
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/233eaade-1fa0-3270-9aad-ae4d76a8b8c5.roa
File: 233eaade-1fa0-3270-9aad-ae4d76a8b8c5.roa (raw, json)
Hash identifier: vAkdR/IVuevRprCfg1klQGAY4YC47ryIoe2BsX1YNco=
Subject key identifier: 63:DD:D3:CE:7E:2D:7C:38:1A:43:33:7E:47:8A:36:89:4F:01:98:F5
Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial: 010D0C9F4328584F7FE2F8F9D4F516C31FBDBE80
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/233eaade-1fa0-3270-9aad-ae4d76a8b8c5.roa
Signing time: Wed 14 Oct 2026 13:00:12 +0000
ROA not before: Wed 14 Oct 2026 13:00:12 +0000
ROA not after: Tue 12 Jan 2027 14:00:12 +0000
asID: 22616
IP address blocks: 170.85.140.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 01 Nov 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:7f:e2:f8:f9:d4:f5:16:c3:1f:bd:be:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Validity
Not Before: Oct 14 13:00:12 2026 GMT
Not After : Jan 12 14:00:12 2027 GMT
Subject: CN=2c4be898-352b-4a37-ac10-53eecdee70dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:62:e5:92:66:65:46:92:8d:66:d2:8a:de:6b:
18:24:67:4a:4f:d0:ba:fe:e8:10:7f:46:99:32:0c:
e3:f4:9e:e3:7e:61:3d:35:15:98:a0:65:4d:7d:7f:
fc:d2:98:1e:9e:87:17:29:d4:96:e1:08:6a:26:cc:
75:d3:b8:e5:90:39:56:23:03:87:28:80:15:c2:32:
d1:bd:8e:9c:f5:f5:c0:e6:a0:d3:e1:fe:e8:c8:81:
d8:1b:81:ee:57:d3:12:a1:47:d9:72:eb:77:7c:80:
82:58:a2:ea:1e:bf:95:4c:a9:62:e8:a1:62:88:39:
32:0a:d3:ed:1b:64:30:db:48:05:d0:e8:84:e3:f8:
85:4f:fc:a8:d1:fa:eb:a6:46:7a:74:fe:6d:aa:eb:
14:86:8a:99:a1:8b:80:32:75:e6:c9:69:a4:62:b3:
1d:d9:13:da:38:84:02:9a:fd:a3:e2:91:c2:85:62:
c0:99:43:77:a2:a4:47:ac:b9:45:5b:ea:76:a4:11:
40:24:52:f9:cd:79:07:b8:17:70:69:97:a1:56:b1:
eb:1f:c3:21:ce:f4:f8:10:38:67:14:a2:ca:53:bc:
ad:a4:72:21:60:5d:00:00:17:3f:88:24:9c:09:36:
5d:80:27:99:d5:95:b1:f3:5c:76:e2:9f:c1:22:13:
81:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:DD:D3:CE:7E:2D:7C:38:1A:43:33:7E:47:8A:36:89:4F:01:98:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/233eaade-1fa0-3270-9aad-ae4d76a8b8c5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
X509v3 Authority Key Identifier:
keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
sbgp-ipAddrBlock: critical
IPv4:
170.85.140.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:50:d7:a3:bf:d3:67:91:da:88:b1:64:0a:e2:be:39:b1:52:
cb:eb:00:24:c0:09:ee:7b:5b:73:7f:89:62:b5:aa:f7:3f:fd:
de:e0:28:43:5a:0d:6b:0f:17:54:7b:4c:e1:9a:8f:ee:3c:9d:
e0:2f:43:48:cc:4f:44:a4:52:89:31:ba:f5:fe:7d:10:80:03:
2b:61:5e:14:67:af:3d:71:be:3d:cc:f9:da:34:62:40:64:a0:
bd:4d:72:8b:9e:f1:03:f3:85:90:8d:d2:9e:3f:1c:ac:c2:37:
bc:72:bf:c5:2e:33:a7:d5:9b:73:e2:df:7a:9d:9b:1b:ab:4e:
79:58:91:3e:f3:d3:a1:be:cb:36:52:fe:e5:4f:85:99:ec:73:
d2:b1:89:ff:00:27:b7:40:d5:59:cb:11:5a:a6:a1:cd:d8:5b:
8a:67:03:86:c5:89:99:41:35:d0:a1:14:ff:8b:bd:c4:1c:bb:
9a:1d:34:da:c2:c9:e0:18:59:73:e9:0d:6f:bc:c8:72:6b:1e:
6c:16:b4:de:5e:13:6b:d6:1b:16:d7:fc:8d:31:1e:71:bd:12:
07:63:50:62:15:43:a6:f0:b4:ad:5d:90:f6:d5:c4:11:ee:dd:
e8:44:65:fb:b4:24:09:7e:31:22:3d:8a:ef:d4:12:bc:73:c2:
71:2c:51:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 03:31:50 2026 by rpki-client