
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/25f2c50d-b1f3-455f-835f-493fb32a39f9/e7133667-9d22-3185-a5d2-4d9ee5fc18bc.roa
File: e7133667-9d22-3185-a5d2-4d9ee5fc18bc.roa (raw, json)
Hash identifier: 8DTvdtfwecCJGf+NMwSPOikHJrt/DKpUjvNQNYbi+bo=
Subject key identifier: 74:1F:2E:86:23:37:A9:9B:B8:18:49:AC:FD:9D:62:44:B9:45:AB:0E
Certificate issuer: /CN=25f2c50d-b1f3-455f-835f-493fb32a39f9
Certificate serial: 010D0C9F4328584DEC6EC742006F1010C2D0DF00
Authority key identifier: 03:61:EB:8E:9C:F3:85:80:73:DD:3D:DE:28:0D:BD:72:0E:37:2A:F2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/25f2c50d-b1f3-455f-835f-493fb32a39f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/25f2c50d-b1f3-455f-835f-493fb32a39f9/e7133667-9d22-3185-a5d2-4d9ee5fc18bc.roa
Signing time: Sat 23 May 2026 00:35:33 +0000
ROA not before: Sat 23 May 2026 00:35:33 +0000
ROA not after: Sun 26 Jul 2026 23:08:17 +0000
asID: 36315
IP address blocks: 23.29.224.0/19 maxlen: 24
23.91.32.0/19 maxlen: 24
45.73.192.0/18 maxlen: 24
104.194.160.0/19 maxlen: 24
104.241.64.0/18 maxlen: 24
107.167.128.0/19 maxlen: 24
108.59.128.0/20 maxlen: 24
108.174.32.0/20 maxlen: 24
169.197.192.0/18 maxlen: 24
192.170.160.0/19 maxlen: 24
198.57.96.0/19 maxlen: 24
198.167.144.0/20 maxlen: 24
199.21.120.0/21 maxlen: 24
199.84.96.0/19 maxlen: 24
199.115.232.0/21 maxlen: 24
199.204.176.0/21 maxlen: 24
207.2.104.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/25f2c50d-b1f3-455f-835f-493fb32a39f9/25f2c50d-b1f3-455f-835f-493fb32a39f9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/25f2c50d-b1f3-455f-835f-493fb32a39f9/25f2c50d-b1f3-455f-835f-493fb32a39f9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/25f2c50d-b1f3-455f-835f-493fb32a39f9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 07 Jun 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:ec:6e:c7:42:00:6f:10:10:c2:d0:df:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25f2c50d-b1f3-455f-835f-493fb32a39f9
Validity
Not Before: May 23 00:35:33 2026 GMT
Not After : Jul 26 23:08:17 2026 GMT
Subject: CN=25042542-c446-46e4-8472-941496a58f58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a7:ee:7f:b6:d4:81:00:cb:3a:df:53:1e:81:
00:b7:7d:31:28:81:c1:86:cb:58:79:b2:f8:01:55:
b2:de:7e:ce:24:2e:e4:97:09:ee:9e:30:92:36:1f:
67:4c:26:8e:f5:34:ef:ef:4a:47:cf:9d:8f:d4:80:
41:1b:cd:3c:28:d4:80:cb:7e:06:cb:78:48:e9:3d:
6a:40:b4:4f:2c:41:52:ff:7c:54:f6:c9:96:e8:d7:
3c:e1:69:b7:e8:c9:0e:66:8a:b3:b4:ab:5b:73:44:
8a:ac:e0:f0:b9:8c:97:ca:f7:b6:5b:eb:9d:07:f1:
b4:8a:15:65:aa:5b:0a:bc:9f:5b:2f:01:54:de:68:
cb:8e:36:26:ac:68:77:17:e5:e5:8a:a4:07:e8:98:
5a:cf:fd:48:01:60:f2:75:30:56:2e:3e:2e:14:22:
fe:39:ae:fe:5a:ff:c3:03:65:ff:a6:9d:05:1b:4a:
00:6c:d5:ea:b9:db:59:96:24:e1:49:c7:ea:8c:83:
59:dd:83:fa:85:9a:04:cd:b0:13:6f:37:a7:ae:5d:
37:d9:81:0f:0e:f4:05:ff:74:a8:b8:8b:eb:4d:ab:
32:6d:61:7e:b5:bf:33:ea:00:60:e6:96:74:86:c4:
a9:7a:2b:e1:21:f7:91:8d:75:52:99:5e:8f:f7:51:
85:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:1F:2E:86:23:37:A9:9B:B8:18:49:AC:FD:9D:62:44:B9:45:AB:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/25f2c50d-b1f3-455f-835f-493fb32a39f9/e7133667-9d22-3185-a5d2-4d9ee5fc18bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/25f2c50d-b1f3-455f-835f-493fb32a39f9/25f2c50d-b1f3-455f-835f-493fb32a39f9.crl
X509v3 Authority Key Identifier:
keyid:03:61:EB:8E:9C:F3:85:80:73:DD:3D:DE:28:0D:BD:72:0E:37:2A:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/25f2c50d-b1f3-455f-835f-493fb32a39f9.cer
sbgp-ipAddrBlock: critical
IPv4:
23.29.224.0/19
23.91.32.0/19
45.73.192.0/18
104.194.160.0/19
104.241.64.0/18
107.167.128.0/19
108.59.128.0/20
108.174.32.0/20
169.197.192.0/18
192.170.160.0/19
198.57.96.0/19
198.167.144.0/20
199.21.120.0/21
199.84.96.0/19
199.115.232.0/21
199.204.176.0/21
207.2.104.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:4b:0b:b1:e0:f0:e1:4f:85:4b:38:5f:ea:83:5d:55:6f:e1:
a4:84:69:3e:00:ae:a5:03:ce:8b:c6:b7:5e:53:f0:f2:4c:de:
e1:1d:4c:7b:ac:d6:15:76:08:80:73:8c:b6:bc:e1:27:ff:50:
a3:14:4f:51:59:b2:b0:be:68:bd:6d:a5:ad:8d:0c:de:d4:ac:
19:0d:f0:05:53:69:9a:dd:e2:89:bc:53:e7:77:e9:dc:33:8e:
b9:3a:ac:b1:c0:e2:c6:47:ac:ae:dc:0f:6b:20:bd:47:7a:d3:
2f:93:e1:79:d8:78:10:07:1f:72:54:c8:db:c1:a6:a9:29:aa:
29:29:f4:6f:ee:a5:32:47:ba:72:a9:77:01:bc:49:50:b8:29:
32:30:35:c4:d9:aa:65:cc:09:41:a6:f0:07:b5:ce:02:4e:e6:
16:24:63:ff:4c:f8:53:0a:b9:b7:37:f7:b5:e7:70:f5:2a:c1:
84:d0:19:76:7a:b4:68:db:69:7d:ce:36:f0:a2:0d:23:0e:68:
34:83:39:8b:80:a4:65:a6:56:bd:53:89:29:3b:26:40:ca:5e:
83:e5:cf:92:0b:a8:14:1b:96:fb:a4:15:c6:a3:7e:2b:4a:e7:
37:b8:73:e3:4c:b3:6e:7d:08:2c:7d:85:a4:f1:6f:30:d0:55:
08:e9:88:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 5 18:43:34 2026 by rpki-client