
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/cf3d3301-f945-35c4-9cb1-07fee82c2baa.roa
File: cf3d3301-f945-35c4-9cb1-07fee82c2baa.roa (raw, json)
Hash identifier: 7SXaWjZDfx7H2SwII7gIuTuTYl+hA1/nhmei4rIJ64A=
Subject key identifier: A6:D7:99:D1:30:3A:C6:78:82:1C:E7:EB:2F:4A:51:CF:DE:27:85:96
Certificate issuer: /CN=24c31307-e10d-4537-aa7a-6bbf3692c5d6
Certificate serial: 010D0C9F4328584CCFD7300B099987D24B9C6600
Authority key identifier: 53:48:D6:8D:23:DE:C9:1F:62:B7:F0:97:56:05:53:9B:42:52:3B:9C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/cf3d3301-f945-35c4-9cb1-07fee82c2baa.roa
Signing time: Tue 10 Feb 2026 02:00:31 +0000
ROA not before: Tue 10 Feb 2026 02:00:31 +0000
ROA not after: Mon 11 May 2026 01:00:31 +0000
asID: 396533
IP address blocks: 170.149.228.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/24c31307-e10d-4537-aa7a-6bbf3692c5d6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/24c31307-e10d-4537-aa7a-6bbf3692c5d6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Feb 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:cf:d7:30:0b:09:99:87:d2:4b:9c:66:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24c31307-e10d-4537-aa7a-6bbf3692c5d6
Validity
Not Before: Feb 10 02:00:31 2026 GMT
Not After : May 11 01:00:31 2026 GMT
Subject: CN=dabe0fc1-6f0f-47e2-ba4c-b75d2ea7cb29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e1:ad:e0:f3:7b:2f:0c:f3:b5:bc:e4:0e:1f:
9d:7e:66:b9:49:e5:88:9b:f5:ff:d2:92:f9:78:6c:
3b:ca:98:81:a3:62:88:99:f2:60:62:7c:8c:2f:23:
6f:c4:ae:b2:02:8e:2a:d7:b4:d8:5f:e7:50:43:1f:
bc:85:c9:15:53:84:70:02:ba:09:bf:07:ff:f6:d1:
e8:fe:e7:c8:78:c8:68:11:b3:04:bb:da:98:19:39:
1e:c5:29:7a:ae:ed:67:85:26:53:fc:49:3c:a5:44:
0e:a6:2c:5e:36:ca:e6:26:b3:a6:a1:1c:2f:07:97:
94:bb:91:35:ce:4e:e3:35:c7:7f:c4:03:86:bd:1d:
e1:16:64:6c:d4:30:f0:11:48:b8:e1:3f:1e:6f:55:
f5:35:ed:3e:9c:01:dd:0b:27:6c:ab:c6:38:0c:f7:
47:d5:52:c0:60:ac:87:95:98:df:ad:ac:c7:38:b4:
35:0a:3c:05:8e:cd:90:84:df:cf:be:9b:80:45:3a:
90:27:d6:6d:0b:3a:4a:2a:00:6f:4b:f3:a3:a2:df:
bd:41:e4:b8:f8:9e:6e:47:a1:03:90:e4:7d:05:97:
9f:00:5b:25:c9:62:bf:05:5c:30:ef:19:50:39:25:
6d:e6:fe:a7:cc:f7:23:77:65:58:ca:d4:29:42:7a:
25:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:D7:99:D1:30:3A:C6:78:82:1C:E7:EB:2F:4A:51:CF:DE:27:85:96
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/cf3d3301-f945-35c4-9cb1-07fee82c2baa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/24c31307-e10d-4537-aa7a-6bbf3692c5d6.crl
X509v3 Authority Key Identifier:
keyid:53:48:D6:8D:23:DE:C9:1F:62:B7:F0:97:56:05:53:9B:42:52:3B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6.cer
sbgp-ipAddrBlock: critical
IPv4:
170.149.228.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:eb:b6:de:fd:87:8a:51:d3:4a:8e:98:33:f0:73:47:2f:38:
bc:03:33:7a:8f:ff:88:12:5f:fc:f1:51:51:dd:cd:99:cf:b6:
0b:2d:8a:78:f6:53:53:93:a0:df:b5:c2:75:b4:98:0e:a2:58:
66:b5:00:bd:ac:34:53:7f:9f:5e:7b:5f:8c:f6:70:f1:9f:6d:
cc:8d:30:70:e8:63:2a:f4:07:4e:6b:e8:22:fd:c4:20:8f:95:
d6:b5:2b:c7:b2:71:d8:14:66:3c:87:96:fb:f8:77:86:50:5d:
d5:e9:79:ac:f2:2a:69:93:7c:87:b9:d8:fe:18:10:83:29:b4:
81:03:50:59:08:07:1c:28:62:1b:4d:dd:0d:af:ad:2c:01:09:
85:c7:5c:c9:51:0e:86:73:23:5c:03:57:19:bc:29:63:ee:54:
20:a7:2e:cf:6a:f8:6c:43:a0:c0:8d:1d:f7:16:f6:41:4b:59:
b3:c0:2f:08:e9:40:6c:28:08:48:e2:93:86:b6:36:30:7b:16:
a4:97:f2:bb:4b:b6:25:f0:90:df:8d:b7:51:12:77:51:41:c7:
37:9a:20:de:0d:04:90:3d:6b:e7:c2:44:84:d1:0a:be:e1:f2:
e8:43:0a:68:d6:4b:30:8f:54:b7:14:ab:83:7f:14:7b:48:4a:
b2:fd:1e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 22:53:27 2026 by rpki-client