
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68a35552-4277-4e62-a51e-4b31ab8d4ca0/eaf23d5c-7bbe-3565-9f9a-56cbc342ca34.roa
File: eaf23d5c-7bbe-3565-9f9a-56cbc342ca34.roa (raw, json)
Hash identifier: HCKQTIkYbtuZvoDbfp864iJBglbXNM7pxPRxsPPBjeg=
Subject key identifier: 0C:3C:AD:A8:12:62:1F:21:26:5C:DC:A3:1F:0A:8B:8E:74:E9:46:B9
Certificate issuer: /CN=68a35552-4277-4e62-a51e-4b31ab8d4ca0
Certificate serial: 010D0C9F4328584D316F6DAD8A82F626EF371600
Authority key identifier: 16:B2:4D:AD:C8:30:67:AE:94:AB:66:CF:54:E8:C6:2A:E6:3A:52:59
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68a35552-4277-4e62-a51e-4b31ab8d4ca0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68a35552-4277-4e62-a51e-4b31ab8d4ca0/eaf23d5c-7bbe-3565-9f9a-56cbc342ca34.roa
Signing time: Tue 17 Mar 2026 01:00:32 +0000
ROA not before: Tue 17 Mar 2026 01:00:32 +0000
ROA not after: Mon 15 Jun 2026 01:00:32 +0000
asID: 401021
IP address blocks: 23.176.152.0/24 maxlen: 24
2620:0:8000::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68a35552-4277-4e62-a51e-4b31ab8d4ca0/68a35552-4277-4e62-a51e-4b31ab8d4ca0.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68a35552-4277-4e62-a51e-4b31ab8d4ca0/68a35552-4277-4e62-a51e-4b31ab8d4ca0.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68a35552-4277-4e62-a51e-4b31ab8d4ca0.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 29 Mar 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:31:6f:6d:ad:8a:82:f6:26:ef:37:16:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68a35552-4277-4e62-a51e-4b31ab8d4ca0
Validity
Not Before: Mar 17 01:00:32 2026 GMT
Not After : Jun 15 01:00:32 2026 GMT
Subject: CN=a0d2d907-0c8b-4e3d-b0c2-212c6eba2b95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9c:ed:c5:e1:4a:47:db:78:c4:04:4a:db:51:
59:15:4f:06:43:f4:48:21:12:7d:53:74:2b:11:4c:
70:22:0e:f6:17:37:88:db:59:44:a7:3e:06:c9:d9:
4d:a6:57:b5:5b:c1:4e:6f:7b:b1:a4:5b:a1:9b:24:
7b:d3:58:8d:de:9c:1c:5c:c8:14:2e:fb:72:9b:aa:
44:60:23:20:50:f4:89:3c:db:2c:bf:e1:fc:28:bc:
ed:37:b4:b5:e7:07:cd:fd:6d:83:5e:e1:f5:77:ea:
74:1a:3b:ab:6e:f6:76:ae:69:38:39:1a:33:87:41:
a3:15:a9:fa:f7:20:3d:40:72:00:6c:f7:6e:b9:ab:
53:36:72:13:0e:0d:5d:23:56:48:e5:1f:48:c0:d5:
18:40:f7:93:fd:99:9b:56:7e:ba:b5:1d:fd:07:4e:
12:3b:2b:5a:40:db:47:b4:bb:a8:69:89:83:24:63:
55:48:7e:d7:3c:e3:fa:6c:f6:15:dd:36:9d:3d:5f:
4f:51:ec:e4:86:b7:b9:27:a0:1a:16:50:75:57:1a:
ab:67:2e:38:aa:53:8b:10:ef:e7:a8:61:dd:99:db:
59:0d:04:e0:70:38:b0:11:68:c5:bb:2b:dc:aa:4b:
c5:28:92:5e:c6:20:90:5e:00:06:1b:0c:38:b1:f8:
9f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:3C:AD:A8:12:62:1F:21:26:5C:DC:A3:1F:0A:8B:8E:74:E9:46:B9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68a35552-4277-4e62-a51e-4b31ab8d4ca0/eaf23d5c-7bbe-3565-9f9a-56cbc342ca34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68a35552-4277-4e62-a51e-4b31ab8d4ca0/68a35552-4277-4e62-a51e-4b31ab8d4ca0.crl
X509v3 Authority Key Identifier:
keyid:16:B2:4D:AD:C8:30:67:AE:94:AB:66:CF:54:E8:C6:2A:E6:3A:52:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68a35552-4277-4e62-a51e-4b31ab8d4ca0.cer
sbgp-ipAddrBlock: critical
IPv4:
23.176.152.0/24
IPv6:
2620:0:8000::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:e7:ac:5d:2a:60:f0:1a:81:81:6f:71:bc:ec:bf:c6:9b:4c:
6a:e5:d2:59:2f:55:b3:2b:5b:4c:1a:44:56:fc:d7:54:ac:17:
d5:59:3e:32:0b:9d:ea:9b:01:34:d4:2e:60:4b:ac:2a:f1:0c:
7f:bb:ea:cd:dd:2d:fc:7e:3d:79:53:ee:46:44:be:11:41:0e:
7f:e1:64:74:4a:e5:44:c3:d4:4e:d5:b8:25:80:26:8f:4b:4c:
68:0e:f4:38:40:e0:0c:d3:fd:0e:ba:05:f1:f8:7f:27:f0:81:
80:fb:c6:0a:81:bf:4b:57:74:ef:c0:da:eb:6a:a7:7a:fc:b9:
8f:d7:b3:9a:9b:c5:03:1f:53:de:de:38:b1:0a:9c:b8:90:18:
17:08:9f:01:06:14:98:ac:fe:06:04:1c:b2:e7:45:40:2b:5e:
b3:74:e0:95:db:3d:91:30:d0:81:eb:c4:8b:94:dd:39:53:10:
67:83:05:0a:bc:94:0b:3e:a7:8d:e6:a5:f4:4b:9f:b9:13:ec:
39:92:31:69:2e:2b:fe:c5:dc:61:ad:1b:e4:fc:0b:c7:2b:0c:
d7:50:d5:ef:02:41:70:b7:83:d8:2d:93:2a:aa:a2:8a:85:3f:
9a:cf:26:04:42:88:8c:f5:62:38:ec:75:f5:55:b9:f1:91:91:
0c:1a:88:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 13:42:44 2026 by rpki-client