
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a/caaf1c7c-ecf1-3764-9608-b6a213e3bd7c.roa
File: caaf1c7c-ecf1-3764-9608-b6a213e3bd7c.roa (raw, json)
Hash identifier: 9bS+XVMe22CZJlPlo2j7vdNDRz7T/bFnBvSQiSSYum4=
Subject key identifier: F8:FB:DE:E3:B5:D2:E3:95:E3:AA:6B:8D:CC:2A:DE:58:E5:92:F0:A2
Certificate issuer: /CN=af651adf-a795-466a-9b0b-afaaea21402a
Certificate serial: 010D0C9F4328584D359F8FFA98B285E05D73A600
Authority key identifier: 40:AC:EF:9E:70:07:E0:29:23:FB:44:12:B1:D4:51:1E:1F:AA:93:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a/caaf1c7c-ecf1-3764-9608-b6a213e3bd7c.roa
Signing time: Wed 18 Mar 2026 13:00:40 +0000
ROA not before: Wed 18 Mar 2026 13:00:40 +0000
ROA not after: Tue 16 Jun 2026 13:00:40 +0000
asID: 54143
IP address blocks: 23.166.112.0/24 maxlen: 24
2606:7180::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a/af651adf-a795-466a-9b0b-afaaea21402a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a/af651adf-a795-466a-9b0b-afaaea21402a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:35:9f:8f:fa:98:b2:85:e0:5d:73:a6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af651adf-a795-466a-9b0b-afaaea21402a
Validity
Not Before: Mar 18 13:00:40 2026 GMT
Not After : Jun 16 13:00:40 2026 GMT
Subject: CN=c6a7ab45-b378-479e-b38a-324d3e68b27e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:29:0e:5d:04:e9:8f:53:5a:11:08:42:74:8b:
2b:d1:c7:a9:43:4b:d9:e2:8e:cd:9d:aa:ea:23:40:
9e:73:cb:d6:cc:aa:2a:82:a7:34:70:d8:45:8a:ec:
24:83:c9:c8:88:3d:ae:88:ae:f9:69:35:b3:21:27:
63:9c:86:49:40:6c:27:65:bb:0a:60:14:6b:bb:2a:
d9:6e:d7:57:f7:93:b5:08:7e:82:fa:e3:44:cc:c7:
3b:b8:97:77:2b:ac:7d:db:54:a3:0b:f7:15:4e:10:
6d:e2:a3:02:7e:8d:b2:ea:62:f9:b3:76:c3:04:c8:
73:e9:f6:ab:15:33:b4:62:ab:5e:0a:0a:13:d7:7e:
89:bd:fa:c4:0e:c4:69:ed:96:7e:06:99:c9:6d:72:
bd:06:bf:01:28:08:1c:43:ee:a3:5e:15:d6:5d:42:
ce:99:8e:2e:a7:d5:95:e6:d6:aa:28:e1:ff:df:42:
fc:d3:e1:f4:0a:83:5e:5d:20:94:af:5b:ba:05:8f:
13:0e:60:27:0f:fb:4b:67:c9:e3:1e:2b:fd:3d:30:
ef:ba:44:5e:1b:a5:01:25:58:7d:8b:6d:ed:48:3e:
23:0b:1d:cb:2d:26:be:80:5f:23:b8:bd:8b:47:d9:
9f:a4:7a:f3:0d:88:b8:8b:bc:31:8c:f0:c5:c7:b6:
0d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:FB:DE:E3:B5:D2:E3:95:E3:AA:6B:8D:CC:2A:DE:58:E5:92:F0:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a/caaf1c7c-ecf1-3764-9608-b6a213e3bd7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a/af651adf-a795-466a-9b0b-afaaea21402a.crl
X509v3 Authority Key Identifier:
keyid:40:AC:EF:9E:70:07:E0:29:23:FB:44:12:B1:D4:51:1E:1F:AA:93:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a.cer
sbgp-ipAddrBlock: critical
IPv4:
23.166.112.0/24
IPv6:
2606:7180::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:ef:0b:8c:f2:19:a7:3b:6a:17:0f:83:25:81:15:5f:fb:ba:
22:2f:43:b8:31:b5:04:b1:17:49:0a:0b:fc:89:e3:70:cb:cd:
79:68:94:dc:4b:80:2c:7b:6d:30:e3:71:fc:9f:d9:cc:92:d7:
65:73:39:3e:14:f3:2b:0e:a3:3f:f8:84:db:ab:c1:74:21:e1:
bc:0a:dc:ac:be:a5:d7:3b:99:fd:e2:37:4b:50:a2:5d:77:35:
f2:1f:f7:53:38:d4:aa:0e:7c:2b:e3:d3:60:a5:7c:8d:a1:eb:
21:41:83:36:88:9b:7a:eb:7a:00:cc:fd:f1:af:9e:00:dc:67:
47:30:af:8f:10:b5:23:05:e9:0e:ae:bd:5f:26:b0:b1:e2:8a:
37:50:5a:65:5a:d3:56:7f:62:b6:e4:3b:10:95:61:c1:3b:87:
31:eb:08:47:99:bd:6c:dc:1c:59:9d:21:a6:0b:e4:66:83:7c:
32:d7:eb:b0:c6:fb:08:bb:9c:41:2c:65:c6:51:f1:f3:b6:1f:
cc:38:71:85:a2:68:bb:33:a2:c1:06:3e:07:4b:f3:b3:85:03:
aa:4a:a9:47:77:4a:02:56:8a:a9:ff:c9:55:71:28:9e:ef:c3:
9b:67:d2:ac:cc:48:41:6d:89:29:91:4e:99:bf:86:7a:36:c1:
8b:83:4c:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:11:42 2026 by rpki-client