
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/564d2c5d-6ce1-3ba0-b0b7-2b1e956f8dc9.roa
File: 564d2c5d-6ce1-3ba0-b0b7-2b1e956f8dc9.roa (raw, json)
Hash identifier: szq+zx2y+xb6qgel1+/sc//nLIKDrI9p6xSTK0d9azc=
Subject key identifier: F8:37:F2:2A:F5:16:F4:91:5D:FF:D7:E6:FB:79:37:67:59:A6:F8:6C
Certificate issuer: /CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
Certificate serial: 010D0C9F4328584E428F20A5A8FB33454B801E48
Authority key identifier: 33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/564d2c5d-6ce1-3ba0-b0b7-2b1e956f8dc9.roa
Signing time: Mon 22 Jun 2026 21:00:12 +0000
ROA not before: Mon 22 Jun 2026 21:00:12 +0000
ROA not after: Sun 20 Sep 2026 21:00:12 +0000
asID: 31898
IP address blocks: 173.254.0.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Jul 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:42:8f:20:a5:a8:fb:33:45:4b:80:1e:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
Validity
Not Before: Jun 22 21:00:12 2026 GMT
Not After : Sep 20 21:00:12 2026 GMT
Subject: CN=e7095da3-f67a-4d91-bd3e-ed62360c703b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:fa:1c:9c:4f:08:78:27:67:c0:fc:39:8c:63:
47:f0:ad:37:d0:9f:a5:eb:c7:56:c2:20:7c:4a:0c:
21:2e:49:4a:e3:2a:10:a7:fa:25:50:ad:d1:e0:f0:
63:34:f4:6b:1c:2a:38:9c:83:78:8b:b2:93:bd:01:
76:79:c3:b9:14:0c:0f:ad:17:b7:8b:d4:9a:b4:57:
a4:4d:80:86:c6:ff:18:3c:78:18:f8:3c:11:5a:51:
4f:e9:49:1e:b7:b9:e8:a3:df:9f:79:38:9b:14:7a:
bf:d9:5f:ec:df:78:7c:c9:ef:e0:0f:5b:77:5a:dc:
fc:da:81:7b:87:6c:9b:31:5b:49:31:df:ad:18:14:
3d:ce:90:de:11:d0:94:b3:45:98:c1:97:20:99:90:
10:f4:64:89:af:22:9a:a5:d2:97:f5:2e:78:77:ac:
a7:6d:e4:d6:73:12:c4:59:95:57:29:44:8c:4c:d4:
ec:ff:99:b0:0d:d0:c6:c4:9f:14:33:a2:06:36:4e:
10:d0:6e:9b:4b:c1:86:89:f2:08:ac:48:eb:1f:db:
5f:f3:41:06:b2:83:59:12:50:dc:2e:1a:c5:09:9b:
71:df:19:e7:55:30:dc:80:09:44:65:4e:57:43:c5:
4e:c5:38:3e:ae:49:f0:31:9f:47:11:47:25:be:b9:
c0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:37:F2:2A:F5:16:F4:91:5D:FF:D7:E6:FB:79:37:67:59:A6:F8:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/564d2c5d-6ce1-3ba0-b0b7-2b1e956f8dc9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl
X509v3 Authority Key Identifier:
keyid:33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
sbgp-ipAddrBlock: critical
IPv4:
173.254.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:3e:9e:d1:76:34:a5:5e:2d:a2:fb:73:c2:6b:27:e2:62:bb:
a4:ff:72:e2:ab:f5:5f:13:96:09:d6:29:3c:24:41:c4:fd:90:
d3:ef:72:cf:90:26:c4:23:87:69:76:e1:68:6b:7a:4f:2d:f7:
bb:82:fd:82:44:ad:1d:a9:27:71:0e:c6:af:fa:68:58:fd:a9:
20:7b:8d:6d:f8:00:77:ab:37:33:4b:0a:b8:52:07:10:0f:1d:
1c:df:2b:3c:7a:f1:77:db:94:ed:06:35:01:67:ea:30:c0:90:
56:a6:17:40:3c:43:2f:15:28:b7:74:37:65:6f:ad:d0:4b:31:
5c:d7:69:57:93:12:9f:de:9d:50:80:36:ed:ff:f0:ca:6b:af:
b2:f0:4d:b7:27:21:53:d4:d5:82:9b:b6:07:e3:77:7a:e1:c1:
60:fb:f1:c5:db:fa:ea:9b:83:a5:ce:ad:d6:e8:53:53:3e:eb:
75:7a:8c:ca:f5:f4:84:c4:5f:96:29:63:43:df:bc:70:02:d4:
ef:41:6d:74:1a:f5:25:3c:2e:73:c6:80:1a:c4:1f:64:56:e6:
63:e4:37:4d:4c:21:a0:ec:97:be:f0:29:0d:ca:6b:f2:00:fb:
d5:7d:b9:73:af:c8:b1:f4:c4:2c:6a:30:be:48:e4:fd:4e:bd:
51:0b:b0:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 09:31:32 2026 by rpki-client