
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/33a9ddc2-deb3-3384-ac02-7422445b9b79.roa
File: 33a9ddc2-deb3-3384-ac02-7422445b9b79.roa (raw, json)
Hash identifier: M9NwdDuGg9p3YM699RS6Fqd28m7ySGv0qfDfS/En4Z0=
Subject key identifier: 99:D1:A1:80:9C:AD:C6:80:94:61:9E:E8:36:F5:87:65:60:B5:FF:C8
Certificate issuer: /CN=a521f5ee-89d2-4088-abb9-f69291655e39
Certificate serial: 010D0C9F4328584E66DA1CACB7E456330E759580
Authority key identifier: 14:EE:0D:BC:78:58:6F:49:6A:4F:7C:2E:30:4A:4E:11:A9:FE:9B:73
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/33a9ddc2-deb3-3384-ac02-7422445b9b79.roa
Signing time: Sun 05 Jul 2026 21:00:11 +0000
ROA not before: Sun 05 Jul 2026 21:00:11 +0000
ROA not after: Sat 03 Oct 2026 21:00:11 +0000
asID: 400981
IP address blocks: 23.105.192.0/19 maxlen: 24
23.106.128.0/19 maxlen: 24
23.252.96.0/20 maxlen: 24
45.62.96.0/19 maxlen: 24
45.78.0.0/18 maxlen: 24
66.112.208.0/20 maxlen: 24
67.209.176.0/20 maxlen: 24
74.121.148.0/22 maxlen: 24
104.128.80.0/20 maxlen: 24
104.160.32.0/20 maxlen: 24
104.194.64.0/19 maxlen: 24
104.224.128.0/18 maxlen: 24
107.182.176.0/20 maxlen: 24
138.128.192.0/19 maxlen: 24
144.168.56.0/21 maxlen: 24
162.211.224.0/21 maxlen: 24
192.243.112.0/20 maxlen: 24
198.35.44.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/a521f5ee-89d2-4088-abb9-f69291655e39.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/a521f5ee-89d2-4088-abb9-f69291655e39.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 14 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:66:da:1c:ac:b7:e4:56:33:0e:75:95:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a521f5ee-89d2-4088-abb9-f69291655e39
Validity
Not Before: Jul 5 21:00:11 2026 GMT
Not After : Oct 3 21:00:11 2026 GMT
Subject: CN=14cd9353-3c41-40dc-a0c0-ffd677e23479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:7c:9b:02:b3:55:fc:64:2b:92:c8:3d:63:14:
9c:14:fe:4e:c2:01:c1:af:5d:06:34:25:95:89:85:
bd:8a:fb:9e:73:f9:23:d3:86:cf:a2:c4:50:3f:c3:
1f:83:7b:fb:c6:dd:ee:79:ee:16:b7:a7:5a:6e:45:
6a:d4:fc:5e:69:12:a0:ba:2e:ef:60:ca:f1:71:27:
76:a7:ea:7b:c0:df:61:3b:82:1a:70:2f:df:e2:1a:
6f:19:75:62:1e:32:c1:38:34:b1:d4:68:55:ce:22:
60:bd:03:d3:f2:c8:23:c2:da:29:ef:16:17:b4:1a:
ff:b6:46:43:81:8c:df:19:00:8b:95:df:76:9f:8d:
35:4c:8a:f8:7b:c8:bf:8a:3b:dd:15:c1:1f:f7:4d:
95:0c:e0:29:2c:b9:7e:c1:af:52:73:92:d4:d0:49:
39:bd:fc:19:7f:c5:10:79:2c:14:83:60:b0:f4:e7:
75:df:6a:c0:a3:78:91:45:5c:d3:96:43:f2:eb:6f:
7c:7b:96:5e:fb:55:3c:09:65:65:1d:e5:3e:ba:55:
c4:59:cc:f5:65:de:c2:6c:e9:ea:95:67:5f:98:75:
e4:64:85:63:c8:0f:d2:27:f5:60:b5:14:45:02:1c:
98:e3:24:13:d2:d4:a6:9a:66:0d:59:3f:62:40:20:
c2:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:D1:A1:80:9C:AD:C6:80:94:61:9E:E8:36:F5:87:65:60:B5:FF:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/33a9ddc2-deb3-3384-ac02-7422445b9b79.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39/a521f5ee-89d2-4088-abb9-f69291655e39.crl
X509v3 Authority Key Identifier:
keyid:14:EE:0D:BC:78:58:6F:49:6A:4F:7C:2E:30:4A:4E:11:A9:FE:9B:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a521f5ee-89d2-4088-abb9-f69291655e39.cer
sbgp-ipAddrBlock: critical
IPv4:
23.105.192.0/19
23.106.128.0/19
23.252.96.0/20
45.62.96.0/19
45.78.0.0/18
66.112.208.0/20
67.209.176.0/20
74.121.148.0/22
104.128.80.0/20
104.160.32.0/20
104.194.64.0/19
104.224.128.0/18
107.182.176.0/20
138.128.192.0/19
144.168.56.0/21
162.211.224.0/21
192.243.112.0/20
198.35.44.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:8d:aa:e9:e1:7f:31:f9:b1:57:c6:ed:0e:e7:f3:97:58:23:
ca:09:bb:94:27:db:fa:84:44:2e:63:95:78:38:11:fb:5e:d5:
6e:21:d7:01:ad:d6:1d:c9:35:7f:1c:1a:b9:aa:87:84:70:ce:
37:db:ce:bb:ea:cc:4b:06:3e:24:cf:2d:ed:57:1c:42:7f:73:
aa:be:aa:c6:09:fa:aa:5f:33:ac:b9:e6:96:55:70:19:c7:17:
74:f2:c3:f2:33:25:78:06:0d:e6:0b:18:02:7c:1b:28:70:54:
51:78:ed:0e:7a:35:0c:46:56:dc:d9:e5:27:f9:ea:75:5d:ee:
05:29:fb:ee:57:63:c2:5a:c2:eb:c3:fb:61:bf:a8:67:4c:88:
fe:fa:bf:91:bc:6e:a8:71:03:d3:9f:bc:95:a4:ca:76:69:c0:
c1:b5:f0:dd:8f:08:25:b9:e7:28:af:5c:f7:07:f2:32:d6:12:
91:17:b8:a8:ba:46:a7:cb:88:97:4b:d8:f8:b9:fd:6d:8b:7d:
35:7f:89:3c:8a:36:b7:61:ff:47:98:e4:69:78:0a:6a:cc:64:
aa:b9:f6:e0:46:49:5d:a0:4f:10:d7:9b:b8:cf:a2:d5:58:9e:
ca:07:a6:0c:19:47:3e:c6:f3:37:2d:3f:ac:67:61:bd:98:12:
d9:96:cb:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 15:04:16 2026 by rpki-client