
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/470a175d-db99-33b9-a51a-b4dc7db04424.roa
File: 470a175d-db99-33b9-a51a-b4dc7db04424.roa (raw, json)
Hash identifier: V9znylkkZU84g816jvpIhvaz52ilqfmc1zT1wDzz2XI=
Subject key identifier: 05:34:05:1E:AB:A5:9E:95:D6:10:46:F0:3B:FE:AA:65:92:93:71:15
Certificate issuer: /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial: 010D0C9F4328584D91C0204D8072DAB89749FB80
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/470a175d-db99-33b9-a51a-b4dc7db04424.roa
Signing time: Mon 20 Apr 2026 13:00:33 +0000
ROA not before: Mon 20 Apr 2026 13:00:33 +0000
ROA not after: Sun 19 Jul 2026 13:00:33 +0000
asID: 0
IP address blocks: 204.137.172.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Apr 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:91:c0:20:4d:80:72:da:b8:97:49:fb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Validity
Not Before: Apr 20 13:00:33 2026 GMT
Not After : Jul 19 13:00:33 2026 GMT
Subject: CN=efbac882-6217-4513-9b45-aaaf13502887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b5:3f:52:8b:ad:64:c4:87:57:76:c1:d1:6e:
66:a3:50:6f:ff:93:12:44:c3:c0:d4:99:73:ba:05:
b9:7d:23:68:c5:6f:91:6f:30:e9:85:c5:9e:8f:33:
b8:53:01:81:cb:f2:4c:4b:0e:d4:f6:03:d4:f4:16:
fe:bf:e1:ec:0e:6c:38:2b:5a:cd:85:bb:d5:41:0d:
e3:f4:77:33:4c:67:4c:f9:ff:b2:11:46:c3:28:9e:
74:c8:e9:2c:0a:76:fb:4d:89:d4:66:71:0e:b1:e2:
47:4b:88:22:86:42:aa:9c:95:5a:ee:37:09:ac:f1:
50:48:ed:86:17:15:ae:b5:96:c7:73:e9:52:17:8b:
77:dc:78:5c:26:d0:88:89:3b:bf:63:eb:92:bb:ca:
3d:57:16:9d:22:0b:dc:a1:76:c0:43:e1:dc:5c:4f:
02:2e:9a:8c:02:96:9e:6e:d4:71:0b:c8:cb:4b:5e:
c5:0d:0e:0e:30:07:d2:33:6c:68:4e:9f:99:48:ef:
e0:a2:5a:f8:93:d8:06:7c:b0:dd:e7:53:56:0c:5f:
d7:8a:0c:1d:7b:d4:b4:64:2a:e0:82:36:9a:08:4d:
c3:8b:c7:c7:c6:42:3c:60:d6:57:70:4d:bf:12:0c:
f6:d5:2b:bd:7e:b1:c3:22:03:bb:dc:a2:4b:7f:12:
61:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:34:05:1E:AB:A5:9E:95:D6:10:46:F0:3B:FE:AA:65:92:93:71:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/470a175d-db99-33b9-a51a-b4dc7db04424.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
X509v3 Authority Key Identifier:
keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
sbgp-ipAddrBlock: critical
IPv4:
204.137.172.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:7e:aa:25:d1:2b:c0:bf:80:a3:47:b1:b8:51:5a:55:59:b1:
8c:aa:37:8f:8b:82:3a:cf:3b:d2:65:bf:44:9e:38:e4:f4:24:
1c:af:ec:18:44:76:57:16:9f:c8:01:82:2c:77:b3:41:1c:ce:
c7:87:c5:6b:da:29:49:e0:3d:99:fe:c1:97:55:58:46:5b:28:
58:46:0a:d2:c9:65:47:52:ec:26:34:71:47:30:9d:bb:4a:36:
bd:da:b6:69:2c:b9:d0:23:7a:23:70:7b:f3:3c:5d:ac:b1:e6:
05:19:5b:93:fd:f8:c6:c1:94:47:cf:2f:b6:c1:24:19:41:3f:
dd:d1:92:8f:3f:b9:cc:2c:99:4c:c4:92:40:ee:de:54:60:17:
47:87:b6:05:fe:bd:08:39:1e:c2:95:19:ef:ea:60:f3:bc:cc:
dc:ed:4c:ec:55:0e:4d:e2:b4:77:16:85:6f:e7:f8:5a:3b:1d:
89:b6:52:96:54:d1:7b:55:c1:05:de:73:fc:29:8a:f2:9d:12:
05:f2:c1:96:ab:b5:8a:a3:8c:11:ae:21:bc:1e:03:70:5c:57:
51:e1:1b:e9:6e:b4:b8:bf:f3:18:dd:de:f9:b9:32:c8:c6:80:
0e:ae:c1:35:43:c8:3b:71:90:b4:c5:f6:54:a9:21:01:1e:eb:
fa:41:6f:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 21:13:30 2026 by rpki-client