24
167.89.114.0/23 maxlen: 23
167.89.116.0/24 maxlen: 24
167.89.117.0/24 maxlen: 24
167.89.118.0/24 maxlen: 24
167.89.119.0/24 maxlen: 24
167.89.120.0/23 maxlen: 23
167.89.122.0/23 maxlen: 23
167.89.124.0/23 maxlen: 23
167.89.126.0/23 maxlen: 23
168.245.0.0/18 maxlen: 18
168.245.64.0/20 maxlen: 20
168.245.80.0/22 maxlen: 22
168.245.84.0/22 maxlen: 22
168.245.88.0/22 maxlen: 22
168.245.92.0/22 maxlen: 22
168.245.96.0/19 maxlen: 19
192.254.112.0/20 maxlen: 20
198.21.0.0/21 maxlen: 21
198.37.144.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:af:10:19:94:53:00:36:16:4d:11:11:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fce230e-0fe6-4ddf-979c-0be2349b7c0b
Validity
Not Before: May 1 01:00:24 2026 GMT
Not After : Jul 30 01:00:24 2026 GMT
Subject: CN=b103d370-cef4-43ae-bbda-5a0fdde04f1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:76:51:87:cb:7a:c9:68:9e:03:1e:3b:95:8f:
71:73:05:e4:38:d9:d8:2c:e8:22:91:d2:60:07:13:
02:0f:9d:eb:66:2b:25:4d:e5:26:25:3e:33:f7:6f:
9a:b0:7b:44:51:df:61:a1:c1:df:da:ef:ed:cd:ad:
69:78:f9:7a:c6:1d:ab:c5:4f:b6:f0:27:ee:0b:96:
08:f8:b8:1e:ec:b2:38:0f:a0:6d:80:21:52:f8:c3:
7a:36:c4:c4:07:14:3a:bb:09:66:45:47:da:c6:f1:
43:b0:02:45:44:c0:25:62:1d:cf:78:6e:95:08:b0:
ec:53:36:e6:e1:df:70:4c:bc:40:05:e6:7e:8f:3f:
4a:2d:e4:62:78:1b:44:b9:b9:b6:a2:70:53:4a:cf:
73:70:cc:e4:e7:3f:31:64:ef:5f:4a:b3:e7:64:67:
3d:64:99:fc:a4:29:00:d0:54:58:ae:df:04:55:80:
8d:50:e4:29:ad:d6:09:e3:17:c4:f8:13:d4:6c:77:
b2:d5:2a:0c:14:02:6b:f6:d2:40:99:a5:d4:91:f3:
a2:65:e7:2f:be:d1:63:93:b1:a0:19:57:9f:6f:f9:
e4:c0:e5:05:ac:17:56:61:47:03:44:f0:94:62:5a:
07:9b:8d:6e:24:b5:96:95:c7:42:ff:b1:2e:b9:73:
a6:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:8C:EF:5A:58:BA:F4:7D:39:1F:DB:2D:E6:C7:77:C0:01:E1:DD:12
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/3855a988-062b-3485-808c-4e1a37cecf3f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.crl
X509v3 Authority Key Identifier:
keyid:B3:34:32:A1:5F:60:BA:95:31:B8:25:F3:92:BD:4A:F5:D2:53:E7:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer
sbgp-ipAddrBlock: critical
IPv4:
149.72.1.0/24
149.72.4.0-149.72.15.255
149.72.19.0-149.72.95.255
167.89.0.0-167.89.112.255
167.89.114.0-167.89.127.255
168.245.0.0/17
192.254.112.0/20
198.21.0.0/21
198.37.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:4e:d6:28:28:58:ee:b0:2e:25:3e:82:51:2a:2a:44:49:13:
16:5d:f6:8f:34:66:6f:86:56:ad:e1:e5:17:82:6c:11:94:21:
a3:46:f1:42:11:af:8e:28:8d:62:1b:3b:04:e5:f6:63:aa:2a:
25:55:1f:4f:c2:20:e4:52:ff:26:5b:cc:a5:08:70:cf:34:ae:
a8:7a:7c:75:ed:54:49:8b:b3:7b:c4:76:ed:da:2c:b0:21:63:
90:10:17:09:00:ac:2d:96:48:7f:2a:85:53:81:7d:4d:68:2c:
22:f7:0c:1e:7e:c5:a1:4b:33:7f:c8:f0:1b:2a:d1:60:b7:a2:
a5:d1:82:67:97:15:41:d3:d9:71:b3:4c:d5:0b:d0:b0:a4:f8:
1b:63:e4:48:11:19:8b:a7:d9:a2:ff:e4:12:65:41:ed:6a:4f:
95:3c:3c:e3:52:d7:da:94:d6:37:39:65:49:f5:e1:bd:52:92:
c4:13:c3:ef:4f:81:3e:4b:85:cd:c9:83:8a:2d:b1:46:2d:32:
40:b9:18:40:be:0f:2c:13:87:51:27:0a:f5:5f:30:2a:8f:22:
9d:ee:a8:87:20:2b:c9:bf:7a:73:c7:0b:f4:f0:ca:ea:63:39:
c2:dd:e8:ce:60:f5:99:3e:5d:88:fd:63:3d:33:c0:14:70:30:
10:49:ab:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:49:12 2026 by rpki-client