
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/40fa6496-0728-3f85-816f-def69dc3c4c1.roa
File: 40fa6496-0728-3f85-816f-def69dc3c4c1.roa (raw, json)
Hash identifier: 9FF1ZXQn9ibCXcII23z2PElXxXWlOES5FQsFO/b0zqQ=
Subject key identifier: 76:71:61:62:C3:58:AD:80:1E:E7:E4:C1:B2:07:51:69:A1:50:C8:10
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584DBA3AF82BA9F7E6E04D1D18C0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/40fa6496-0728-3f85-816f-def69dc3c4c1.roa
Signing time: Tue 05 May 2026 01:00:23 +0000
ROA not before: Tue 05 May 2026 01:00:23 +0000
ROA not after: Mon 03 Aug 2026 01:00:23 +0000
asID: 13737
IP address blocks: 23.26.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:ba:3a:f8:2b:a9:f7:e6:e0:4d:1d:18:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 5 01:00:23 2026 GMT
Not After : Aug 3 01:00:23 2026 GMT
Subject: CN=af0e28b8-5e37-48b7-a9ec-70aa535db5fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:da:18:72:1b:d6:5b:82:ea:fc:db:60:f8:4a:
2d:ad:2a:f8:42:9a:a6:28:28:3b:4f:69:e2:e6:20:
97:03:03:0e:51:b0:67:03:2c:17:96:0b:a9:32:ae:
77:9f:3a:88:3c:92:49:3d:d1:92:5f:0d:90:b6:f8:
d2:01:24:a6:01:9e:be:c7:66:fa:23:30:87:6e:65:
0b:03:fd:7d:f9:b6:ef:05:cd:0c:cc:19:f7:99:ae:
30:f8:3b:87:bb:74:64:ec:e9:c7:17:af:dd:2a:22:
39:c2:d1:60:69:ee:d7:48:68:a3:6d:e3:1c:a6:09:
02:a3:89:94:b8:ee:08:7d:61:06:d3:01:4a:04:a5:
1f:33:f4:25:be:c9:97:56:7a:91:ef:ae:9e:8f:c3:
0a:79:14:dc:b2:fa:48:50:22:03:fc:b5:40:de:a1:
1b:85:49:86:15:5a:b1:c4:91:ae:d6:80:b7:58:56:
c7:2e:36:29:1b:ba:65:1c:79:d6:fe:ed:54:af:99:
2d:44:ec:b5:56:47:28:a9:36:d9:4c:91:af:55:e9:
61:5b:d9:3f:38:af:93:ad:52:95:dc:34:19:0c:de:
43:1f:65:72:fd:20:c5:2f:9f:09:3e:17:ae:3a:8b:
38:6f:46:a2:a2:5f:81:ef:ab:65:2b:0d:79:0a:c4:
20:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:71:61:62:C3:58:AD:80:1E:E7:E4:C1:B2:07:51:69:A1:50:C8:10
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/40fa6496-0728-3f85-816f-def69dc3c4c1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.250.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:9b:4d:5d:81:b7:9c:39:29:e6:b1:a3:71:7c:ce:24:56:0e:
ec:39:0b:c5:10:e4:bd:20:1c:cf:ee:67:ae:e2:df:a9:a5:49:
33:cf:7f:55:86:b3:49:52:f8:63:fa:95:d1:b7:e3:01:2b:8c:
b0:a8:95:54:93:c8:7f:5f:41:2a:44:59:1e:07:ba:d5:ad:94:
e3:80:22:a4:13:fc:78:ce:f9:c0:40:80:aa:4f:de:92:0d:b4:
79:3d:ad:a4:75:88:eb:0e:f2:03:bd:3d:5c:1c:d4:87:02:30:
96:f4:00:d1:63:55:8d:55:7f:68:15:82:ca:be:43:d3:ff:3c:
59:3f:e8:b8:09:fb:45:79:7e:2b:ce:b6:9a:8f:83:11:c4:c1:
8e:d3:60:c6:6f:ec:79:a9:75:6d:8d:75:22:50:b2:67:96:22:
51:27:eb:9d:ae:a0:66:4a:50:5b:ab:ec:2d:0a:7e:d5:1d:a9:
ec:28:ca:7f:c0:57:1f:e1:9f:ff:f6:58:68:6e:c0:79:62:9d:
bf:8e:1b:1b:ce:73:b4:43:b2:ff:d2:85:de:4a:fd:80:d9:57:
8b:1f:5c:af:59:46:44:18:26:72:5b:81:fc:6b:16:e4:5e:95:
e8:7b:1b:d5:e5:3a:ee:db:64:e7:24:f4:f4:32:60:58:0a:58:
0c:79:be:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:28:44 2026 by rpki-client