
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/4a48ae92-64c5-3e26-981f-085a604cbb12.roa
File: 4a48ae92-64c5-3e26-981f-085a604cbb12.roa (raw, json)
Hash identifier: kTSKqNDsWGF/vRmq31rN6q5mtLZIu/Bkp20Suyc3YyQ=
Subject key identifier: 53:19:4B:AC:1F:32:3B:C4:05:FF:DF:BC:2B:5B:8D:0B:E9:BE:C0:6A
Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
Certificate serial: 010D0C9F4328584D98BA9F0CC35017D43D5FEE00
Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/4a48ae92-64c5-3e26-981f-085a604cbb12.roa
Signing time: Thu 23 Apr 2026 01:00:24 +0000
ROA not before: Thu 23 Apr 2026 01:00:24 +0000
ROA not after: Wed 22 Jul 2026 01:00:24 +0000
asID: 31898
IP address blocks: 144.25.40.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:98:ba:9f:0c:c3:50:17:d4:3d:5f:ee:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44
Validity
Not Before: Apr 23 01:00:24 2026 GMT
Not After : Jul 22 01:00:24 2026 GMT
Subject: CN=79d034ae-0262-48fe-9769-3e5e3dfc921a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:91:b9:2a:ef:ef:2c:46:a7:a5:b0:96:74:6d:
b7:e1:3e:8c:e8:21:7f:87:d4:6b:34:c9:51:d2:23:
93:f1:b6:3d:8f:9c:78:c5:ff:af:bb:84:0b:65:84:
a7:e9:89:60:17:74:e1:12:47:f7:1a:77:8a:c7:fc:
81:04:82:ac:b0:d8:cb:2c:e6:f5:5b:8b:ba:57:b4:
a5:c4:07:a9:79:83:3d:b4:84:65:41:09:56:45:4f:
ed:aa:ab:90:1a:64:53:3e:17:cb:a1:ce:7e:c8:2c:
7a:b3:57:a6:2a:06:21:99:2e:97:51:ba:4a:69:12:
d0:18:f3:4b:a3:34:e7:80:8f:28:65:f4:19:f6:1b:
0c:43:99:64:e3:e5:9e:41:38:c0:99:62:5e:84:6f:
4c:03:5f:02:7f:ae:5a:d5:fc:41:48:22:ac:f5:f9:
a9:5c:35:a0:32:fa:b6:fc:5d:da:b4:d7:82:39:24:
13:cd:6f:91:6c:5e:42:3d:2f:1b:34:02:7a:c6:96:
72:ed:c7:26:cc:e1:b6:c1:a4:d8:d1:46:30:2f:c2:
17:d5:04:c6:50:67:77:63:7e:ac:b4:9b:af:fb:a0:
ae:bc:fc:99:72:8c:8e:c5:ca:b0:7d:fb:5a:26:82:
cb:56:d7:9b:24:92:a7:df:2a:58:ea:a0:ed:73:10:
aa:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:19:4B:AC:1F:32:3B:C4:05:FF:DF:BC:2B:5B:8D:0B:E9:BE:C0:6A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/4a48ae92-64c5-3e26-981f-085a604cbb12.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl
X509v3 Authority Key Identifier:
keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer
sbgp-ipAddrBlock: critical
IPv4:
144.25.40.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:da:6a:cb:e6:7a:01:e3:77:97:4a:55:39:47:62:09:f4:a0:
f2:0c:7f:ef:69:2f:e0:8a:03:5f:74:4b:fd:fd:50:ed:d2:7e:
54:e8:f1:a9:d2:ec:2b:51:96:c1:aa:20:9c:6a:c3:64:9f:74:
52:45:99:76:7c:9e:e6:67:eb:6c:35:93:a7:5f:02:5a:d8:39:
23:0f:bb:f0:02:a1:29:b8:48:e0:86:8c:78:2e:e4:9a:97:83:
1d:ee:73:22:e3:71:c7:0d:d9:b9:c4:da:1c:d1:44:8e:a1:c0:
1d:d9:99:0d:26:aa:cd:9c:04:77:c0:81:fd:cc:05:a0:83:50:
8b:c9:d0:08:4b:97:31:df:08:b2:70:eb:40:73:f4:29:14:a8:
75:e3:e5:1f:a5:3e:ce:bf:d0:e2:c3:58:27:99:a0:81:25:45:
30:9b:13:14:73:6d:2e:4d:82:14:19:74:94:7f:d8:fb:09:f7:
8a:5f:e9:56:f8:fd:4d:4f:4f:b4:1c:93:b8:7c:9a:12:60:c7:
2f:70:3e:32:66:87:7f:20:68:fe:51:ad:9a:70:d4:e8:88:62:
73:67:77:49:28:02:98:65:d5:e0:72:57:d5:e8:50:9c:01:15:
4d:68:68:fa:c8:4b:d0:44:01:bc:5e:2d:63:d9:9a:ab:94:5d:
35:b7:13:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:28:18 2026 by rpki-client