
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d81f89ec-8739-4b9a-9b38-7e4523271d2a/4507cd92-26c2-35ff-8991-f6015866b695.roa
File: 4507cd92-26c2-35ff-8991-f6015866b695.roa (raw, json)
Hash identifier: 7a0a7tW6PXejU0LWvc1WTqJiOx5QCF3BOS1YS2FAw6M=
Subject key identifier: 67:BF:1C:0A:A9:7B:90:C0:7C:14:93:90:27:82:E2:4E:53:33:E9:0E
Certificate issuer: /CN=d81f89ec-8739-4b9a-9b38-7e4523271d2a
Certificate serial: 010D0C9F4328584DC29ADE99F69081128533DA00
Authority key identifier: 02:2B:B5:E8:02:C3:2D:EF:57:F7:58:6B:CF:83:D4:C4:36:15:81:53
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d81f89ec-8739-4b9a-9b38-7e4523271d2a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d81f89ec-8739-4b9a-9b38-7e4523271d2a/4507cd92-26c2-35ff-8991-f6015866b695.roa
Signing time: Fri 08 May 2026 01:00:24 +0000
ROA not before: Fri 08 May 2026 01:00:24 +0000
ROA not after: Thu 06 Aug 2026 01:00:24 +0000
asID: 399870
IP address blocks: 23.144.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d81f89ec-8739-4b9a-9b38-7e4523271d2a/d81f89ec-8739-4b9a-9b38-7e4523271d2a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d81f89ec-8739-4b9a-9b38-7e4523271d2a/d81f89ec-8739-4b9a-9b38-7e4523271d2a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d81f89ec-8739-4b9a-9b38-7e4523271d2a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 08:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:c2:9a:de:99:f6:90:81:12:85:33:da:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d81f89ec-8739-4b9a-9b38-7e4523271d2a
Validity
Not Before: May 8 01:00:24 2026 GMT
Not After : Aug 6 01:00:24 2026 GMT
Subject: CN=fe20f72a-fcce-423d-b764-b65a6176ee31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:65:01:d0:51:da:33:6a:ef:89:70:15:17:07:
e7:b8:22:25:88:98:76:7e:db:ce:e9:ec:b6:f6:2e:
ec:ed:80:46:f0:c6:3f:52:e5:82:de:6d:82:c4:26:
72:a1:1c:07:a2:b4:45:f2:00:8f:e4:05:ed:23:55:
fb:39:7a:20:e1:b6:a4:42:57:ac:80:3e:a4:00:bb:
cf:04:60:c5:34:e2:05:a9:83:33:f6:02:76:c6:c4:
a5:8c:0a:cc:ed:2d:b2:28:79:95:e4:4f:b7:42:27:
ce:36:42:45:65:3a:b1:d4:8b:95:c8:59:36:7d:fb:
4c:75:42:31:28:b3:d4:cf:b3:f2:c3:69:48:81:16:
18:75:63:63:5c:2e:09:3e:5b:de:95:ba:26:a1:4f:
1d:c4:6c:54:b2:a4:66:f7:85:50:be:91:d0:d8:d5:
52:4b:09:8d:70:3d:94:f2:40:8c:70:70:4d:68:4b:
bc:bb:35:76:74:80:48:12:e2:d3:69:fa:96:19:a4:
f5:2c:ca:4e:ad:82:83:bf:f8:65:6f:33:e1:7c:e8:
b5:11:47:b1:62:ed:b3:2c:fb:10:d2:d7:9b:87:96:
0b:15:5c:c7:29:72:7f:63:1a:7e:c6:52:cc:85:d9:
9a:83:31:8d:92:30:61:2d:76:99:a7:0e:4f:d8:23:
ed:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:BF:1C:0A:A9:7B:90:C0:7C:14:93:90:27:82:E2:4E:53:33:E9:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d81f89ec-8739-4b9a-9b38-7e4523271d2a/4507cd92-26c2-35ff-8991-f6015866b695.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d81f89ec-8739-4b9a-9b38-7e4523271d2a/d81f89ec-8739-4b9a-9b38-7e4523271d2a.crl
X509v3 Authority Key Identifier:
keyid:02:2B:B5:E8:02:C3:2D:EF:57:F7:58:6B:CF:83:D4:C4:36:15:81:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d81f89ec-8739-4b9a-9b38-7e4523271d2a.cer
sbgp-ipAddrBlock: critical
IPv4:
23.144.172.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:5b:ac:7a:ec:05:c5:37:55:6f:f5:c6:c1:3f:ca:24:cc:f6:
b3:2f:90:64:5d:58:33:fd:78:ef:5a:4c:20:03:0a:ad:3f:a6:
64:35:e2:d2:ff:b6:2d:0b:5a:de:83:ea:e5:ec:ee:b2:ad:61:
0f:63:65:8a:2d:e7:55:de:6a:81:68:80:ce:5f:06:54:cb:8a:
84:c7:6c:ae:05:89:9a:bd:c7:8b:08:78:86:1c:9d:84:f6:59:
a8:7a:5b:1b:64:e1:c6:0b:25:a4:5d:9b:5a:ae:df:cb:48:a5:
c4:78:44:43:b3:10:11:8d:fa:86:f0:40:6a:46:65:91:d0:bb:
f1:78:ec:9b:77:7d:e2:8e:74:4b:77:22:0a:d3:9d:1b:1b:fc:
eb:83:3d:5a:8a:c6:b4:03:07:05:b7:dd:59:bf:ce:21:4d:16:
5c:3a:4c:69:72:9e:d3:ea:98:e7:c6:87:d6:41:de:5b:47:0d:
b9:ae:5b:81:3a:ae:d8:f1:5e:bc:9e:f9:e9:ba:38:47:69:80:
33:94:a1:b1:e6:62:2d:c0:d6:d1:97:3a:8c:7e:36:f8:70:17:
0f:24:55:66:f9:2c:19:26:82:90:c1:3c:43:84:bc:c8:e0:56:
b8:1f:bf:af:7b:33:23:13:3a:23:46:e2:a9:2d:47:ec:80:98:
e2:77:28:94
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3Cmt6Z9pCBEoUz2gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDgxZjg5ZWMtODczOS00YjlhLTliMzgtN2U0NTIzMjcx
ZDJhMB4XDTI2MDUwODAxMDAyNFoXDTI2MDgwNjAxMDAyNFowLzEtMCsGA1UEAxMk
ZmUyMGY3MmEtZmNjZS00MjNkLWI3NjQtYjY1YTYxNzZlZTMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+2UB0FHaM2rviXAVFwfnuCIliJh2ftvO6ey2
9i7s7YBG8MY/UuWC3m2CxCZyoRwHorRF8gCP5AXtI1X7OXog4bakQlesgD6kALvP
BGDFNOIFqYMz9gJ2xsSljArM7S2yKHmV5E+3QifONkJFZTqx1IuVyFk2fftMdUIx
KLPUz7Pyw2lIgRYYdWNjXC4JPlvelbomoU8dxGxUsqRm94VQvpHQ2NVSSwmNcD2U
8kCMcHBNaEu8uzV2dIBIEuLTafqWGaT1LMpOrYKDv/hlbzPhfOi1EUexYu2zLPsQ
0tebh5YLFVzHKXJ/Yxp+xlLMhdmagzGNkjBhLXaZpw5P2CPtpwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGe/HAqpe5DAfBSTkCeC4k5TM+kOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9kODFm
ODllYy04NzM5LTRiOWEtOWIzOC03ZTQ1MjMyNzFkMmEvNDUwN2NkOTItMjZjMi0z
NWZmLTg5OTEtZjYwMTU4NjZiNjk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZDgxZjg5ZWMtODczOS00YjlhLTli
MzgtN2U0NTIzMjcxZDJhL2Q4MWY4OWVjLTg3MzktNGI5YS05YjM4LTdlNDUyMzI3
MWQyYS5jcmwwHwYDVR0jBBgwFoAUAiu16ALDLe9X91hrz4PUxDYVgVMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9kODFmODllYy04NzM5LTRiOWEtOWIzOC03ZTQ1
MjMyNzFkMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5CsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ1brHrsBcU3VW/1xsE/yiTM9rMvkGRdWDP9eO9aTCADCq0/pmQ14tL/
ti0LWt6D6uXs7rKtYQ9jZYot51XeaoFogM5fBlTLioTHbK4FiZq9x4sIeIYcnYT2
Wah6Wxtk4cYLJaRdm1qu38tIpcR4REOzEBGN+obwQGpGZZHQu/F47Jt3feKOdEt3
IgrTnRsb/OuDPVqKxrQDBwW33Vm/ziFNFlw6TGlyntPqmOfGh9ZB3ltHDbmuW4E6
rtjxXrye+em6OEdpgDOUobHmYi3A1tGXOox+NvhwFw8kVWb5LBkmgpDBPEOEvMjg
Vrgfv697MyMTOiNG4qktR+yAmOJ3KJQ=
-----END CERTIFICATE-----
Generated at Wed May 13 16:00:00 2026 by rpki-client