
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8522b95-144f-483f-bbfb-bec0605ebf8c/0a4a278a-43d9-34d7-b741-e7725dd4623c.roa
File: 0a4a278a-43d9-34d7-b741-e7725dd4623c.roa (raw, json)
Hash identifier: EdxTTjpafCWJeAmjcT3SUacuFviOH3Al5RvvT7KN4ro=
Subject key identifier: A0:7C:37:69:E6:76:DC:4C:93:CF:2B:8D:23:2E:97:68:4D:3A:21:F1
Certificate issuer: /CN=e8522b95-144f-483f-bbfb-bec0605ebf8c
Certificate serial: 010D0C9F4328584EF2E75B8E629303D01E0A2F00
Authority key identifier: 01:1D:7C:FA:C5:58:E8:48:89:6B:20:DD:D7:D5:CF:15:D3:0E:20:52
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8522b95-144f-483f-bbfb-bec0605ebf8c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8522b95-144f-483f-bbfb-bec0605ebf8c/0a4a278a-43d9-34d7-b741-e7725dd4623c.roa
Signing time: Tue 25 Aug 2026 01:00:12 +0000
ROA not before: Tue 25 Aug 2026 01:00:12 +0000
ROA not after: Mon 23 Nov 2026 02:00:12 +0000
asID: 11023
IP address blocks: 209.251.33.0/24 maxlen: 24
209.251.34.0/24 maxlen: 24
209.251.35.0/24 maxlen: 24
209.251.36.0/24 maxlen: 24
209.251.37.0/24 maxlen: 24
209.251.38.0/24 maxlen: 24
209.251.39.0/24 maxlen: 24
209.251.40.0/24 maxlen: 24
209.251.41.0/24 maxlen: 24
209.251.42.0/24 maxlen: 24
209.251.43.0/24 maxlen: 24
209.251.44.0/24 maxlen: 24
209.251.45.0/24 maxlen: 24
209.251.46.0/24 maxlen: 24
209.251.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8522b95-144f-483f-bbfb-bec0605ebf8c/e8522b95-144f-483f-bbfb-bec0605ebf8c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8522b95-144f-483f-bbfb-bec0605ebf8c/e8522b95-144f-483f-bbfb-bec0605ebf8c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8522b95-144f-483f-bbfb-bec0605ebf8c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 29 Aug 2026 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:f2:e7:5b:8e:62:93:03:d0:1e:0a:2f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8522b95-144f-483f-bbfb-bec0605ebf8c
Validity
Not Before: Aug 25 01:00:12 2026 GMT
Not After : Nov 23 02:00:12 2026 GMT
Subject: CN=0e5470f4-5749-44f8-8be1-24df0a83fc68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:9a:c3:a1:10:73:07:f5:32:4c:46:d7:69:b7:
71:5e:0b:79:fd:dc:fc:26:b3:8a:6a:36:2f:96:be:
67:64:ca:ce:e5:8a:09:19:11:9b:ff:28:e3:93:d8:
fc:09:01:43:97:24:1a:c4:30:f3:a7:eb:60:89:5f:
bf:78:ad:f3:63:8c:30:3b:17:5d:5c:db:35:b6:45:
57:24:9d:54:5a:f8:54:b5:99:01:dd:ad:97:bc:c6:
29:a4:f0:6d:ad:38:29:d0:a3:10:15:11:90:82:6f:
f8:b0:a7:53:12:22:67:85:9d:43:51:bd:65:6e:cb:
3e:c4:56:d0:1f:32:a8:5d:2f:50:23:1f:cf:ae:3d:
d7:9e:c1:27:ff:35:54:a1:b4:ec:9d:11:b4:79:07:
5a:ae:8c:5e:3b:69:e0:d6:de:75:46:21:c8:a0:e3:
f8:70:ca:17:b9:a8:dc:c3:58:1e:0c:29:4b:bb:cb:
c8:4e:8d:19:18:51:c1:3d:d9:8b:0e:5b:2e:cc:92:
09:f5:c2:c6:cd:30:9c:c9:cb:5c:84:44:37:b3:99:
8d:32:6a:d9:61:4d:8f:4e:1f:4e:12:06:7f:8b:db:
65:23:77:14:6d:de:bd:cc:ae:2b:4e:e8:95:2c:0b:
0c:c5:0a:a5:13:f9:01:15:06:73:61:a3:ec:4c:fe:
67:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:7C:37:69:E6:76:DC:4C:93:CF:2B:8D:23:2E:97:68:4D:3A:21:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8522b95-144f-483f-bbfb-bec0605ebf8c/0a4a278a-43d9-34d7-b741-e7725dd4623c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8522b95-144f-483f-bbfb-bec0605ebf8c/e8522b95-144f-483f-bbfb-bec0605ebf8c.crl
X509v3 Authority Key Identifier:
keyid:01:1D:7C:FA:C5:58:E8:48:89:6B:20:DD:D7:D5:CF:15:D3:0E:20:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e8522b95-144f-483f-bbfb-bec0605ebf8c.cer
sbgp-ipAddrBlock: critical
IPv4:
209.251.33.0-209.251.47.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:a2:ce:66:22:ba:d3:69:0d:c1:a6:02:a6:c4:06:84:3f:c0:
48:25:41:19:eb:1d:14:56:07:a2:28:1e:a3:71:7f:f5:b0:e0:
47:51:3a:fb:3c:d0:08:aa:09:49:c5:ea:47:96:de:f0:62:21:
dd:63:48:77:a4:9f:22:fe:36:27:d6:73:14:d8:86:28:1f:36:
79:bc:8c:30:1f:2a:c4:6c:91:e5:70:9e:c4:b6:20:08:d4:a1:
a7:24:5c:d3:c0:94:be:a7:d8:8c:1e:b6:53:be:79:b8:5c:24:
3f:38:70:2a:76:f5:a9:1b:9e:ca:14:6d:0b:21:84:fb:eb:48:
58:a9:a8:4e:b5:17:de:41:9b:2b:95:10:ee:09:ce:11:87:a4:
1b:0b:32:28:fb:0c:89:37:4a:e4:8e:cd:49:46:f8:0e:e0:5a:
e6:5b:c8:d1:55:39:c1:78:30:7a:dc:02:30:b5:0f:5a:6e:8f:
0f:a2:ae:79:bf:fc:cd:65:11:eb:d4:8b:88:9a:5d:ae:60:85:
55:68:42:99:7d:fd:29:4b:9b:d6:9b:5d:31:10:63:52:08:3b:
1f:2f:09:e2:f0:b4:31:0b:4e:27:c0:b1:92:c6:dd:51:ed:8e:
56:ff:e7:7f:45:93:f7:f8:f1:e0:42:8c:ab:75:87:30:35:06:
53:74:e6:e9
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE7y51uOYpMD0B4KLwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTg1MjJiOTUtMTQ0Zi00ODNmLWJiZmItYmVjMDYwNWVi
ZjhjMB4XDTI2MDgyNTAxMDAxMloXDTI2MTEyMzAyMDAxMlowLzEtMCsGA1UEAxMk
MGU1NDcwZjQtNTc0OS00NGY4LThiZTEtMjRkZjBhODNmYzY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA35rDoRBzB/UyTEbXabdxXgt5/dz8JrOKajYv
lr5nZMrO5YoJGRGb/yjjk9j8CQFDlyQaxDDzp+tgiV+/eK3zY4wwOxddXNs1tkVX
JJ1UWvhUtZkB3a2XvMYppPBtrTgp0KMQFRGQgm/4sKdTEiJnhZ1DUb1lbss+xFbQ
HzKoXS9QIx/Prj3XnsEn/zVUobTsnRG0eQdaroxeO2ng1t51RiHIoOP4cMoXuajc
w1geDClLu8vITo0ZGFHBPdmLDlsuzJIJ9cLGzTCcyctchEQ3s5mNMmrZYU2PTh9O
EgZ/i9tlI3cUbd69zK4rTuiVLAsMxQqlE/kBFQZzYaPsTP5n3QIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFKB8N2nmdtxMk88rjSMul2hNOiHxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lODUy
MmI5NS0xNDRmLTQ4M2YtYmJmYi1iZWMwNjA1ZWJmOGMvMGE0YTI3OGEtNDNkOS0z
NGQ3LWI3NDEtZTc3MjVkZDQ2MjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZTg1MjJiOTUtMTQ0Zi00ODNmLWJi
ZmItYmVjMDYwNWViZjhjL2U4NTIyYjk1LTE0NGYtNDgzZi1iYmZiLWJlYzA2MDVl
YmY4Yy5jcmwwHwYDVR0jBBgwFoAUAR18+sVY6EiJayDd19XPFdMOIFIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9lODUyMmI5NS0xNDRmLTQ4M2YtYmJmYi1iZWMw
NjA1ZWJmOGMuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADR+yED
BATR+yAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAbqLOZiK602kNwaYCpsQGhD/ASCVBGesdFFYHoigeo3F/
9bDgR1E6+zzQCKoJScXqR5be8GIh3WNId6SfIv42J9ZzFNiGKB82ebyMMB8qxGyR
5XCexLYgCNShpyRc08CUvqfYjB62U755uFwkPzhwKnb1qRueyhRtCyGE++tIWKmo
TrUX3kGbK5UQ7gnOEYekGwsyKPsMiTdK5I7NSUb4DuBa5lvI0VU5wXgwetwCMLUP
Wm6PD6Kueb/8zWUR69SLiJpdrmCFVWhCmX39KUub1ptdMRBjUgg7Hy8J4vC0MQtO
J8CxksbdUe2OVv/nf0WT9/jx4EKMq3WHMDUGU3Tm6Q==
-----END CERTIFICATE-----
Generated at Thu Aug 27 04:11:46 2026 by rpki-client