
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/2a5b9403-d395-31ee-9698-c73b25f623f8.roa
File: 2a5b9403-d395-31ee-9698-c73b25f623f8.roa (raw, json)
Hash identifier: egjBLrddGIIR+VnqvO2QHIPTA4DGSHevKM98Hw5Ioy4=
Subject key identifier: E4:CB:EE:8D:7A:F8:29:70:9B:A5:0C:C8:1E:A4:58:E2:2A:47:18:13
Certificate issuer: /CN=45de47ca-0b52-44ab-af26-767d8a671192
Certificate serial: 010D0C9F4328584EBB11BF33C8B91AE4CA278C80
Authority key identifier: C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/2a5b9403-d395-31ee-9698-c73b25f623f8.roa
Signing time: Wed 05 Aug 2026 01:00:12 +0000
ROA not before: Wed 05 Aug 2026 01:00:12 +0000
ROA not after: Tue 03 Nov 2026 02:00:12 +0000
asID: 5645
IP address blocks: 173.246.128.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 03 Sep 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:bb:11:bf:33:c8:b9:1a:e4:ca:27:8c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45de47ca-0b52-44ab-af26-767d8a671192
Validity
Not Before: Aug 5 01:00:12 2026 GMT
Not After : Nov 3 02:00:12 2026 GMT
Subject: CN=428c9bac-1fd4-4d64-ae57-a876b2e20634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:0f:b8:30:bf:10:34:27:0b:fe:e3:3e:7b:4d:
f8:bd:71:be:f9:a5:29:f6:34:30:35:ef:2f:c1:b6:
23:eb:3a:ea:87:4d:37:57:d4:30:5c:b9:6a:4e:be:
ab:a0:fa:9a:d2:9b:21:6a:95:32:80:be:3d:70:d1:
d9:33:39:63:f8:5e:d0:7e:83:c2:98:d1:be:a0:32:
cf:78:1d:3b:7d:18:74:4b:2b:cc:3b:5d:4c:11:92:
e0:54:53:80:fe:f7:96:0d:7a:ae:88:f7:37:6f:47:
af:ff:83:27:42:87:c7:66:df:e5:46:fb:28:02:6d:
ba:c8:0c:d3:42:f3:c4:a9:16:a2:d3:b6:1a:e5:b6:
4c:8d:ae:81:2d:b6:fa:08:6a:99:e2:6f:5b:ab:7c:
e1:03:94:4b:65:62:7c:d8:b9:15:57:ba:64:38:fe:
8b:fd:8b:0f:14:e9:47:c6:aa:11:5c:5a:dc:37:5e:
6c:52:cd:6b:eb:5f:03:97:31:ee:8c:72:68:97:8a:
ee:27:66:c9:9b:0f:2a:0f:f9:f4:33:f1:2b:85:b0:
f4:a7:bb:eb:81:4e:02:da:f2:1d:95:36:29:54:c3:
ad:21:56:fe:b1:ef:da:73:64:0a:d3:37:19:17:0d:
a0:cf:48:4b:90:80:f7:d0:6d:bb:de:9a:c3:ca:81:
e5:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:CB:EE:8D:7A:F8:29:70:9B:A5:0C:C8:1E:A4:58:E2:2A:47:18:13
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/2a5b9403-d395-31ee-9698-c73b25f623f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.crl
X509v3 Authority Key Identifier:
keyid:C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer
sbgp-ipAddrBlock: critical
IPv4:
173.246.128.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:95:27:82:6a:4e:21:33:2c:4a:3b:20:1a:ba:29:05:2a:44:
84:54:c9:6b:71:f5:54:eb:93:71:a3:4e:26:13:29:c2:6c:db:
e2:99:17:9e:36:08:5b:6b:a5:17:e3:c1:19:d7:32:36:b9:59:
38:ce:83:44:eb:1c:89:a9:ab:2d:51:b2:e8:90:1e:c9:f5:34:
6a:8f:55:fc:e7:13:67:1b:0f:64:bf:2b:c9:0d:d1:1b:fe:92:
f9:f5:1d:89:11:e8:13:68:a2:27:4d:99:ac:70:a7:00:dc:e3:
f4:83:0e:94:50:af:ce:f8:ce:ca:6d:e4:9c:80:18:9a:bc:91:
04:ab:50:29:7e:20:a1:54:2c:7b:1c:b1:4a:d6:17:13:c8:46:
b7:30:ac:e4:83:81:ef:ba:f5:a6:e1:22:01:55:ec:10:32:bc:
44:0e:e3:08:3d:59:e4:16:92:03:b7:ee:53:4f:5e:c7:29:83:
8d:c3:25:f7:74:d6:97:3d:85:f9:91:6e:9e:2a:e0:c6:6e:d6:
06:6c:dd:6b:b3:71:d9:48:47:d0:73:70:9a:09:d3:a4:cc:e9:
dc:87:71:44:15:b6:81:ad:2a:60:da:f2:51:bd:cf:8b:76:80:
9f:72:d9:03:3f:13:22:5a:38:ad:4a:2a:d8:d9:df:b2:26:dd:
6b:8e:ad:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 2 17:58:06 2026 by rpki-client