
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/8c7a1872-31a2-3ade-bc81-6531f2cf4b49.roa
File: 8c7a1872-31a2-3ade-bc81-6531f2cf4b49.roa (raw, json)
Hash identifier: nVriDL6NvF73Dcie3qToMxNPptvNihgxk2jCgAhD1JQ=
Subject key identifier: 32:10:F6:C9:8B:D1:9E:09:D2:9D:6A:A5:EB:52:36:DC:FB:1F:FF:FD
Certificate issuer: /CN=f8e7a246-465c-42e8-8be1-af167b20b04d
Certificate serial: 010D0C9F4328584DA11AB1D215172D7682153280
Authority key identifier: 47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/8c7a1872-31a2-3ade-bc81-6531f2cf4b49.roa
Signing time: Sun 26 Apr 2026 01:00:25 +0000
ROA not before: Sun 26 Apr 2026 01:00:25 +0000
ROA not after: Sat 25 Jul 2026 01:00:25 +0000
asID: 3257
IP address blocks: 23.234.140.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 29 Apr 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:a1:1a:b1:d2:15:17:2d:76:82:15:32:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e7a246-465c-42e8-8be1-af167b20b04d
Validity
Not Before: Apr 26 01:00:25 2026 GMT
Not After : Jul 25 01:00:25 2026 GMT
Subject: CN=44f1c257-a6cb-4a23-abee-da41f8f648a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:25:43:20:3e:50:16:4b:be:74:3c:73:98:d5:
da:36:f2:a9:ea:5d:27:0e:c1:c1:4b:7f:8b:99:fc:
72:75:ee:9c:d0:10:36:75:84:bb:41:59:32:ce:94:
09:8e:8d:27:2f:86:95:f1:26:cb:96:53:80:45:b4:
db:9b:7d:3d:3f:01:1e:04:c1:85:d2:80:5f:72:f8:
a9:6a:7c:31:9b:11:58:82:48:09:b1:3c:45:03:bd:
98:8b:18:27:09:9b:c7:03:81:82:e5:36:1f:a2:6e:
05:1f:52:d6:1a:ca:f6:34:b1:c7:dd:69:83:bb:62:
d1:08:48:a9:e8:81:0f:77:b4:ae:7d:e0:8f:64:c5:
67:f2:95:dc:87:0f:d4:7a:eb:3c:37:c5:e7:da:e3:
a5:34:f7:6e:5d:ae:07:0b:af:8a:da:b0:1c:92:4c:
5c:47:5e:92:7f:ba:22:0f:a2:a3:9f:51:d4:27:96:
b3:70:a2:a9:35:80:a6:0e:00:f2:33:c5:49:1e:9d:
b3:43:5d:0e:35:89:1a:04:16:12:cf:79:96:23:0a:
43:92:62:68:e5:02:1e:e3:d1:73:7f:00:99:3f:8a:
44:1d:ac:c9:1b:a1:2b:08:83:fd:f2:fc:b4:d8:ef:
06:1f:55:79:bb:cb:39:f9:77:1c:60:1b:95:9c:13:
ee:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:10:F6:C9:8B:D1:9E:09:D2:9D:6A:A5:EB:52:36:DC:FB:1F:FF:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/8c7a1872-31a2-3ade-bc81-6531f2cf4b49.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl
X509v3 Authority Key Identifier:
keyid:47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
sbgp-ipAddrBlock: critical
IPv4:
23.234.140.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:9d:93:14:31:1a:07:6f:8e:c0:b3:d4:7b:cf:c5:a0:7d:87:
4d:1c:53:74:d8:a2:ef:51:73:13:c2:70:84:65:e2:db:db:cb:
6a:21:80:45:f6:7c:96:aa:f5:7a:f0:f6:5b:38:73:2b:66:f4:
18:6d:f1:53:cc:54:4e:ce:a6:14:dc:78:a8:a3:84:56:d6:5f:
1e:05:07:aa:30:f5:cd:69:15:11:10:15:58:85:ab:b7:83:1b:
b4:de:cd:2c:ea:ca:c2:62:d3:0c:7f:02:ed:12:ec:c6:99:7e:
a5:f1:c5:d3:2e:97:41:25:01:7d:21:4e:8b:e8:9e:a2:78:97:
e6:1d:fa:18:6b:11:5a:65:63:96:df:53:e5:03:26:45:d2:29:
dc:4e:51:ac:19:3c:28:f6:4a:91:4c:d6:c3:f9:34:51:ca:41:
23:c7:25:96:85:7d:d7:26:7d:89:48:9f:1c:fc:07:2f:e6:60:
e3:3e:e6:3d:0e:b8:7c:ea:c4:30:1a:c9:4a:6c:16:ab:db:af:
65:5f:68:97:90:09:ab:b5:c6:b3:b4:94:c5:7e:bd:c0:1b:10:
1d:50:5f:61:9a:d1:43:2b:50:a0:84:89:28:b2:67:1c:db:6f:
53:44:c3:59:d7:cd:30:e3:7c:3a:4a:7a:97:6f:60:80:6c:0b:
62:67:83:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 00:31:49 2026 by rpki-client