
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/77788e76-09b5-3ebe-82f5-4907caeab06f.roa
File: 77788e76-09b5-3ebe-82f5-4907caeab06f.roa (raw, json)
Hash identifier: l6RK6JZL/rt563zgeMSPLBxmQkH51J+fHaiYCZ4ob04=
Subject key identifier: F3:14:77:42:75:F2:D5:E8:A5:20:63:10:38:39:FD:73:C5:D0:14:21
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F4328584DE9B086DA4F67757E4ABD6A80
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/77788e76-09b5-3ebe-82f5-4907caeab06f.roa
Signing time: Fri 22 May 2026 01:00:24 +0000
ROA not before: Fri 22 May 2026 01:00:24 +0000
ROA not after: Thu 20 Aug 2026 01:00:24 +0000
asID: 3949
IP address blocks: 128.121.46.240/28 maxlen: 28
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 28 May 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:e9:b0:86:da:4f:67:75:7e:4a:bd:6a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: May 22 01:00:24 2026 GMT
Not After : Aug 20 01:00:24 2026 GMT
Subject: CN=eee2bdb2-c493-411d-ba7d-3ef507d259dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:46:e3:e5:98:58:db:06:51:2d:e0:d7:85:fd:
2a:af:14:61:a6:2c:a4:60:81:06:ae:9d:7d:4b:06:
77:16:45:f1:ca:5b:23:ed:dd:b7:1c:16:8c:74:6d:
eb:89:ed:99:e6:0d:6b:9f:9e:07:f8:17:37:04:47:
ef:8a:74:12:1c:8d:60:84:1a:df:7c:bd:6f:06:af:
32:c1:82:9c:82:91:72:1e:dd:58:7b:00:c5:29:24:
59:f3:65:38:a5:42:44:67:ba:7c:27:88:49:86:1f:
5d:29:7c:11:d6:8e:87:5e:17:8f:a9:4a:20:d1:ee:
23:c5:6f:e3:7c:6e:cb:00:7a:cf:56:09:bd:bc:29:
d7:5b:18:31:61:b6:7d:fc:8a:95:13:e1:1b:91:1b:
ad:7f:aa:2f:79:41:17:d2:a0:3c:c9:91:c7:83:08:
e3:7b:79:43:d4:e7:bf:c8:65:5f:31:e2:aa:22:36:
7e:0d:46:56:d6:23:f6:bd:6c:47:26:43:9b:37:d2:
c6:18:8d:1c:ca:ea:2e:d0:b0:e7:a7:0c:3c:31:a7:
a0:e1:12:b6:cf:45:a9:1c:ab:7e:8c:67:20:1e:3f:
f5:2c:dd:cb:6b:c8:39:15:1b:e4:f6:48:99:1b:6b:
1c:89:43:3d:78:51:46:6c:0c:91:14:3c:9c:33:63:
0d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:14:77:42:75:F2:D5:E8:A5:20:63:10:38:39:FD:73:C5:D0:14:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/77788e76-09b5-3ebe-82f5-4907caeab06f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv4:
128.121.46.240/28
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:4b:ed:85:7d:f9:00:cd:58:e5:ec:5c:c1:ca:f4:5b:7e:1d:
4a:38:be:25:92:6a:9d:4f:03:ee:d8:4a:de:d3:98:6f:99:ee:
05:66:be:1e:7c:a1:4c:10:5d:e5:6f:3e:ba:4e:69:4a:84:a7:
f8:c1:f1:27:77:40:36:3b:bd:aa:84:bb:5e:83:bd:27:a3:eb:
52:c5:14:72:35:d1:d8:e2:1c:7b:0f:75:92:10:f4:a6:3f:ca:
0f:c1:a2:2f:e9:e7:89:65:0f:62:43:fd:d2:d2:8f:a5:c9:46:
c8:ba:44:e5:e0:e0:d9:bb:66:c5:7f:13:0b:fa:8d:da:b8:79:
be:04:ee:3d:70:82:19:ce:56:50:4a:fe:c7:dc:03:b7:d2:ba:
4e:7b:1b:7c:7b:e6:61:ff:56:14:12:b6:a0:3d:b8:58:ff:c7:
62:d4:80:b3:05:82:81:6c:e7:96:02:19:f0:94:e3:78:5b:96:
16:40:df:4c:0c:31:eb:34:02:3b:49:2c:14:c1:ee:dd:14:96:
0b:30:db:b0:47:41:3a:52:3a:8f:eb:a0:20:d1:48:85:98:af:
1d:8d:2d:69:20:43:9c:ba:06:2d:cd:f7:c8:08:a3:42:d5:51:
57:53:58:33:24:28:7b:09:9a:b2:47:1e:d5:63:69:e2:89:e8:
29:08:12:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 27 15:25:47 2026 by rpki-client