
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b3423c00-b230-3f93-8431-4c2418fe72ca.roa
File: b3423c00-b230-3f93-8431-4c2418fe72ca.roa (raw, json)
Hash identifier: PWNvEE695Xea19cHVl0dYVUvdbMEyckBsNM1Mn+RnC8=
Subject key identifier: BC:7D:01:4E:D6:4C:54:7F:0D:0C:6E:81:2A:1B:F3:A6:6F:20:09:FA
Certificate issuer: /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial: 010D0C9F4328584EC0A73DA07B2BF7019C6F70C0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b3423c00-b230-3f93-8431-4c2418fe72ca.roa
Signing time: Fri 07 Aug 2026 01:00:12 +0000
ROA not before: Fri 07 Aug 2026 01:00:12 +0000
ROA not after: Thu 05 Nov 2026 02:00:12 +0000
asID: 36620
IP address blocks: 209.112.127.31/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 20 Aug 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:c0:a7:3d:a0:7b:2b:f7:01:9c:6f:70:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Validity
Not Before: Aug 7 01:00:12 2026 GMT
Not After : Nov 5 02:00:12 2026 GMT
Subject: CN=e2875154-ed52-496f-a534-2c54daaae8a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:95:50:cc:a6:c4:21:33:6d:86:93:05:49:f5:
01:14:9a:e8:e1:bc:a2:3b:66:9c:f8:48:d5:1c:3d:
68:f7:ed:ee:e2:08:32:38:3d:d8:4d:67:c6:52:0f:
2f:e2:1d:df:1e:34:45:f5:ec:5d:36:99:6f:ff:57:
cd:25:54:72:af:fc:14:02:1e:e3:30:8f:d6:92:fa:
26:61:41:7e:07:0e:17:10:32:17:8a:53:86:13:1e:
22:ea:6e:2e:d8:67:8d:13:8b:4f:b5:b0:fb:52:8f:
c7:93:a9:b1:c4:5d:16:4e:70:be:01:c1:c5:47:74:
e6:9c:63:6d:82:ad:e3:18:c6:1a:5b:ef:3e:fc:ed:
fd:04:88:cc:fe:f8:aa:37:6f:8f:30:43:6d:33:3d:
f7:33:52:32:77:ba:c2:b4:ba:2e:5d:cc:79:13:8a:
80:07:49:89:71:3f:66:c2:91:84:22:6e:df:c0:11:
e1:f9:2c:23:03:88:6c:e6:3e:42:c4:21:41:34:85:
bf:be:49:18:3e:b2:ed:9b:78:ba:15:3a:b8:2b:a8:
98:88:3e:26:d1:0b:ab:8a:1d:17:21:75:44:86:7b:
7b:a8:bb:07:9b:96:7c:c2:9f:af:c9:5c:ab:6d:33:
6b:bd:2b:b8:89:9a:8a:1b:dc:9e:19:04:54:91:58:
f8:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:7D:01:4E:D6:4C:54:7F:0D:0C:6E:81:2A:1B:F3:A6:6F:20:09:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/b3423c00-b230-3f93-8431-4c2418fe72ca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
X509v3 Authority Key Identifier:
keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
sbgp-ipAddrBlock: critical
IPv4:
209.112.127.31/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:c5:55:46:95:40:c3:97:9b:cc:b4:75:5d:e9:2f:0f:d9:37:
30:f4:07:f3:dd:8e:de:91:87:4a:4f:b3:f3:b6:88:8d:62:b0:
fb:6c:ea:15:88:21:72:9e:b1:51:a8:1e:cf:63:ad:46:5f:a7:
bc:68:d6:a1:60:40:99:36:04:c2:b8:94:fc:7d:1c:92:65:91:
56:bd:ff:85:43:a1:33:24:57:62:47:1c:9e:3f:0f:11:f4:01:
51:ec:c9:a7:8f:d4:71:21:a9:c7:7e:de:9c:fa:26:17:8c:2b:
0c:34:c9:a6:28:24:eb:f8:d8:c3:61:1c:8a:7c:ca:ab:a4:e4:
bd:9a:d1:bd:54:e7:2e:0f:b9:cb:89:77:f9:ce:da:9a:37:81:
de:df:09:2f:82:cb:67:3b:28:d6:91:4e:a0:cf:02:05:74:93:
51:73:d3:9f:82:96:cf:33:7b:7f:7d:0a:c6:53:6f:89:52:47:
d1:6e:cd:6c:2e:22:38:72:f4:d9:d2:89:52:18:d8:fa:f7:b3:
00:8b:9e:26:79:f6:1e:22:c0:11:0d:60:5b:a5:1c:ee:c7:0c:
36:f4:69:36:99:96:e2:6a:8f:66:24:6c:a8:82:3f:dd:3e:46:
41:11:02:fd:a8:1a:3c:e3:f4:54:e2:b9:9d:b2:00:bd:5c:12:
da:89:36:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:56:20 2026 by rpki-client