
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c74e641d-a8b6-48e3-9084-066627b0310f/a4fb23f5-3e70-3ddc-83c9-434fae1e2e2b.roa
File: a4fb23f5-3e70-3ddc-83c9-434fae1e2e2b.roa (raw, json)
Hash identifier: uOVSVDDCrxYoYOR4eTouY3Z2xv7w/pa83GFIW6FnGHM=
Subject key identifier: 22:91:20:47:15:58:7D:3A:48:B4:63:15:4C:DC:1D:F3:43:81:84:2E
Certificate issuer: /CN=c74e641d-a8b6-48e3-9084-066627b0310f
Certificate serial: 010D0C9F4328584DBBA03CF9383733712D7BB300
Authority key identifier: 57:D7:86:B5:49:7A:C5:76:6A:AF:DA:BF:A6:E4:49:AC:BE:2E:EB:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c74e641d-a8b6-48e3-9084-066627b0310f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c74e641d-a8b6-48e3-9084-066627b0310f/a4fb23f5-3e70-3ddc-83c9-434fae1e2e2b.roa
Signing time: Tue 05 May 2026 13:00:31 +0000
ROA not before: Tue 05 May 2026 13:00:31 +0000
ROA not after: Mon 03 Aug 2026 13:00:31 +0000
asID: 174
IP address blocks: 23.144.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c74e641d-a8b6-48e3-9084-066627b0310f/c74e641d-a8b6-48e3-9084-066627b0310f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c74e641d-a8b6-48e3-9084-066627b0310f/c74e641d-a8b6-48e3-9084-066627b0310f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c74e641d-a8b6-48e3-9084-066627b0310f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:bb:a0:3c:f9:38:37:33:71:2d:7b:b3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c74e641d-a8b6-48e3-9084-066627b0310f
Validity
Not Before: May 5 13:00:31 2026 GMT
Not After : Aug 3 13:00:31 2026 GMT
Subject: CN=d9e134ae-0e78-4191-a0ff-986b15f73e27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:0a:9b:40:76:5d:c6:aa:d4:72:2a:75:2c:3e:
a5:88:1b:83:07:cd:f4:96:06:17:17:89:89:a0:61:
4a:ec:e5:75:1a:6f:d4:43:a0:55:2a:3a:4c:2b:4c:
bd:1f:9b:df:48:dc:87:27:c4:6e:e7:49:d0:8c:7a:
bb:aa:c3:1d:05:9c:ca:71:09:43:8c:fd:da:b4:10:
96:93:23:67:98:3b:93:23:b4:85:c0:eb:da:51:e1:
09:92:d9:e0:4a:10:7b:a2:87:a4:ca:ac:32:08:32:
da:83:fd:d5:00:43:d4:cb:cd:b1:e2:b4:ca:6d:e7:
5f:1b:88:ec:9a:b4:6a:54:a9:eb:5e:26:f4:3f:31:
54:c1:a7:1e:3d:8a:6a:84:c3:76:0f:36:7d:52:56:
2c:f6:52:35:fa:86:c2:c2:25:30:b0:e4:2d:ce:ae:
f1:a2:bc:d3:de:12:42:17:66:41:f4:5f:31:be:c4:
34:ab:4c:42:d9:01:21:72:2b:e4:28:a3:c4:2a:02:
6e:c9:b8:64:6c:bd:09:b6:1d:46:fd:12:e5:d4:fa:
fc:47:88:5f:fc:9d:8c:16:c8:47:23:cd:70:5c:02:
d4:0f:f9:72:be:12:c7:39:a3:af:0f:9c:00:50:34:
cd:58:2b:da:d7:fe:bc:9d:f1:c1:81:92:f8:a0:d3:
18:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:91:20:47:15:58:7D:3A:48:B4:63:15:4C:DC:1D:F3:43:81:84:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c74e641d-a8b6-48e3-9084-066627b0310f/a4fb23f5-3e70-3ddc-83c9-434fae1e2e2b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c74e641d-a8b6-48e3-9084-066627b0310f/c74e641d-a8b6-48e3-9084-066627b0310f.crl
X509v3 Authority Key Identifier:
keyid:57:D7:86:B5:49:7A:C5:76:6A:AF:DA:BF:A6:E4:49:AC:BE:2E:EB:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c74e641d-a8b6-48e3-9084-066627b0310f.cer
sbgp-ipAddrBlock: critical
IPv4:
23.144.124.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:53:92:b8:23:5b:ad:4d:9c:9d:32:f2:cc:4e:cc:b1:79:b1:
e9:a1:65:b5:74:64:21:22:7f:cd:d6:2f:43:09:94:46:55:b7:
3f:4b:f5:62:d1:9a:48:c8:12:bf:5f:54:bf:14:f5:29:d6:cf:
86:03:a4:e8:42:97:3b:8b:28:ed:c7:3b:51:84:e8:f7:22:ab:
f9:9f:fb:25:b5:79:77:68:b4:d2:3a:d4:64:75:e5:14:41:6d:
b0:5c:97:82:8c:ec:54:d1:40:24:f6:8f:94:11:51:0d:19:1d:
19:16:61:05:54:8c:8c:ff:4a:c2:b1:28:17:1f:44:13:93:93:
42:78:ea:c5:62:ad:c0:c5:55:80:d7:59:d5:1d:53:9e:9e:2a:
f2:38:27:5f:4d:85:8e:d1:72:61:40:92:4b:67:ba:78:22:fa:
fc:e8:22:f4:a1:f0:41:06:10:27:24:3a:68:48:0f:8e:d3:a7:
3d:a7:76:57:d9:67:05:79:3c:9a:9c:13:f8:fb:53:59:d8:e1:
f7:f7:bd:0a:8c:9f:e2:75:06:ac:54:b7:6d:67:12:db:11:27:
eb:b8:66:fc:34:b1:9a:71:12:14:3f:3d:e3:22:ba:dc:25:11:
78:d2:e6:f3:b0:9c:36:86:79:04:7f:39:30:7f:9c:8f:cb:f3:
8e:3f:89:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:22:45 2026 by rpki-client