
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/599d3743-7271-3612-ac7e-b695738f62c4.roa
File: 599d3743-7271-3612-ac7e-b695738f62c4.roa (raw, json)
Hash identifier: oXcwcWhHiIUMcbLLkaWsS1tOP/MV2YhbxqAqJ3y9QGk=
Subject key identifier: C1:58:E2:19:5F:72:59:C8:F2:87:3A:BB:17:A5:3C:C1:F7:94:0C:D9
Certificate issuer: /CN=390ceb1e-38f0-4690-8e12-fdef0dc0eddb
Certificate serial: 010D0C9F4328584F4975A47C43026495CE2EC8C0
Authority key identifier: EC:88:55:61:E9:7D:FF:FC:46:28:CC:12:12:F1:10:92:D8:74:55:4B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/599d3743-7271-3612-ac7e-b695738f62c4.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 44486
IP address blocks: 23.227.220.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 17 Oct 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:75:a4:7c:43:02:64:95:ce:2e:c8:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=390ceb1e-38f0-4690-8e12-fdef0dc0eddb
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=33995e54-90d2-4601-8f97-795772160774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:ec:fe:2a:01:41:f5:a2:09:c3:f8:6a:0c:0f:
43:ab:a0:60:55:11:03:30:05:17:fc:21:7f:43:ce:
f7:ca:46:d0:77:d1:1b:46:eb:3c:8a:01:c0:e7:52:
8c:f6:e8:f2:72:f0:37:c3:20:01:64:72:e2:6c:cf:
1d:17:49:f3:aa:75:80:58:c1:77:ba:6e:8c:f6:a8:
97:b5:36:c1:6f:8c:c7:eb:07:67:25:35:27:56:30:
33:ab:ee:9f:72:6f:65:b8:02:ad:d7:17:b4:e5:bf:
a8:96:11:32:43:d8:fd:2b:43:e1:1e:94:5d:f2:0a:
98:4a:81:4e:be:e3:5d:e3:a4:19:91:ad:84:88:62:
df:78:80:d7:0c:45:13:49:8f:45:02:07:e3:57:23:
ae:1f:76:9c:ba:58:30:dd:72:f2:6c:9b:ca:6e:8b:
1c:b5:5c:40:76:5a:6f:1f:10:09:78:c6:fd:12:97:
e6:fa:be:d7:a4:5e:ef:56:98:50:c7:a1:26:8c:fd:
4b:73:08:7b:a8:c0:22:5c:a4:1c:45:b5:2c:36:c0:
b4:71:7d:29:9d:3a:ff:15:c8:fc:b1:20:73:55:e6:
6d:28:68:94:97:dd:70:a2:5a:9a:ec:16:09:0e:59:
45:00:a8:61:6c:68:a5:69:ff:54:5c:f1:cc:35:60:
77:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:58:E2:19:5F:72:59:C8:F2:87:3A:BB:17:A5:3C:C1:F7:94:0C:D9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/599d3743-7271-3612-ac7e-b695738f62c4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.crl
X509v3 Authority Key Identifier:
keyid:EC:88:55:61:E9:7D:FF:FC:46:28:CC:12:12:F1:10:92:D8:74:55:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.cer
sbgp-ipAddrBlock: critical
IPv4:
23.227.220.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:03:6a:95:f6:14:17:90:f8:b0:ec:e1:a5:f2:b3:f8:bc:69:
ab:99:73:c6:e1:27:f5:71:6e:30:ed:f0:4a:90:07:08:0b:d5:
52:0d:1a:f3:d7:ac:b7:4a:25:c5:5d:c8:29:65:ac:98:8f:7c:
20:5a:03:92:09:9f:20:bf:9d:47:c9:39:6d:98:bc:7e:88:37:
42:f9:7d:4b:1c:27:d9:76:67:8f:d2:b7:85:a1:07:58:26:79:
6d:27:11:db:d4:b0:51:14:ae:08:1d:c7:ee:c0:7e:f6:44:24:
49:8b:bc:30:56:55:3a:ba:39:ac:e4:ba:e8:5d:28:7d:00:23:
dc:0c:76:34:28:13:ac:5c:ac:ac:af:59:fa:96:90:36:0c:ee:
af:85:18:21:31:0b:04:80:79:da:e8:10:88:46:6e:a4:80:d8:
e9:e0:25:da:e6:8f:f9:eb:6f:f9:38:fe:77:56:49:ab:fe:d3:
8c:6b:41:5b:65:8f:5f:61:c0:50:9f:69:ce:bb:da:6a:7e:7f:
8c:f6:3c:93:e9:89:3a:29:48:38:d6:1e:81:63:fe:d6:42:13:
e5:51:94:80:a7:72:dd:1e:94:91:65:36:4f:67:51:5d:5d:91:
0a:5b:48:a1:65:cf:d0:08:61:72:93:e5:7b:fa:13:01:4c:7a:
19:4f:98:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 16:03:49 2026 by rpki-client