
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/418625d1-9c47-3c11-ab35-4b8e2466c186.roa
File: 418625d1-9c47-3c11-ab35-4b8e2466c186.roa (raw, json)
Hash identifier: cNYxtpk1geJ4AlbAUVqyZEZeRiUXSwUhxutE+RpMW0g=
Subject key identifier: AF:8B:D7:ED:66:2D:08:EC:DA:7A:A3:3D:CB:67:78:0E:35:B5:9B:CF
Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial: 010D0C9F4328584EBF3C4648C2DB259419DD4880
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/418625d1-9c47-3c11-ab35-4b8e2466c186.roa
Signing time: Thu 06 Aug 2026 12:49:21 +0000
ROA not before: Thu 06 Aug 2026 12:49:21 +0000
ROA not after: Wed 04 Nov 2026 13:49:21 +0000
asID: 396362
IP address blocks: 173.208.56.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 15 Aug 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:bf:3c:46:48:c2:db:25:94:19:dd:48:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Validity
Not Before: Aug 6 12:49:21 2026 GMT
Not After : Nov 4 13:49:21 2026 GMT
Subject: CN=8fee3ab7-656a-4e7f-a379-42c96379430b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:18:ba:59:cb:cd:34:f4:24:a6:e9:c1:c5:3c:
d1:ff:25:0f:17:4c:a4:93:c9:cd:b8:0a:f5:b6:99:
b4:17:bd:77:55:1d:7e:a3:60:63:07:c4:25:48:39:
22:99:29:51:c8:97:50:21:49:b1:52:1c:53:d3:02:
b5:d6:8e:61:85:fd:21:3f:8d:57:32:9f:4f:b6:1b:
cd:e5:75:30:19:ad:c4:19:59:25:35:af:78:c5:3b:
77:3d:4f:fc:16:0a:83:a1:f1:7c:5d:74:04:52:97:
62:6e:4d:68:e8:3b:fc:79:82:ee:0a:64:49:b8:9d:
f6:8e:16:87:13:3d:76:4a:5d:64:6d:5b:b5:ed:bb:
37:3e:4b:1e:8c:f0:37:8a:f3:26:7c:9b:ef:ec:43:
26:e2:b2:8f:44:8d:b1:69:93:1b:76:55:72:71:21:
af:7f:1d:0a:13:e3:63:5d:2c:1f:f3:46:75:21:2b:
ae:2d:7b:aa:ec:5b:d1:6a:c3:cf:c5:0e:83:05:e8:
c0:00:19:64:c2:2b:57:57:97:a4:d3:4d:0e:91:7a:
71:e8:a6:c2:d6:94:6a:78:37:db:ef:86:af:7c:74:
f3:ca:24:41:5d:45:ff:77:bc:c8:71:ad:ff:7d:ed:
6c:5f:65:78:ae:65:2f:21:30:57:f5:88:c7:ed:7f:
75:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:8B:D7:ED:66:2D:08:EC:DA:7A:A3:3D:CB:67:78:0E:35:B5:9B:CF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/418625d1-9c47-3c11-ab35-4b8e2466c186.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
X509v3 Authority Key Identifier:
keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
sbgp-ipAddrBlock: critical
IPv4:
173.208.56.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:30:11:b3:79:c9:f0:03:8b:42:71:2d:88:51:b7:0a:04:9a:
7b:5b:d7:50:75:9f:32:04:35:b9:23:22:76:3a:c9:a7:1b:64:
c5:a8:ba:78:a5:c5:13:c0:88:1e:b5:2a:93:1e:c3:6b:81:9f:
93:ed:67:c8:13:3e:42:fe:de:e5:0d:31:83:9c:c7:c1:20:05:
f9:10:d6:2c:92:27:78:b8:0d:92:1a:9f:89:79:5f:dc:6b:0f:
87:35:d7:1a:9b:ff:c1:cd:1a:2a:4f:7e:1c:88:ff:35:95:dc:
b6:e5:6d:22:5f:18:63:86:e0:0d:97:7f:48:91:41:d9:91:5a:
8b:b2:0b:9b:71:1b:43:42:44:4e:86:dd:93:16:56:fa:6a:82:
d4:a7:ab:98:cf:20:d0:ae:ad:d2:e2:c6:10:c0:25:81:3d:f9:
f8:81:35:2a:2c:05:a8:f3:12:ab:da:94:63:89:d1:63:39:89:
7c:ae:c9:41:e2:c6:03:9d:d2:cf:96:d6:29:05:7e:cc:d4:03:
a1:f2:38:e8:47:7d:0a:43:72:de:9a:b4:76:f8:52:1f:10:8e:
c4:4c:09:80:ae:48:40:3b:b6:7d:3e:97:26:0e:4f:63:b5:75:
a0:b3:2c:bb:63:6a:67:5e:7b:10:2d:fa:4c:f2:20:59:34:bc:
a7:da:4a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 14:16:02 2026 by rpki-client