
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/e3d82341-289c-3a6e-b275-a759634f1b4a.roa
File: e3d82341-289c-3a6e-b275-a759634f1b4a.roa (raw, json)
Hash identifier: QSaHTtdc4s4N4tJhOAE1rJgCbVCEfeiD3iR8MC7o/B8=
Subject key identifier: 9B:2B:F5:AF:7F:A4:8D:75:F7:20:CD:51:3F:56:50:01:72:49:70:74
Certificate issuer: /CN=2aa438c9-0cbb-4364-946d-9714249a8222
Certificate serial: 010D0C9F4328584DB075876881211F4C39386880
Authority key identifier: 05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/e3d82341-289c-3a6e-b275-a759634f1b4a.roa
Signing time: Fri 01 May 2026 13:00:30 +0000
ROA not before: Fri 01 May 2026 13:00:30 +0000
ROA not after: Thu 30 Jul 2026 13:00:30 +0000
asID: 63293
IP address blocks: 157.240.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 07 May 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:b0:75:87:68:81:21:1f:4c:39:38:68:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa438c9-0cbb-4364-946d-9714249a8222
Validity
Not Before: May 1 13:00:30 2026 GMT
Not After : Jul 30 13:00:30 2026 GMT
Subject: CN=edfbb20b-2dd2-46f3-b280-56092ba330b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e7:63:e2:77:be:97:7c:65:0f:7c:c7:d5:31:
24:68:72:24:1d:f7:bd:78:82:c5:05:e7:58:24:95:
33:f2:81:42:31:d3:e5:32:02:b5:ce:90:33:18:6e:
0b:7b:6d:1c:8c:aa:c9:aa:be:52:13:b9:5b:87:30:
37:22:6a:05:93:af:3f:03:de:48:e5:11:2c:88:0d:
30:1e:68:16:70:10:32:dc:0c:2e:14:cc:87:f4:65:
cd:87:12:9c:15:e8:56:75:f5:c1:80:39:c7:f4:d7:
ff:64:ab:81:06:47:b9:22:c4:18:91:c0:1b:17:95:
47:26:cd:92:b3:2a:2b:da:38:9a:34:10:ea:e1:0a:
f4:af:77:91:6b:b2:63:e9:cf:a1:ec:c4:f3:43:47:
19:df:ba:3e:4e:df:03:e3:da:ef:7a:7b:68:95:a0:
a0:14:d3:f6:bd:3b:23:08:36:83:05:92:bb:e2:b5:
2c:0e:2e:d4:24:c9:02:55:ee:d2:cb:6a:85:df:10:
84:24:19:32:b3:d2:36:d3:17:c2:f3:df:76:a7:b4:
35:cb:45:30:48:84:ea:38:22:86:34:0f:c0:ba:34:
2d:37:a9:27:6b:ba:f2:b5:c6:bc:85:2f:d9:83:82:
98:61:df:d4:bb:82:24:17:f6:e2:e0:19:dc:f3:c8:
c7:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:2B:F5:AF:7F:A4:8D:75:F7:20:CD:51:3F:56:50:01:72:49:70:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/e3d82341-289c-3a6e-b275-a759634f1b4a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl
X509v3 Authority Key Identifier:
keyid:05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer
sbgp-ipAddrBlock: critical
IPv4:
157.240.188.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:54:eb:5b:3a:57:fb:49:b5:33:4a:8b:67:18:26:79:11:e5:
13:2e:80:ac:ec:48:54:23:da:e4:f8:35:90:36:71:df:31:ef:
12:ac:a4:de:f4:a8:dc:dd:1c:31:cf:bf:81:6e:b0:2d:3c:bf:
61:27:2b:03:d6:f3:bc:6f:7f:e2:5b:c9:72:e9:33:26:9d:f0:
2b:00:19:a8:39:32:20:51:4b:51:ce:eb:df:fe:ce:a2:2e:dd:
ca:03:91:88:b5:8f:a4:50:11:20:f5:c9:be:44:56:44:21:8b:
d1:72:0c:6d:f7:20:15:80:7a:bf:90:ca:5d:3b:25:bb:fd:0a:
81:52:d6:79:b9:c7:56:5b:b2:4b:2b:4d:95:28:74:fe:0a:6b:
7a:08:be:a4:1e:53:83:33:77:05:9a:44:60:7c:34:f9:cc:40:
e5:01:7e:e4:43:de:84:7a:38:06:4d:13:c7:30:d0:ab:14:d2:
66:96:00:2b:2f:28:bb:2d:4f:08:f1:31:87:2e:8e:15:d3:cf:
d7:ce:f6:e7:e2:4b:ce:01:82:01:d5:08:bf:bc:55:1e:83:74:
a4:95:0f:d7:59:fe:b8:45:20:44:5c:6c:fe:5f:c3:69:10:6d:
84:fc:f3:7d:00:d6:a2:d7:5c:45:eb:ef:04:16:6d:61:6c:53:
77:1d:23:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 01:16:26 2026 by rpki-client