
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/0649525a-4f78-38b5-9509-f91bdf00cd84.roa
File: 0649525a-4f78-38b5-9509-f91bdf00cd84.roa (raw, json)
Hash identifier: voGVv6KEeBM0ncL4vyX5thIF9MH+N8YoPOcdfVFwMPA=
Subject key identifier: A9:2C:A1:59:C0:A0:7F:04:D5:BB:22:BF:B7:87:9E:38:09:8A:CE:B9
Certificate issuer: /CN=22f3c152-12b6-441e-b4d6-66feab870c4d
Certificate serial: 010D0C9F4328584D7A052E37DCCC9AD1B2006240
Authority key identifier: 91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/0649525a-4f78-38b5-9509-f91bdf00cd84.roa
Signing time: Sun 12 Apr 2026 01:00:24 +0000
ROA not before: Sun 12 Apr 2026 01:00:24 +0000
ROA not after: Sat 11 Jul 2026 01:00:24 +0000
asID: 53356
IP address blocks: 45.62.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:7a:05:2e:37:dc:cc:9a:d1:b2:00:62:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22f3c152-12b6-441e-b4d6-66feab870c4d
Validity
Not Before: Apr 12 01:00:24 2026 GMT
Not After : Jul 11 01:00:24 2026 GMT
Subject: CN=574ae78a-f9d7-4b7f-9c56-b176cbfe290d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:c3:f7:a9:c6:ff:ae:c2:c2:09:27:c0:5f:28:
79:67:96:a5:0c:f8:35:e8:29:73:ec:64:64:c3:2f:
c5:03:48:5e:2d:c7:bd:33:38:99:ba:6f:25:69:59:
3a:ad:cc:34:c6:3f:be:f3:05:1f:d9:4e:26:8d:54:
9c:c1:b8:8b:ab:9e:9d:0d:93:bd:b7:ac:78:3e:28:
de:74:7c:f2:22:d1:7e:ac:fa:4d:84:6d:e7:cc:d3:
e8:be:4a:54:2c:86:8b:df:cc:c0:b3:92:b3:d9:47:
e4:72:79:6e:eb:f5:fa:2b:91:e7:25:76:10:3a:bc:
d4:02:84:3c:44:7b:4c:88:96:95:71:d0:5a:ce:d4:
9d:22:3e:8e:1f:2c:92:7f:a0:e2:3a:3d:0b:af:40:
17:e7:93:5a:56:0f:53:2b:0d:61:a1:7c:45:08:c3:
fc:2d:09:f0:b2:73:31:31:86:3b:53:b9:bb:41:da:
56:07:97:9f:ed:29:58:96:54:22:68:2e:3f:d4:e8:
48:d1:7c:84:ab:60:51:ef:28:e6:ec:0c:5c:06:ad:
ff:63:8c:92:9d:d5:f1:de:73:fd:78:17:5e:61:80:
2e:74:36:53:f2:30:97:36:cf:0f:66:0e:20:79:96:
10:dc:f1:ce:66:20:c7:6d:0e:40:65:cb:a6:59:00:
a2:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:2C:A1:59:C0:A0:7F:04:D5:BB:22:BF:B7:87:9E:38:09:8A:CE:B9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/0649525a-4f78-38b5-9509-f91bdf00cd84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d/22f3c152-12b6-441e-b4d6-66feab870c4d.crl
X509v3 Authority Key Identifier:
keyid:91:E4:42:1F:98:61:EC:40:32:B2:F9:C2:56:54:6F:20:D3:AF:BD:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/22f3c152-12b6-441e-b4d6-66feab870c4d.cer
sbgp-ipAddrBlock: critical
IPv4:
45.62.171.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:d7:93:5f:08:b2:39:75:4f:6e:5a:16:51:30:3c:61:55:46:
9a:bb:62:99:1c:b9:65:d9:f2:59:ad:99:fa:04:dc:54:1c:4c:
1f:05:82:0f:4a:89:80:fd:b9:6e:83:dd:70:55:a3:40:fc:d6:
f2:48:80:00:fa:d5:74:93:68:2d:54:ae:f5:34:e0:d7:81:ee:
07:5b:b0:31:be:50:d5:cc:81:1a:f6:2f:a5:70:65:be:38:64:
04:ae:79:14:e6:7f:6a:b6:58:f7:18:e4:14:cb:9e:77:6f:d7:
ab:10:ba:61:e9:e6:f4:89:01:79:dd:31:54:f5:a0:8c:d8:29:
f1:7d:85:51:fc:03:8f:92:e8:a4:f1:6d:09:8d:ed:08:46:49:
04:c6:38:4d:86:9d:5b:61:91:0b:f0:08:e2:ed:8a:54:4e:ad:
f5:54:d2:fe:26:db:e1:8e:de:ec:54:73:8c:59:1a:36:27:15:
3a:97:19:f8:40:e9:61:b7:af:c0:f9:fe:aa:04:aa:bb:93:21:
10:2f:29:04:64:72:ca:62:5c:55:4f:26:89:5c:94:09:b8:6e:
9c:e1:1d:ff:b9:d0:48:ec:f6:51:19:b8:48:ff:2d:cd:6c:45:
ce:d2:d4:f2:c5:6f:81:52:7a:7d:bf:60:ef:2d:6d:07:ce:db:
e0:b2:5a:5f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE16BS433Mya0bIAYkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjJmM2MxNTItMTJiNi00NDFlLWI0ZDYtNjZmZWFiODcw
YzRkMB4XDTI2MDQxMjAxMDAyNFoXDTI2MDcxMTAxMDAyNFowLzEtMCsGA1UEAxMk
NTc0YWU3OGEtZjlkNy00YjdmLTljNTYtYjE3NmNiZmUyOTBkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg8P3qcb/rsLCCSfAXyh5Z5alDPg16Clz7GRk
wy/FA0heLce9MziZum8laVk6rcw0xj++8wUf2U4mjVScwbiLq56dDZO9t6x4Pije
dHzyItF+rPpNhG3nzNPovkpULIaL38zAs5Kz2Ufkcnlu6/X6K5HnJXYQOrzUAoQ8
RHtMiJaVcdBaztSdIj6OHyySf6DiOj0Lr0AX55NaVg9TKw1hoXxFCMP8LQnwsnMx
MYY7U7m7QdpWB5ef7SlYllQiaC4/1OhI0XyEq2BR7yjm7AxcBq3/Y4ySndXx3nP9
eBdeYYAudDZT8jCXNs8PZg4geZYQ3PHOZiDHbQ5AZcumWQCiTwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKksoVnAoH8E1bsiv7eHnjgJis65MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yMmYz
YzE1Mi0xMmI2LTQ0MWUtYjRkNi02NmZlYWI4NzBjNGQvMDY0OTUyNWEtNGY3OC0z
OGI1LTk1MDktZjkxYmRmMDBjZDg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjJmM2MxNTItMTJiNi00NDFlLWI0
ZDYtNjZmZWFiODcwYzRkLzIyZjNjMTUyLTEyYjYtNDQxZS1iNGQ2LTY2ZmVhYjg3
MGM0ZC5jcmwwHwYDVR0jBBgwFoAUkeRCH5hh7EAysvnCVlRvINOvvS8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8yMmYzYzE1Mi0xMmI2LTQ0MWUtYjRkNi02NmZl
YWI4NzBjNGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALT6rMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHPXk18Isjl1T25aFlEwPGFVRpq7YpkcuWXZ8lmtmfoE3FQcTB8Fgg9K
iYD9uW6D3XBVo0D81vJIgAD61XSTaC1UrvU04NeB7gdbsDG+UNXMgRr2L6VwZb44
ZASueRTmf2q2WPcY5BTLnndv16sQumHp5vSJAXndMVT1oIzYKfF9hVH8A4+S6KTx
bQmN7QhGSQTGOE2GnVthkQvwCOLtilROrfVU0v4m2+GO3uxUc4xZGjYnFTqXGfhA
6WG3r8D5/qoEqruTIRAvKQRkcspiXFVPJolclAm4bpzhHf+50Ejs9lEZuEj/Lc1s
Rc7S1PLFb4FSen2/YO8tbQfO2+CyWl8=
-----END CERTIFICATE-----
Generated at Fri Apr 17 02:11:41 2026 by rpki-client