
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f471d673-d293-405b-9549-4421d0436152/5d22fed2-523a-322d-a47d-2db5b0e1e874.roa
File: 5d22fed2-523a-322d-a47d-2db5b0e1e874.roa (raw, json)
Hash identifier: ytTfmO8pA5a7FexM1ERRYrH1+5GVgTqDuBJN/tTXHO4=
Subject key identifier: 7E:B2:6F:F3:5D:17:15:B1:D7:3B:A0:27:50:20:AF:66:32:1D:5F:ED
Certificate issuer: /CN=f471d673-d293-405b-9549-4421d0436152
Certificate serial: 010D0C9F4328584DC29ADE6D83B10A06B70AEA00
Authority key identifier: 30:A0:26:0A:E6:B5:9F:36:6B:1C:77:3F:5A:31:D7:FB:EF:B1:24:0B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f471d673-d293-405b-9549-4421d0436152.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f471d673-d293-405b-9549-4421d0436152/5d22fed2-523a-322d-a47d-2db5b0e1e874.roa
Signing time: Fri 08 May 2026 01:00:24 +0000
ROA not before: Fri 08 May 2026 01:00:24 +0000
ROA not after: Thu 06 Aug 2026 01:00:24 +0000
asID: 214483
IP address blocks: 23.136.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f471d673-d293-405b-9549-4421d0436152/f471d673-d293-405b-9549-4421d0436152.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f471d673-d293-405b-9549-4421d0436152/f471d673-d293-405b-9549-4421d0436152.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f471d673-d293-405b-9549-4421d0436152.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:c2:9a:de:6d:83:b1:0a:06:b7:0a:ea:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f471d673-d293-405b-9549-4421d0436152
Validity
Not Before: May 8 01:00:24 2026 GMT
Not After : Aug 6 01:00:24 2026 GMT
Subject: CN=fc722932-e36d-4cde-a8db-dbf988b5161e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:03:54:f5:69:1f:2a:2b:27:87:02:f2:51:68:
ff:a2:da:30:27:37:83:25:b8:67:ec:43:24:9c:fa:
ba:c4:04:37:dc:de:7c:4f:98:01:a2:02:a0:1b:7a:
13:3e:2b:2e:54:02:90:3f:1b:76:3a:ff:e9:8b:15:
d9:e1:cc:5a:10:3f:ee:1c:2a:84:85:3c:91:dd:65:
fe:e7:8f:b9:91:b6:ed:f6:c7:a7:7f:9a:bf:ca:35:
a7:a6:57:7b:1c:be:d6:da:b0:d2:d0:b8:ca:d0:0f:
a3:e0:20:d2:00:30:03:16:45:52:61:47:68:48:88:
6a:a8:59:85:40:a1:87:5e:36:7a:a2:9e:53:4c:0e:
29:84:6e:b5:78:7c:dc:9b:c7:34:94:19:2e:f4:71:
ee:72:49:1b:5b:1f:76:00:74:b1:fa:0f:92:ee:e2:
ff:0d:53:90:fa:41:39:3e:81:15:01:14:3a:f4:49:
ad:d1:60:0b:a6:9f:69:09:8b:0d:99:97:0f:05:42:
ea:26:6e:3e:7b:eb:86:5e:47:25:50:e7:ac:37:f8:
96:18:f3:45:e7:21:4f:a8:16:77:d7:e6:2d:ee:93:
78:85:d4:dd:26:43:ca:53:3b:10:24:30:77:86:f9:
d3:35:88:6e:42:06:55:80:e8:89:d1:9f:a5:9b:c4:
c4:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:B2:6F:F3:5D:17:15:B1:D7:3B:A0:27:50:20:AF:66:32:1D:5F:ED
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f471d673-d293-405b-9549-4421d0436152/5d22fed2-523a-322d-a47d-2db5b0e1e874.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f471d673-d293-405b-9549-4421d0436152/f471d673-d293-405b-9549-4421d0436152.crl
X509v3 Authority Key Identifier:
keyid:30:A0:26:0A:E6:B5:9F:36:6B:1C:77:3F:5A:31:D7:FB:EF:B1:24:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f471d673-d293-405b-9549-4421d0436152.cer
sbgp-ipAddrBlock: critical
IPv4:
23.136.164.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bb:82:67:ad:b6:19:df:76:9d:fe:ab:33:b3:b6:e2:d3:eb:ad:
0a:9a:98:c2:ad:4f:f3:c6:52:18:8a:d2:71:43:c3:a4:2e:9e:
4c:1e:10:2c:c3:9a:da:a0:9b:1d:af:3e:00:a5:e1:03:b2:84:
dc:4a:6c:00:05:bb:bd:97:1b:72:a5:40:57:62:b6:17:8c:89:
02:44:41:31:50:4c:a2:dc:63:4b:d2:17:4d:58:75:a0:be:f1:
b2:05:8e:2e:3a:ac:6d:6f:da:85:ca:c4:c2:30:b1:98:07:3b:
b2:e3:c4:21:a7:cf:f4:1c:65:26:1f:b7:6e:d2:47:a6:fc:34:
18:db:04:70:e7:9e:06:44:24:c5:17:c7:85:16:db:d3:83:56:
17:d4:d3:e3:71:5c:07:ba:db:f2:b5:90:a5:20:61:56:20:ae:
53:04:ee:9e:5c:2d:37:01:f4:c5:a5:50:83:9b:a3:95:e2:2d:
68:3a:75:a9:cd:37:d0:72:38:17:de:50:e5:28:45:08:63:5d:
8e:cf:2e:5e:fd:89:d4:b7:c7:ed:2c:99:5a:16:2c:18:9c:02:
fb:4a:61:52:90:d7:47:88:ea:2c:d6:ad:cf:19:04:b0:c5:48:
05:39:f2:2c:83:33:7f:ea:ac:83:21:23:51:8e:25:ed:82:5e:
51:ee:68:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:11:12 2026 by rpki-client