
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/31c0a5d8-3ede-3199-bafe-f6a7134d93a8.roa
File: 31c0a5d8-3ede-3199-bafe-f6a7134d93a8.roa (raw, json)
Hash identifier: yEwAgeKx39WMsGdh4yRvzgWFuK06HOrg4CHOdNg5JLY=
Subject key identifier: E1:13:37:73:E8:0A:76:E6:AC:2A:2A:B7:38:04:33:B6:E0:B6:C9:76
Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial: 010D0C9F4328584E31CF7F8BA70680234D535280
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/31c0a5d8-3ede-3199-bafe-f6a7134d93a8.roa
Signing time: Tue 16 Jun 2026 21:00:12 +0000
ROA not before: Tue 16 Jun 2026 21:00:12 +0000
ROA not after: Mon 14 Sep 2026 21:00:12 +0000
asID: 29752
IP address blocks: 23.251.35.0/24 maxlen: 24
107.151.194.0/24 maxlen: 24
198.44.172.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 02 Jul 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:31:cf:7f:8b:a7:06:80:23:4d:53:52:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Validity
Not Before: Jun 16 21:00:12 2026 GMT
Not After : Sep 14 21:00:12 2026 GMT
Subject: CN=03fdabe9-79a8-4928-b0e3-effaa094c91b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a5:65:81:cd:be:5a:07:cb:ad:d6:e9:79:c5:
8e:0e:a9:c7:99:a9:42:4c:ce:ae:06:3a:3d:12:2c:
44:f6:57:11:14:12:58:92:74:18:34:09:5b:f9:66:
76:63:ca:29:7e:7b:2f:3e:ba:10:63:e4:5c:b7:b4:
30:7e:45:c2:c3:07:1f:8a:ed:98:59:ba:3b:84:56:
c3:7b:cd:31:6e:61:8e:b0:bb:e1:01:7c:72:40:f2:
c4:e0:30:61:3b:5f:77:4e:3c:5f:4a:bf:ea:f7:72:
d8:9a:98:63:d4:19:01:2e:0b:a3:51:7f:40:7a:a9:
b3:03:b2:5f:71:6c:9a:e6:5e:be:86:7c:f9:aa:42:
af:ca:51:d3:35:f4:67:49:7e:69:ce:b5:3e:f3:34:
81:77:f9:9a:aa:2c:72:62:99:09:b8:a0:54:da:6e:
d1:d0:2d:3b:33:5b:0e:5e:3f:e9:0b:24:a7:4d:9e:
4a:7a:49:f2:d4:ac:cf:8e:cf:f1:b2:cf:b3:a2:1a:
90:90:ce:78:0c:6d:36:de:e0:75:f8:ba:ad:2a:2a:
50:b0:7a:e7:f8:df:35:8d:be:7c:8f:70:bb:3f:bb:
05:4b:e9:00:02:33:36:0f:ae:c1:83:57:a4:18:d5:
f0:51:54:85:23:5e:1a:44:b0:f9:a7:1f:02:7d:d8:
bc:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:13:37:73:E8:0A:76:E6:AC:2A:2A:B7:38:04:33:B6:E0:B6:C9:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/31c0a5d8-3ede-3199-bafe-f6a7134d93a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl
X509v3 Authority Key Identifier:
keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
sbgp-ipAddrBlock: critical
IPv4:
23.251.35.0/24
107.151.194.0/24
198.44.172.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:45:9e:30:59:80:b8:c1:68:d9:f2:dc:31:f4:e6:ae:10:aa:
67:6b:4b:00:7e:11:09:c3:29:0a:e7:1b:81:74:01:43:05:c2:
25:72:01:4e:fc:6d:39:7c:1f:4c:e2:67:f3:e1:74:44:3a:99:
c8:1d:86:2a:9b:c5:a9:cb:16:c3:da:a8:44:ba:a0:a3:67:12:
fa:63:af:3d:31:df:37:c6:c7:b7:7d:9f:9a:2f:68:0f:e9:be:
79:d2:02:2d:26:e7:9f:84:e7:8b:a5:55:9f:07:b8:80:67:c5:
18:b9:a8:81:65:41:7b:c8:a2:a9:62:b9:d4:bd:c3:68:68:ef:
39:7f:e4:65:c1:4d:a5:3f:ed:cf:ba:75:e2:9f:11:01:0c:f2:
e3:f6:22:a1:b2:96:df:ff:cf:d9:c9:9d:d1:3b:5c:bd:96:21:
f2:60:a1:c7:eb:a3:aa:7d:40:c3:19:9d:0e:47:d5:3b:c8:22:
80:d4:ec:b9:ff:89:67:49:fe:4a:4a:10:de:64:12:90:53:31:
de:f4:69:d4:ee:16:ef:f6:b1:9c:24:34:4b:37:32:7b:91:c1:
b9:64:2f:ee:1b:87:2e:7f:db:1c:40:32:c1:96:44:e6:67:bc:
da:6f:e8:61:8e:f6:b6:d8:d9:e5:5c:95:81:f7:7c:2e:f6:65:
c3:ab:60:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 02:20:24 2026 by rpki-client