
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/06ed120e-7778-4219-8811-97d5203ce0c5/0176ea71-9d27-3cad-afe5-3e790fb9460a.roa
File: 0176ea71-9d27-3cad-afe5-3e790fb9460a.roa (raw, json)
Hash identifier: QV5xU9QoK2LBPucNPXGdaUEXI4LEcf6Oua+9pPP7IWE=
Subject key identifier: 3F:D4:8C:AD:3C:17:67:92:61:D6:5F:C7:A5:DB:66:B5:27:61:BC:FF
Certificate issuer: /CN=06ed120e-7778-4219-8811-97d5203ce0c5
Certificate serial: 010D0C9F4328584DAC457C0A74D8EF567D044A00
Authority key identifier: 63:56:AC:A5:8C:5C:E1:EB:3A:E8:8D:45:9F:84:C8:15:66:15:02:AB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/06ed120e-7778-4219-8811-97d5203ce0c5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/06ed120e-7778-4219-8811-97d5203ce0c5/0176ea71-9d27-3cad-afe5-3e790fb9460a.roa
Signing time: Thu 30 Apr 2026 01:00:26 +0000
ROA not before: Thu 30 Apr 2026 01:00:26 +0000
ROA not after: Wed 29 Jul 2026 01:00:26 +0000
asID: 54043
IP address blocks: 23.166.104.0/24 maxlen: 24
2607:7d40::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/06ed120e-7778-4219-8811-97d5203ce0c5/06ed120e-7778-4219-8811-97d5203ce0c5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/06ed120e-7778-4219-8811-97d5203ce0c5/06ed120e-7778-4219-8811-97d5203ce0c5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/06ed120e-7778-4219-8811-97d5203ce0c5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:ac:45:7c:0a:74:d8:ef:56:7d:04:4a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06ed120e-7778-4219-8811-97d5203ce0c5
Validity
Not Before: Apr 30 01:00:26 2026 GMT
Not After : Jul 29 01:00:26 2026 GMT
Subject: CN=f9f8c225-439b-4406-b9f1-0d8a35a34ed9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:a4:87:fb:76:a6:12:fc:d3:74:98:7c:b8:7b:
9a:e4:a7:8f:45:16:6f:57:ef:94:f6:84:ed:2f:15:
6f:04:7b:6b:ff:4e:68:2d:d5:f3:3f:de:60:c1:10:
e4:c8:51:93:75:bb:35:7c:e4:40:d2:e4:92:5a:5b:
7e:89:0a:76:4e:7d:55:36:f6:47:65:42:b5:43:c1:
bf:bd:53:22:2b:aa:20:5b:a0:aa:61:3a:a5:ae:71:
c1:e6:29:6f:ea:0f:03:4a:ef:8a:13:54:db:6e:0a:
59:58:8a:f4:31:49:71:45:81:fa:c5:93:75:3d:a9:
c1:43:5d:2b:dd:8d:14:80:57:f9:9f:37:51:c7:a2:
11:d8:49:a3:3c:53:39:19:e0:3d:ef:e5:16:de:b0:
5f:bf:3d:df:36:69:83:2c:2c:4f:db:c4:12:37:ea:
9c:7f:c1:86:da:52:b0:f1:24:4c:91:19:93:3e:a4:
ee:d0:b0:3e:46:a5:df:59:87:b0:b9:ac:fc:7e:4a:
c0:22:39:45:1f:1f:c5:cb:c1:db:ee:d8:c8:30:72:
9e:19:42:98:3d:02:71:59:9a:3d:c8:17:af:b3:cf:
71:7e:27:f9:a8:83:3b:15:08:cc:a7:5b:c3:28:1e:
6b:db:cd:6a:19:c9:7e:46:a6:52:50:e2:dd:4e:e7:
52:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:D4:8C:AD:3C:17:67:92:61:D6:5F:C7:A5:DB:66:B5:27:61:BC:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/06ed120e-7778-4219-8811-97d5203ce0c5/0176ea71-9d27-3cad-afe5-3e790fb9460a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/06ed120e-7778-4219-8811-97d5203ce0c5/06ed120e-7778-4219-8811-97d5203ce0c5.crl
X509v3 Authority Key Identifier:
keyid:63:56:AC:A5:8C:5C:E1:EB:3A:E8:8D:45:9F:84:C8:15:66:15:02:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/06ed120e-7778-4219-8811-97d5203ce0c5.cer
sbgp-ipAddrBlock: critical
IPv4:
23.166.104.0/24
IPv6:
2607:7d40::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:d5:d3:f8:97:af:4c:55:cb:5c:93:19:06:e3:47:b7:07:9d:
fb:aa:a4:5b:bd:1c:dc:48:26:88:62:4c:34:b0:b0:79:b6:c4:
15:9c:9f:9e:6b:72:b6:ea:d8:39:18:8f:4c:fa:e3:c8:c7:bb:
83:97:43:cb:46:ce:9a:97:9a:8d:f1:b3:01:7f:96:72:06:69:
a0:84:34:d7:32:8c:6c:c3:db:21:0b:2c:48:54:d7:07:88:48:
c0:6e:2d:6e:6f:c0:37:a0:d4:7c:00:fa:8b:42:bf:71:6f:2d:
a8:01:8f:c6:77:dd:5c:9a:94:2f:74:d8:b6:8b:fc:43:9f:1b:
72:cb:83:11:59:40:06:71:40:88:11:7b:ba:0e:fe:87:62:97:
44:41:16:47:51:02:c1:ac:9c:91:6c:ee:ee:ac:b1:af:0a:4b:
92:d0:ec:60:0a:f4:c4:37:17:14:02:82:f6:64:8a:96:63:30:
8a:ff:41:7d:47:40:f2:d7:93:4d:67:e6:30:19:3d:ff:e3:bc:
b9:b5:88:39:6f:3c:bd:3d:bc:6b:b6:87:3b:75:55:37:4b:06:
ab:3f:03:16:80:82:c6:cc:70:ed:50:36:26:cc:c8:e1:51:30:
3b:98:0f:07:d4:92:f2:50:a9:3a:c1:45:1b:41:3d:e4:f2:f9:
d8:10:90:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:45:12 2026 by rpki-client