
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9e713193-b471-3600-9ce5-0f5e344a6424.roa
File: 9e713193-b471-3600-9ce5-0f5e344a6424.roa (raw, json)
Hash identifier: oyr4k6pZlnCe7DuwVQ9Kc7RsfayXA1CQnyplZsIwrMI=
Subject key identifier: 16:7B:E0:AF:EE:7C:D3:5F:67:25:34:96:CE:6D:D6:B3:E9:E8:6D:77
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584D19B4E5023D20B61948F3BD20
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9e713193-b471-3600-9ce5-0f5e344a6424.roa
Signing time: Sun 08 Mar 2026 13:00:40 +0000
ROA not before: Sun 08 Mar 2026 13:00:40 +0000
ROA not after: Sat 06 Jun 2026 13:00:40 +0000
asID: 16625
IP address blocks: 23.208.224.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:19:b4:e5:02:3d:20:b6:19:48:f3:bd:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Mar 8 13:00:40 2026 GMT
Not After : Jun 6 13:00:40 2026 GMT
Subject: CN=37d1f269-3332-4226-8191-d8a4e7fc4bf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6e:a9:40:dd:6d:2c:5e:43:f9:d2:79:9c:b0:
06:1f:a9:b3:bc:81:ae:03:2f:a5:8d:37:3d:9f:cb:
05:a0:e2:a5:49:3d:a2:8e:fc:e8:5e:b6:ac:c8:93:
c8:ca:f7:55:93:99:40:7a:25:80:dd:f4:20:9f:99:
8a:d8:3c:d8:ff:a2:6b:97:64:16:35:77:fe:47:2d:
51:a1:7b:73:e5:3f:7b:ea:b6:81:0d:03:33:d7:47:
6a:73:33:03:ec:0e:1b:66:a3:e7:6e:a7:6a:fb:8f:
7a:a9:b1:74:93:76:a1:31:86:96:f1:6e:65:9b:0b:
7f:c3:90:bf:40:db:17:2d:f3:bd:9a:f6:13:d1:6d:
b9:aa:7e:ad:cb:8c:23:91:c4:7b:b6:f6:1d:ee:12:
4d:1f:d8:12:52:cc:f7:2c:40:95:e6:41:76:6c:d5:
74:77:4b:45:66:14:95:c5:88:35:6f:2d:ba:f7:c6:
a9:fa:90:dd:9f:12:f5:63:c4:50:b5:f2:91:17:47:
0d:7d:0d:8a:1e:c1:79:f0:5a:48:94:a5:8b:fc:ae:
cf:22:5e:3a:c9:70:3c:98:12:8a:5b:24:e5:eb:6b:
59:e5:43:f7:d7:60:0b:7a:da:5c:8e:e4:33:5b:8e:
c6:71:af:3f:27:fe:b1:69:4e:73:7a:cd:a8:ae:5e:
1a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:7B:E0:AF:EE:7C:D3:5F:67:25:34:96:CE:6D:D6:B3:E9:E8:6D:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/9e713193-b471-3600-9ce5-0f5e344a6424.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.208.224.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:70:a3:61:f5:71:6c:a2:7e:80:da:c2:37:12:b1:ce:26:11:
7b:c7:5b:bf:2e:d1:97:c1:6b:f3:f7:64:89:6e:6b:d8:0a:48:
95:8c:67:4d:5f:22:3d:74:48:15:39:1e:36:c0:c5:e2:a6:aa:
c0:2f:14:fe:49:50:00:19:6a:96:5d:eb:29:f8:93:e6:e2:70:
a1:c8:39:87:33:38:73:b5:9d:2e:bf:8c:a2:6e:1b:8f:93:aa:
49:48:a3:cb:f8:2d:4d:ad:48:10:0d:82:b5:20:1e:b0:2c:0f:
06:52:71:dc:0f:36:e9:54:3c:8f:4f:13:f1:14:85:c3:c0:5c:
0a:f7:5e:89:cf:70:22:c5:91:f0:d0:28:9d:a1:9c:ab:ed:44:
e9:78:d1:ec:31:38:6a:fa:76:93:08:22:2b:95:64:11:ee:75:
19:26:e8:f1:9d:3e:07:72:69:df:61:73:b3:68:21:73:43:ed:
ce:23:be:79:3f:d1:e9:b1:eb:07:7f:82:1b:44:99:46:0e:cf:
af:bd:1e:aa:c8:e2:37:d4:ff:ad:d7:7e:00:46:5f:06:d1:ef:
fa:3a:c2:17:26:d6:f2:98:72:5a:7a:d4:8a:68:8f:9e:91:f1:
ee:8b:33:15:27:7d:c8:d5:2c:26:5e:d8:e5:b4:1e:60:ee:81:
78:3e:b3:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:54:34 2026 by rpki-client