
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4b7340fc-698a-4488-b211-325f4ded4152/4878aafb-f0b3-3adf-82fa-32982696a4e0.roa
File: 4878aafb-f0b3-3adf-82fa-32982696a4e0.roa (raw, json)
Hash identifier: Zr3GuTTWU0sUIWiyT4QNbb4QFi0Y03mMf8d5VV8MEO8=
Subject key identifier: 19:35:CA:30:75:95:24:59:90:C9:98:10:5D:CE:E4:C8:73:60:03:20
Certificate issuer: /CN=4b7340fc-698a-4488-b211-325f4ded4152
Certificate serial: 010D0C9F4328584F7E7DAFB9E596843903114DC0
Authority key identifier: 23:3D:5E:57:55:04:17:3A:3B:29:FB:12:AF:F5:98:0C:ED:D6:77:A2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4b7340fc-698a-4488-b211-325f4ded4152.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4b7340fc-698a-4488-b211-325f4ded4152/4878aafb-f0b3-3adf-82fa-32982696a4e0.roa
Signing time: Wed 14 Oct 2026 01:00:13 +0000
ROA not before: Wed 14 Oct 2026 01:00:13 +0000
ROA not after: Tue 12 Jan 2027 02:00:13 +0000
asID: 9009
IP address blocks: 162.252.172.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4b7340fc-698a-4488-b211-325f4ded4152/4b7340fc-698a-4488-b211-325f4ded4152.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4b7340fc-698a-4488-b211-325f4ded4152/4b7340fc-698a-4488-b211-325f4ded4152.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4b7340fc-698a-4488-b211-325f4ded4152.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 29 Oct 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:7e:7d:af:b9:e5:96:84:39:03:11:4d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b7340fc-698a-4488-b211-325f4ded4152
Validity
Not Before: Oct 14 01:00:13 2026 GMT
Not After : Jan 12 02:00:13 2027 GMT
Subject: CN=84145797-fd6f-4deb-a46f-a90fd15e8ad1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a9:52:7a:d2:e7:77:3c:36:a0:10:7b:c5:96:
36:cb:d6:df:1b:5c:87:4f:a0:7a:70:1a:1a:ac:6a:
44:9a:cb:39:58:f3:db:3c:99:2c:b3:90:68:fe:fa:
1d:23:62:36:1d:a4:a6:9c:e5:86:12:a1:c3:41:f4:
57:00:04:4e:3c:dc:c9:d1:ce:1f:93:bf:7a:7e:e3:
77:4b:55:2e:bc:7e:dd:81:46:af:d1:9c:da:b3:e9:
43:5f:72:2e:8d:e8:90:f5:85:90:e0:b4:33:17:4c:
f7:c9:71:b5:b9:99:db:a5:18:ae:82:e2:de:0d:77:
d8:97:48:08:11:7c:c5:83:4d:1d:b1:83:e2:10:8c:
3c:72:92:c7:09:0e:30:7f:57:d5:37:1c:e8:dd:25:
c7:c6:7a:11:79:5d:9f:08:23:19:ba:71:86:76:44:
08:a5:3a:96:33:94:a1:5d:9e:54:35:e4:1c:96:12:
66:5e:91:66:8a:9a:50:2e:f6:91:a1:ae:97:e2:79:
e1:0d:98:47:42:b3:66:30:c0:3a:2c:40:a9:df:20:
fe:f6:97:d2:42:67:2a:e0:dd:a2:cd:e6:1e:e3:3c:
dd:ce:37:85:d0:7f:63:67:5d:76:70:08:a5:60:dd:
69:24:d0:57:65:a6:56:c6:05:d7:66:b0:e5:49:2d:
27:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:35:CA:30:75:95:24:59:90:C9:98:10:5D:CE:E4:C8:73:60:03:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4b7340fc-698a-4488-b211-325f4ded4152/4878aafb-f0b3-3adf-82fa-32982696a4e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4b7340fc-698a-4488-b211-325f4ded4152/4b7340fc-698a-4488-b211-325f4ded4152.crl
X509v3 Authority Key Identifier:
keyid:23:3D:5E:57:55:04:17:3A:3B:29:FB:12:AF:F5:98:0C:ED:D6:77:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4b7340fc-698a-4488-b211-325f4ded4152.cer
sbgp-ipAddrBlock: critical
IPv4:
162.252.172.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:6c:bd:3f:c5:af:71:a8:79:3c:24:68:20:03:50:b9:b7:ab:
83:ff:8b:08:a5:f4:6d:0c:91:b4:25:a9:83:58:ac:a7:d9:a5:
28:eb:82:6a:e7:f4:b3:1a:99:9f:c2:cb:c6:77:93:36:70:49:
74:1b:e5:02:ac:cb:1c:58:f7:6d:b9:25:d5:d5:cf:97:99:d8:
50:c0:da:34:1a:3d:54:a9:9c:e0:be:5f:b3:e0:44:25:0d:00:
7b:50:11:4a:c6:2e:38:21:68:bb:77:ca:6c:f1:e3:4e:84:6c:
a6:51:a3:48:d4:58:74:19:09:5b:57:88:2b:f5:86:dc:5b:34:
84:ec:ae:69:90:da:1f:a5:09:23:1a:17:93:49:84:4f:de:3c:
37:61:8f:52:0c:61:de:79:e3:c1:17:58:b5:a8:63:98:3b:b0:
50:0e:27:3f:ec:f7:a6:06:27:ac:c2:95:eb:a5:26:ec:61:82:
6a:de:15:4e:65:3b:27:33:e8:e5:09:84:30:0c:7b:7c:a4:6d:
55:6b:f0:85:6b:dc:47:ad:ba:36:d6:03:80:82:77:68:57:4b:
76:2c:97:ae:b0:f2:ba:bb:ce:ab:78:08:c2:11:49:00:fc:b5:
c2:13:b9:8d:ba:85:6e:81:10:29:48:0c:48:73:1b:15:23:b5:
81:5e:0e:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 10:32:43 2026 by rpki-client