
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b12072dc-8b29-49de-800e-2439a1f4bf97/5974e7e0-66c1-36a0-a072-e5bc9e6bb83f.roa
File: 5974e7e0-66c1-36a0-a072-e5bc9e6bb83f.roa (raw, json)
Hash identifier: Nd/5OXp5nwT6DE1KE12bt/9nuajFgbuCQVDgSBuIagg=
Subject key identifier: 2E:9A:41:6C:15:A8:4C:A9:F6:0A:8E:8D:53:2B:DD:96:27:C5:25:03
Certificate issuer: /CN=b12072dc-8b29-49de-800e-2439a1f4bf97
Certificate serial: 010D0C9F4328584D8AC547675F1A19C0C648EFC0
Authority key identifier: 6D:B1:33:B9:4A:B8:51:0A:7D:49:27:70:A4:61:57:7D:39:5A:F4:66
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b12072dc-8b29-49de-800e-2439a1f4bf97.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b12072dc-8b29-49de-800e-2439a1f4bf97/5974e7e0-66c1-36a0-a072-e5bc9e6bb83f.roa
Signing time: Sat 18 Apr 2026 01:00:24 +0000
ROA not before: Sat 18 Apr 2026 01:00:24 +0000
ROA not after: Fri 17 Jul 2026 01:00:24 +0000
asID: 399737
IP address blocks: 23.165.8.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b12072dc-8b29-49de-800e-2439a1f4bf97/b12072dc-8b29-49de-800e-2439a1f4bf97.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b12072dc-8b29-49de-800e-2439a1f4bf97/b12072dc-8b29-49de-800e-2439a1f4bf97.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b12072dc-8b29-49de-800e-2439a1f4bf97.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:8a:c5:47:67:5f:1a:19:c0:c6:48:ef:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b12072dc-8b29-49de-800e-2439a1f4bf97
Validity
Not Before: Apr 18 01:00:24 2026 GMT
Not After : Jul 17 01:00:24 2026 GMT
Subject: CN=a3858e64-f3de-4e2f-bb0d-ec8c8f336dd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:89:cf:14:b2:72:a6:4f:fd:c6:5a:c7:e0:62:
99:9e:8b:46:e1:3a:5e:5b:16:b6:5c:a0:ed:c6:dc:
e8:70:2a:bc:50:66:52:47:a6:99:c0:0c:e9:26:86:
d9:7d:9d:26:86:4e:84:1b:66:b7:ce:d4:cf:16:3f:
b7:fb:59:b2:10:fb:a0:da:e8:04:35:dd:70:ff:60:
d0:15:0c:31:95:07:ed:34:89:77:e7:b4:9e:e1:41:
fd:04:2f:a2:ba:94:f6:00:0e:a7:41:c1:72:8a:ba:
76:b7:58:01:b7:59:7a:30:39:14:fa:69:10:25:ed:
fd:01:1c:aa:4a:b3:3c:ac:1b:5e:62:3c:c9:b9:f6:
cd:94:9e:ff:ba:34:b8:74:39:17:5f:86:a5:ca:df:
48:76:f1:22:b0:9c:38:94:79:47:2e:a4:51:b9:63:
62:51:c0:6b:42:5a:e8:be:84:58:ef:9a:2b:81:99:
6d:8b:48:96:12:39:a0:60:2b:89:33:06:ae:a3:66:
74:76:00:ad:b1:0c:9d:6d:da:4d:a0:fd:68:d7:04:
a1:1c:2e:a0:b1:25:4d:72:22:54:44:cb:42:5d:bc:
a3:35:b9:26:ba:04:9d:f7:0e:c8:d9:d3:76:e6:e6:
2c:19:ef:f9:7c:28:a0:e3:4e:66:ec:83:97:31:98:
f0:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:9A:41:6C:15:A8:4C:A9:F6:0A:8E:8D:53:2B:DD:96:27:C5:25:03
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b12072dc-8b29-49de-800e-2439a1f4bf97/5974e7e0-66c1-36a0-a072-e5bc9e6bb83f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b12072dc-8b29-49de-800e-2439a1f4bf97/b12072dc-8b29-49de-800e-2439a1f4bf97.crl
X509v3 Authority Key Identifier:
keyid:6D:B1:33:B9:4A:B8:51:0A:7D:49:27:70:A4:61:57:7D:39:5A:F4:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b12072dc-8b29-49de-800e-2439a1f4bf97.cer
sbgp-ipAddrBlock: critical
IPv4:
23.165.8.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:0a:7f:98:e4:a0:c7:e2:ce:f2:b3:22:e8:d6:b7:5b:85:aa:
35:d9:a2:65:12:74:56:a8:ac:42:4b:95:23:00:44:58:8d:c5:
06:f5:ee:ac:fe:f1:ef:3a:9e:bd:4f:20:96:58:78:56:ee:a6:
dc:6b:8d:60:93:00:4a:6f:d7:17:28:70:af:2f:30:64:be:1b:
29:0a:4b:77:a0:73:4e:bc:f3:ab:f8:6e:36:ec:a4:0a:bd:b9:
e7:dd:d4:d6:17:08:cc:5f:02:b3:eb:cf:88:84:82:e3:e4:14:
04:68:82:bf:2e:be:e6:63:8e:ff:05:a5:70:cc:17:20:06:27:
4b:f6:b9:0e:89:3a:88:d1:0c:a5:92:48:5c:2c:88:87:de:17:
04:a6:63:d1:50:d4:e7:ce:12:77:7e:37:4f:41:9b:a8:07:9e:
79:bc:1d:7d:54:c9:0b:5a:39:67:f8:8f:16:43:a9:2a:40:fe:
e6:cd:31:58:c5:12:83:bc:46:15:46:92:91:82:32:28:c0:0b:
ba:69:18:23:d2:31:a5:b9:d2:40:38:07:ce:2f:42:a4:66:82:
57:eb:9b:cd:81:e6:82:cd:15:47:46:18:2b:30:02:cb:bf:9b:
37:e7:56:2f:cc:14:82:8b:81:43:99:c2:df:80:48:f4:98:e3:
c6:34:cf:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:13:53 2026 by rpki-client