
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6f96429f-fd5d-30fb-9c7b-75baebd5a305.roa
File: 6f96429f-fd5d-30fb-9c7b-75baebd5a305.roa (raw, json)
Hash identifier: BYZO3mgYCnHgpkdEmCww1txZnS0Dhyl0PcbXK6TPg30=
Subject key identifier: BA:F9:56:3E:77:6C:79:4B:FB:9A:4C:BF:4F:FE:D9:EF:83:76:97:45
Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial: 010D0C9F4328584D0BDD0ED842C94871A5783EC0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6f96429f-fd5d-30fb-9c7b-75baebd5a305.roa
Signing time: Tue 03 Mar 2026 14:00:40 +0000
ROA not before: Tue 03 Mar 2026 14:00:40 +0000
ROA not after: Mon 01 Jun 2026 13:00:40 +0000
asID: 10557
IP address blocks: 23.27.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:0b:dd:0e:d8:42:c9:48:71:a5:78:3e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
Validity
Not Before: Mar 3 14:00:40 2026 GMT
Not After : Jun 1 13:00:40 2026 GMT
Subject: CN=eb6c193a-cd7f-486e-8d20-d2b98ed8a35f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:01:ed:0f:42:42:78:48:77:37:6d:c9:68:76:
bd:fe:b8:ec:04:26:34:d7:e3:83:50:b7:a4:dd:fa:
5e:b2:6c:51:64:cf:5f:9e:d0:5a:57:cf:f3:6a:e7:
fd:26:06:e8:83:b8:10:d5:73:61:04:17:e0:31:19:
ac:94:a8:83:27:24:8c:f3:8d:00:71:d5:1e:e9:50:
87:c0:1d:3d:95:72:50:66:0d:1d:fb:d9:08:a3:b4:
83:56:aa:22:bd:2d:32:9a:21:74:a2:4f:e7:58:b4:
af:ce:dc:eb:ea:27:68:1d:2f:0e:90:07:b5:b0:f0:
76:ce:69:bf:5b:08:9d:ec:09:2c:85:cd:e2:94:9f:
a5:5e:42:d1:ee:de:02:1f:3e:08:32:ff:0a:54:d1:
de:70:70:72:e9:f5:92:d7:ed:9b:f9:82:82:40:b8:
ee:60:4d:7e:6b:e2:11:20:22:6f:5a:f0:2c:cf:bd:
fd:92:4c:b3:86:91:05:51:6e:82:34:02:99:60:42:
1b:19:47:26:53:fa:90:00:1a:f2:71:07:75:fa:70:
f6:94:fc:76:e1:7d:65:63:ff:6b:89:36:fc:ac:a7:
ca:37:38:f1:a7:e2:6e:2a:0d:c3:86:e4:ac:68:d5:
ed:5a:3d:44:6d:3c:f2:e2:bb:ce:0c:dc:14:ba:f9:
21:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:F9:56:3E:77:6C:79:4B:FB:9A:4C:BF:4F:FE:D9:EF:83:76:97:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6f96429f-fd5d-30fb-9c7b-75baebd5a305.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
X509v3 Authority Key Identifier:
keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
sbgp-ipAddrBlock: critical
IPv4:
23.27.19.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:9a:14:80:30:e3:73:85:16:3f:c9:3c:4d:c5:e9:32:af:d8:
97:94:ed:4d:5a:4b:4e:77:44:ee:58:a3:6a:08:54:2c:71:9e:
0f:11:8b:b3:a4:27:ed:4c:f3:d6:32:e4:b4:71:50:5a:33:d7:
f7:0f:85:a5:c7:e5:b8:58:66:23:e0:f0:44:b6:9e:f7:21:8d:
83:ad:e0:04:f8:4c:8c:bd:2f:7f:1a:73:2a:36:2a:51:31:85:
6f:30:0e:cd:e6:be:b7:e5:0d:dc:65:a6:ea:d9:15:6c:2b:ed:
83:f4:2e:35:ab:ef:12:66:9b:0a:72:f4:c4:f2:28:8a:38:b3:
dd:e6:64:2e:54:b8:94:ec:65:7f:be:57:26:44:2a:82:6f:c0:
ad:94:45:b3:74:40:7a:ab:87:d9:ba:26:a4:2b:9e:8d:4f:6b:
7a:f3:18:bb:2e:f6:88:10:2e:fe:d9:36:d7:23:1d:bb:f9:f1:
71:b5:97:bf:f5:54:a9:5d:6d:2d:75:71:42:f6:02:7b:d7:70:
5a:11:0a:8b:e4:a9:f8:da:7d:31:68:66:2d:b4:52:8c:56:6f:
55:8e:cf:99:a3:6e:67:4c:3c:84:15:72:6e:8f:2a:35:f1:a6:
0c:81:98:0c:34:bc:8e:4e:48:91:a9:55:ed:35:af:19:4c:fd:
2f:f9:37:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:40:51 2026 by rpki-client