
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fd9e0fc-3a7e-40c8-a935-b58c6b992c3c/8008f8ed-620d-3847-b19a-1d027971a2c4.roa
File: 8008f8ed-620d-3847-b19a-1d027971a2c4.roa (raw, json)
Hash identifier: 3oif9r/4MfNV0pBw069jXCNDYUIKZtNExicUldTx8Yw=
Subject key identifier: 0C:B0:58:9A:8A:A6:D3:75:CD:1E:79:30:F8:92:B9:E4:66:EA:D1:E6
Certificate issuer: /CN=1fd9e0fc-3a7e-40c8-a935-b58c6b992c3c
Certificate serial: 010D0C9F4328584DB7702318A98D1C7F5E995180
Authority key identifier: 8E:1C:1C:D6:58:C0:18:2A:52:14:F0:28:1E:E0:F1:14:42:62:5B:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fd9e0fc-3a7e-40c8-a935-b58c6b992c3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fd9e0fc-3a7e-40c8-a935-b58c6b992c3c/8008f8ed-620d-3847-b19a-1d027971a2c4.roa
Signing time: Mon 04 May 2026 01:00:25 +0000
ROA not before: Mon 04 May 2026 01:00:25 +0000
ROA not after: Sun 02 Aug 2026 01:00:25 +0000
asID: 26695
IP address blocks: 23.138.208.0/24 maxlen: 24
2605:8bc0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fd9e0fc-3a7e-40c8-a935-b58c6b992c3c/1fd9e0fc-3a7e-40c8-a935-b58c6b992c3c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fd9e0fc-3a7e-40c8-a935-b58c6b992c3c/1fd9e0fc-3a7e-40c8-a935-b58c6b992c3c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fd9e0fc-3a7e-40c8-a935-b58c6b992c3c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:b7:70:23:18:a9:8d:1c:7f:5e:99:51:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fd9e0fc-3a7e-40c8-a935-b58c6b992c3c
Validity
Not Before: May 4 01:00:25 2026 GMT
Not After : Aug 2 01:00:25 2026 GMT
Subject: CN=78b7bcec-34a8-4a47-8169-8a4579bf7ca2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b4:f5:34:98:70:6b:82:82:4f:18:77:46:55:
1b:99:33:2a:d1:78:1c:0d:52:dc:b1:ac:6b:ed:6d:
62:79:01:9d:ff:73:38:bc:cd:aa:7b:f8:39:bb:bb:
5d:ce:74:86:c2:e4:30:5f:73:4c:2a:fe:82:ad:4c:
d0:dd:4d:2b:ae:06:72:94:f4:73:5b:25:37:08:b2:
31:d1:f9:5e:fb:72:eb:67:1f:60:83:62:6d:79:86:
96:07:82:03:f1:b4:0f:1e:89:50:39:88:65:34:ab:
e7:12:4b:da:51:53:a8:71:d8:cb:e3:da:5d:dc:dc:
ae:2d:0c:1e:d4:6b:e1:16:8f:54:db:00:3d:9b:85:
2a:d5:d3:13:39:00:4f:16:1a:2f:c8:52:ad:29:ff:
8c:a4:42:32:a2:36:c1:b9:f9:12:c8:a3:55:12:f2:
3f:08:1f:9d:09:bc:88:89:da:7a:cb:6c:fc:86:80:
1f:1b:3a:67:df:5a:a1:45:51:69:02:15:20:e3:42:
22:51:76:7e:5a:82:cf:50:d1:5f:2d:0b:ba:3b:38:
85:0a:73:06:6d:cf:01:7b:53:e2:6f:ed:ea:db:9e:
6b:20:d5:52:b6:32:1c:ac:27:81:99:40:00:ca:d4:
1e:db:ce:8b:a2:6c:d3:59:2f:45:7c:61:c1:0a:9a:
a1:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:B0:58:9A:8A:A6:D3:75:CD:1E:79:30:F8:92:B9:E4:66:EA:D1:E6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fd9e0fc-3a7e-40c8-a935-b58c6b992c3c/8008f8ed-620d-3847-b19a-1d027971a2c4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fd9e0fc-3a7e-40c8-a935-b58c6b992c3c/1fd9e0fc-3a7e-40c8-a935-b58c6b992c3c.crl
X509v3 Authority Key Identifier:
keyid:8E:1C:1C:D6:58:C0:18:2A:52:14:F0:28:1E:E0:F1:14:42:62:5B:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1fd9e0fc-3a7e-40c8-a935-b58c6b992c3c.cer
sbgp-ipAddrBlock: critical
IPv4:
23.138.208.0/24
IPv6:
2605:8bc0::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:b8:78:c0:e4:26:91:99:1b:65:cd:b4:83:87:a7:1a:55:e1:
57:7f:e4:1f:55:18:14:73:c6:a0:0a:f4:9d:9b:61:3e:49:4c:
4c:1c:ae:e4:65:b5:cc:99:08:8a:e9:d2:e8:68:e2:69:fe:b7:
e8:e5:1f:39:66:75:bd:3f:30:3b:24:80:f7:ce:1a:e8:33:42:
0e:91:f7:4b:ae:b7:b8:f5:30:f4:03:6d:75:08:6d:4a:89:bc:
23:4d:54:b0:69:ba:3a:5d:a3:a7:8f:76:9b:86:73:b3:be:0d:
7f:ed:c5:cb:80:4a:a6:4f:10:07:28:5e:09:64:fc:a6:10:e4:
5b:2f:8a:7b:2c:18:a5:ad:7a:15:8b:1a:a0:d3:6b:56:55:fb:
b5:b5:98:d5:d7:f8:52:79:ee:f3:f2:01:33:8c:07:fb:30:fd:
7b:ed:bc:17:f5:bd:1c:30:51:ee:bc:b9:21:3d:18:ca:f2:50:
2f:1f:41:73:3e:9e:2a:ce:78:68:cd:ac:4c:26:05:90:30:a9:
0b:53:1a:b3:95:84:a2:65:c3:b4:b4:4d:0f:a5:09:61:df:f6:
6d:21:1e:6c:97:4d:f7:2d:1f:2a:85:6c:21:82:37:dd:dd:18:
78:73:5a:f3:11:18:ae:10:67:e8:c3:7d:4c:af:12:1b:9f:dc:
58:19:fc:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:25:01 2026 by rpki-client