
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b0bbd7e-cecf-4f12-9009-048c0cfbf306/9a1a3249-71dc-37a2-a7ed-633d2f6d1a2e.roa
File: 9a1a3249-71dc-37a2-a7ed-633d2f6d1a2e.roa (raw, json)
Hash identifier: gjsm7hh8so5JBgZiEdI9miE5yEfnEGSbR5VwSH+OHjY=
Subject key identifier: 9B:CB:77:48:0B:6E:5B:16:12:8A:80:C3:F8:74:58:6E:69:38:1D:8A
Certificate issuer: /CN=3b0bbd7e-cecf-4f12-9009-048c0cfbf306
Certificate serial: 010D0C9F4328584D0BDCFBA36BF5C9D08CDA6E00
Authority key identifier: 63:DF:B2:A3:AB:99:A0:94:A1:BA:E8:9D:F9:47:FD:12:28:C1:AC:1C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b0bbd7e-cecf-4f12-9009-048c0cfbf306.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b0bbd7e-cecf-4f12-9009-048c0cfbf306/9a1a3249-71dc-37a2-a7ed-633d2f6d1a2e.roa
Signing time: Tue 03 Mar 2026 14:00:40 +0000
ROA not before: Tue 03 Mar 2026 14:00:40 +0000
ROA not after: Mon 01 Jun 2026 13:00:40 +0000
asID: 399870
IP address blocks: 23.137.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b0bbd7e-cecf-4f12-9009-048c0cfbf306/3b0bbd7e-cecf-4f12-9009-048c0cfbf306.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b0bbd7e-cecf-4f12-9009-048c0cfbf306/3b0bbd7e-cecf-4f12-9009-048c0cfbf306.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b0bbd7e-cecf-4f12-9009-048c0cfbf306.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:0b:dc:fb:a3:6b:f5:c9:d0:8c:da:6e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b0bbd7e-cecf-4f12-9009-048c0cfbf306
Validity
Not Before: Mar 3 14:00:40 2026 GMT
Not After : Jun 1 13:00:40 2026 GMT
Subject: CN=b8282fa2-231d-4df6-9abb-18cfa10958d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:26:3d:d8:8e:92:83:92:32:ff:0f:12:63:08:
b9:dc:a6:a4:ea:71:74:6b:cf:52:f9:9f:21:65:84:
80:78:94:10:f1:24:4c:56:e5:ce:14:ec:bc:a2:5c:
41:68:f1:4e:49:ef:a6:f3:25:90:1e:80:b7:88:54:
a1:ee:54:20:94:b0:48:2f:cd:a2:75:8c:a9:46:a9:
11:7a:db:70:f3:fd:f5:ac:c4:8f:cf:47:b3:96:c1:
fc:81:d8:83:9f:48:13:dc:ef:9d:22:d0:e7:d7:49:
44:87:73:fc:b9:56:17:b6:10:45:17:b2:fd:a9:5d:
2b:90:52:f3:5b:5f:96:e9:d7:94:f7:67:76:ca:a1:
64:d1:25:3b:ee:7e:b1:a6:ee:84:76:a2:4c:14:4c:
fc:83:73:e6:fa:63:33:2b:21:d8:47:ac:be:c1:03:
bd:c9:53:b0:c0:23:c2:ea:ef:3c:10:47:1b:2f:8a:
9a:60:ba:fa:21:26:7a:6c:9e:51:78:34:d6:e3:37:
4d:9e:d4:76:48:75:20:73:52:e3:b7:96:eb:b5:68:
30:59:7a:18:ad:d4:e5:07:b1:16:88:e4:d9:99:8a:
d3:47:36:50:bc:70:01:45:35:e9:db:3b:c8:ec:e0:
5f:23:a1:2d:af:43:4c:4b:09:eb:b7:40:37:e9:bb:
72:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:CB:77:48:0B:6E:5B:16:12:8A:80:C3:F8:74:58:6E:69:38:1D:8A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b0bbd7e-cecf-4f12-9009-048c0cfbf306/9a1a3249-71dc-37a2-a7ed-633d2f6d1a2e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b0bbd7e-cecf-4f12-9009-048c0cfbf306/3b0bbd7e-cecf-4f12-9009-048c0cfbf306.crl
X509v3 Authority Key Identifier:
keyid:63:DF:B2:A3:AB:99:A0:94:A1:BA:E8:9D:F9:47:FD:12:28:C1:AC:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b0bbd7e-cecf-4f12-9009-048c0cfbf306.cer
sbgp-ipAddrBlock: critical
IPv4:
23.137.148.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:07:56:b1:fb:a8:a9:1a:ef:4c:ad:92:5b:07:ae:ac:68:1b:
25:44:21:ca:8b:a0:87:e2:00:25:30:97:bd:d7:02:51:ab:07:
80:da:b5:9c:84:cb:4a:4b:ae:30:9c:39:7c:1a:94:8f:f9:56:
54:a7:82:8f:45:b5:7b:95:c1:c1:91:b8:bf:de:d2:9c:37:75:
93:21:42:3d:d5:ff:3f:a7:27:c4:a7:48:b3:dd:ab:24:bc:f8:
bd:77:39:74:1e:fe:e8:b1:ee:4a:85:d1:11:33:29:03:73:17:
1d:63:dd:67:24:46:d2:e3:00:79:d9:48:b5:8f:eb:57:2d:5d:
aa:0c:3e:4e:fa:2a:60:b4:53:82:e1:3b:63:c5:35:61:f2:78:
ba:07:0e:75:22:43:1a:e0:3e:f7:a9:a6:86:44:99:cd:30:b8:
5c:0d:fb:ca:dc:4f:cb:b0:30:e4:1b:91:96:95:b0:4f:98:59:
76:12:a2:5e:9a:b3:93:62:42:65:46:82:84:b6:be:e0:72:1f:
56:e8:1c:a0:06:bc:d0:b1:e4:09:9d:39:99:48:22:87:ee:7b:
f1:82:44:35:8f:8a:ec:5f:1f:a5:e9:2a:df:af:aa:58:08:d0:
35:85:39:2c:1b:fb:bf:33:ee:02:cf:c1:05:5a:89:4f:cf:d7:
0c:43:e4:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:40:31 2026 by rpki-client