
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ba9c0fe5-8ac6-42a2-9c0a-50534aaa01c5/4d457c85-19ad-34bb-9e92-600f7f0d36ab.roa
File: 4d457c85-19ad-34bb-9e92-600f7f0d36ab.roa (raw, json)
Hash identifier: yMnDOnDC0TX0k8PaqbFR6hpvqvhw8sPR9Hdf3ZQsErg=
Subject key identifier: 12:55:6E:F8:09:C7:18:AE:78:B1:89:BB:C4:D4:CC:44:B0:96:D4:D3
Certificate issuer: /CN=ba9c0fe5-8ac6-42a2-9c0a-50534aaa01c5
Certificate serial: 010D0C9F4328584D95F00B8B592C8FC46E55DB00
Authority key identifier: FA:1E:C0:9E:FD:15:31:F1:5A:5E:41:B6:7D:07:06:AB:76:F2:2C:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ba9c0fe5-8ac6-42a2-9c0a-50534aaa01c5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ba9c0fe5-8ac6-42a2-9c0a-50534aaa01c5/4d457c85-19ad-34bb-9e92-600f7f0d36ab.roa
Signing time: Wed 22 Apr 2026 01:00:23 +0000
ROA not before: Wed 22 Apr 2026 01:00:23 +0000
ROA not after: Tue 21 Jul 2026 01:00:23 +0000
asID: 21743
IP address blocks: 163.123.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ba9c0fe5-8ac6-42a2-9c0a-50534aaa01c5/ba9c0fe5-8ac6-42a2-9c0a-50534aaa01c5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ba9c0fe5-8ac6-42a2-9c0a-50534aaa01c5/ba9c0fe5-8ac6-42a2-9c0a-50534aaa01c5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ba9c0fe5-8ac6-42a2-9c0a-50534aaa01c5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 05 May 2026 02:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:95:f0:0b:8b:59:2c:8f:c4:6e:55:db:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba9c0fe5-8ac6-42a2-9c0a-50534aaa01c5
Validity
Not Before: Apr 22 01:00:23 2026 GMT
Not After : Jul 21 01:00:23 2026 GMT
Subject: CN=eed95e47-d389-47e9-9ca1-b2a272441182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:56:e9:3e:e4:46:18:c8:05:db:44:94:a5:46:
bb:fc:42:d9:fa:d2:9b:09:82:36:e7:50:2c:0d:76:
b4:c0:f1:ce:ba:0f:a3:18:77:46:7b:69:14:54:fb:
42:65:d8:55:b6:b7:dd:c1:75:1f:72:35:44:23:3d:
6c:40:c9:0c:72:24:6f:0d:ab:8e:1a:b9:b2:f5:78:
ce:74:f6:60:73:0b:70:44:fa:26:db:ca:39:4e:d8:
96:64:48:96:d6:e5:1b:4b:1a:78:c5:dc:3c:77:a5:
fb:5b:cd:f1:23:1a:ba:d3:88:24:69:db:4c:9b:1f:
52:ff:d0:00:35:84:2d:5e:f2:c8:5a:78:ac:f9:20:
83:21:11:48:09:29:dd:88:91:1d:ab:a9:86:97:d3:
eb:f0:0c:68:2d:e3:0b:0d:21:23:a9:81:df:90:88:
b0:3a:b9:f4:37:f5:db:b7:b5:ae:1a:de:fa:13:6b:
3b:e7:b6:59:1a:38:52:40:88:37:69:be:40:98:6c:
04:bb:7e:cd:08:7c:67:26:4b:29:1b:b6:d8:e3:ac:
fb:9f:34:35:16:de:da:57:24:3e:cb:64:bf:03:2f:
7e:73:01:95:38:96:cc:62:06:0e:18:f2:bf:c9:9b:
f8:4c:f8:8b:69:f0:e4:45:26:26:4e:75:9e:1e:43:
27:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:55:6E:F8:09:C7:18:AE:78:B1:89:BB:C4:D4:CC:44:B0:96:D4:D3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ba9c0fe5-8ac6-42a2-9c0a-50534aaa01c5/4d457c85-19ad-34bb-9e92-600f7f0d36ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ba9c0fe5-8ac6-42a2-9c0a-50534aaa01c5/ba9c0fe5-8ac6-42a2-9c0a-50534aaa01c5.crl
X509v3 Authority Key Identifier:
keyid:FA:1E:C0:9E:FD:15:31:F1:5A:5E:41:B6:7D:07:06:AB:76:F2:2C:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ba9c0fe5-8ac6-42a2-9c0a-50534aaa01c5.cer
sbgp-ipAddrBlock: critical
IPv4:
163.123.245.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:01:5d:a6:32:6f:ee:07:8f:79:63:f2:1c:9e:7b:bd:bc:6a:
6d:3a:ca:36:2b:be:fc:56:02:be:2f:24:73:a8:c3:de:c4:ad:
0a:99:b4:6b:d2:16:d1:71:fe:9b:2e:1a:53:2b:f8:d0:d5:76:
84:b3:42:e0:ca:0b:8a:43:4d:ff:7d:9d:e3:a7:cc:2b:fc:1c:
6d:6c:2c:35:86:4d:7b:eb:f0:b8:57:34:35:29:33:42:d6:14:
f6:74:03:7e:72:0d:33:db:67:69:0e:17:13:c8:70:10:f0:66:
a8:1b:ac:c1:1e:28:a4:ad:f1:34:a0:25:83:27:2f:c9:09:c3:
d5:57:dd:4c:78:7f:ba:79:f2:31:95:47:27:62:94:c7:a3:ec:
0a:e4:66:ff:be:45:4a:d0:e1:ef:b2:3b:5e:4b:d0:52:88:35:
2f:12:f6:0e:76:39:52:56:93:5e:68:54:07:a9:20:98:2f:6f:
27:90:e6:79:56:23:04:36:eb:c9:7d:c2:5d:77:ab:57:06:72:
1a:40:e1:e1:1e:12:6e:0e:42:e3:8b:a2:bd:b7:53:69:3d:41:
e7:41:08:90:ad:9a:5c:a6:c2:11:90:4b:65:23:74:fe:89:c2:
ca:ed:bd:e1:0c:1b:92:8d:e1:9b:c1:3b:db:94:f1:9c:8d:98:
5a:a1:8d:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 2 18:13:24 2026 by rpki-client