
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/24be00cb-08b8-37e1-a259-258b11cf2a63.roa
File: 24be00cb-08b8-37e1-a259-258b11cf2a63.roa (raw, json)
Hash identifier: N0OcX9UzWlbf6S1SXYUryyNiADnQ3VVEm0R1fxxGq/s=
Subject key identifier: B8:22:8A:FC:36:2F:D5:E3:3E:16:FF:02:3F:26:4D:F3:E9:42:D3:07
Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial: 010D0C9F4328584F0FB7F3F1471ED07378979800
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/24be00cb-08b8-37e1-a259-258b11cf2a63.roa
Signing time: Fri 04 Sep 2026 08:43:13 +0000
ROA not before: Fri 04 Sep 2026 08:43:13 +0000
ROA not after: Thu 03 Dec 2026 09:43:13 +0000
asID: 395954
IP address blocks: 174.34.140.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 11 Sep 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:0f:b7:f3:f1:47:1e:d0:73:78:97:98:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Validity
Not Before: Sep 4 08:43:13 2026 GMT
Not After : Dec 3 09:43:13 2026 GMT
Subject: CN=466599bc-d4ed-43af-8d4c-427f1284afbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:75:08:b7:1e:39:81:2a:63:05:80:71:49:03:
65:29:a6:9a:58:02:39:82:6b:d3:58:c4:ac:e9:82:
e8:35:9c:ac:37:84:53:0e:af:85:dc:74:d5:cd:c0:
51:89:34:78:a8:10:9b:c0:3f:e8:28:a6:1e:de:ea:
b0:6c:1c:9f:c9:0a:18:ff:0f:45:94:0a:d2:0c:1c:
75:5e:ec:ce:d0:b8:27:4f:21:f1:67:50:34:1e:d8:
86:a4:a9:19:c0:da:d7:5c:ce:db:9f:01:78:01:39:
4e:38:fb:e1:30:1b:13:da:84:51:f6:43:fc:25:2e:
e6:61:3d:21:fc:80:79:ac:f0:d7:a1:4f:8c:4a:50:
4e:ac:74:65:74:1c:b4:45:8c:31:92:af:f1:cd:ec:
fc:a3:1b:94:00:81:3a:f0:8f:cf:a7:a6:17:2e:25:
96:53:f1:5f:72:a0:6e:de:0e:7d:c7:f4:8d:0e:ab:
fb:04:d1:fd:ea:6e:27:4e:e4:88:fb:7b:88:51:17:
dd:3b:c4:b3:a9:82:5c:e6:d7:dd:41:d1:07:14:db:
8e:2b:dd:cb:a9:84:ee:cd:46:02:04:ee:18:ef:14:
35:19:27:00:57:37:4b:cb:5a:59:8d:b8:90:b9:15:
7d:f4:59:73:b2:40:7f:37:dc:9d:42:86:bf:e4:d4:
25:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:22:8A:FC:36:2F:D5:E3:3E:16:FF:02:3F:26:4D:F3:E9:42:D3:07
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/24be00cb-08b8-37e1-a259-258b11cf2a63.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
X509v3 Authority Key Identifier:
keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
sbgp-ipAddrBlock: critical
IPv4:
174.34.140.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:a0:c6:e4:1f:ec:1a:2b:69:3f:59:38:69:27:66:02:74:e6:
b1:25:09:11:f9:e6:1d:d0:48:99:ec:1a:04:96:e8:35:e6:97:
eb:a3:58:cf:e6:81:a3:d4:c3:0d:37:33:ad:4b:4e:f5:d6:1f:
ec:70:c6:a1:56:fa:c5:51:4e:b8:cf:fe:83:7c:0a:fb:22:cf:
79:88:91:b7:50:25:2f:9e:a0:79:03:77:e8:e2:fb:39:f0:71:
f1:62:2b:9f:b4:17:ed:a9:f6:58:a0:cb:26:38:de:02:6a:b8:
1d:6d:15:58:e9:52:be:d8:5a:38:f7:8b:39:7e:52:2c:18:76:
a5:2e:37:e3:36:f3:4a:42:ac:64:c3:f7:77:22:f1:1d:b8:e0:
32:68:19:57:ab:58:55:16:bb:8d:c9:69:70:52:a7:80:e0:e9:
05:66:e8:85:13:50:26:09:39:13:46:ec:6b:0a:44:c8:12:6b:
2e:70:f1:23:45:45:da:69:05:cc:9e:73:da:ed:b8:de:5f:68:
f1:4e:4e:8e:85:80:e1:d3:68:b9:09:69:4d:dd:ab:a5:28:05:
a5:2e:2f:77:af:5e:dc:9c:ec:5f:12:10:91:51:a2:f9:7c:10:
30:5c:8d:3d:d1:0b:50:08:5d:9f:c3:55:87:99:27:ce:d9:71:
a1:a3:4e:bf
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Pt/PxRx7Qc3iXmAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5
OTdkMB4XDTI2MDkwNDA4NDMxM1oXDTI2MTIwMzA5NDMxM1owLzEtMCsGA1UEAxMk
NDY2NTk5YmMtZDRlZC00M2FmLThkNGMtNDI3ZjEyODRhZmJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnUItx45gSpjBYBxSQNlKaaaWAI5gmvTWMSs
6YLoNZysN4RTDq+F3HTVzcBRiTR4qBCbwD/oKKYe3uqwbByfyQoY/w9FlArSDBx1
XuzO0LgnTyHxZ1A0HtiGpKkZwNrXXM7bnwF4ATlOOPvhMBsT2oRR9kP8JS7mYT0h
/IB5rPDXoU+MSlBOrHRldBy0RYwxkq/xzez8oxuUAIE68I/Pp6YXLiWWU/FfcqBu
3g59x/SNDqv7BNH96m4nTuSI+3uIURfdO8SzqYJc5tfdQdEHFNuOK93LqYTuzUYC
BO4Y7xQ1GScAVzdLy1pZjbiQuRV99FlzskB/N9ydQoa/5NQllQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLgiivw2L9XjPhb/Aj8mTfPpQtMHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy
ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvMjRiZTAwY2ItMDhiOC0z
N2UxLWEyNTktMjU4YjExY2YyYTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx
YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5
OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy
ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBriKMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGSgxuQf7BoraT9ZOGknZgJ05rElCRH55h3QSJnsGgSW6DXml+ujWM/m
gaPUww03M61LTvXWH+xwxqFW+sVRTrjP/oN8Cvsiz3mIkbdQJS+eoHkDd+ji+znw
cfFiK5+0F+2p9ligyyY43gJquB1tFVjpUr7YWjj3izl+UiwYdqUuN+M280pCrGTD
93ci8R244DJoGVerWFUWu43JaXBSp4Dg6QVm6IUTUCYJORNG7GsKRMgSay5w8SNF
RdppBcyec9rtuN5faPFOTo6FgOHTaLkJaU3dq6UoBaUuL3evXtyc7F8SEJFRovl8
EDBcjT3RC1AIXZ/DVYeZJ87ZcaGjTr8=
-----END CERTIFICATE-----
Generated at Thu Sep 10 13:01:08 2026 by rpki-client