
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a58fe14b-04a0-43bf-b9b8-f6564f858306/5a0ed2e0-efb4-3b93-aa7b-ccaeb273dc2a.roa
File: 5a0ed2e0-efb4-3b93-aa7b-ccaeb273dc2a.roa (raw, json)
Hash identifier: bwo0Xwz8HupIWJsNouMAzw2klQIvtvjbixwHZ14Kexg=
Subject key identifier: 52:35:8D:A1:4D:DB:86:63:FE:F4:9B:2D:9E:75:F0:7A:E6:45:EE:A1
Certificate issuer: /CN=a58fe14b-04a0-43bf-b9b8-f6564f858306
Certificate serial: 010D0C9F4328584D492A5CCCC78BA66CDD388AC0
Authority key identifier: 68:90:F5:E8:05:4F:CA:75:7B:B7:17:12:88:17:D0:65:2D:46:41:1C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a58fe14b-04a0-43bf-b9b8-f6564f858306.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a58fe14b-04a0-43bf-b9b8-f6564f858306/5a0ed2e0-efb4-3b93-aa7b-ccaeb273dc2a.roa
Signing time: Wed 25 Mar 2026 13:00:41 +0000
ROA not before: Wed 25 Mar 2026 13:00:41 +0000
ROA not after: Tue 23 Jun 2026 13:00:41 +0000
asID: 32639
IP address blocks: 23.130.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a58fe14b-04a0-43bf-b9b8-f6564f858306/a58fe14b-04a0-43bf-b9b8-f6564f858306.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a58fe14b-04a0-43bf-b9b8-f6564f858306/a58fe14b-04a0-43bf-b9b8-f6564f858306.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a58fe14b-04a0-43bf-b9b8-f6564f858306.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:49:2a:5c:cc:c7:8b:a6:6c:dd:38:8a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a58fe14b-04a0-43bf-b9b8-f6564f858306
Validity
Not Before: Mar 25 13:00:41 2026 GMT
Not After : Jun 23 13:00:41 2026 GMT
Subject: CN=f4a71ce1-c410-4d9f-bed3-e02036168f45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:4c:59:82:e3:6d:d4:92:c8:03:a8:49:28:39:
d3:cb:b4:10:10:f6:31:fc:42:b1:8f:71:b5:08:05:
83:ba:58:24:a8:36:c4:95:54:0b:a4:9c:68:01:ad:
79:49:c5:71:89:ec:e0:c1:d2:b7:90:31:6b:17:f6:
5d:4a:fd:9d:ba:14:75:ce:71:69:ec:4a:0e:14:26:
a4:36:f4:46:6b:0e:2c:ae:9f:70:27:cc:4e:9b:17:
2b:2f:ea:e4:c6:cc:f4:8d:ad:b8:6f:64:e8:51:df:
4d:91:ee:51:d1:29:51:dc:22:c0:31:fc:44:8f:62:
e5:0d:89:47:89:da:03:89:ba:a8:3a:94:7c:4b:02:
f3:37:56:e7:f9:4b:93:9b:7f:64:e2:56:52:0d:13:
54:6f:a6:3d:aa:83:0e:f0:f1:30:50:8e:d2:9b:2d:
88:59:c2:ed:17:dc:63:70:9c:08:f9:a6:33:62:28:
d9:94:8d:58:ad:53:f0:34:4e:3f:f9:33:12:af:61:
c8:27:30:de:12:08:7d:ec:a8:39:31:72:e3:d3:b4:
c4:ae:1c:e8:61:f8:af:5d:11:ec:ba:94:fc:1f:b3:
7d:a8:a1:c1:7a:aa:ff:7f:17:a3:b7:cc:5a:a8:ee:
c3:94:dc:be:2b:de:eb:6f:68:28:71:79:2e:01:ce:
3f:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:35:8D:A1:4D:DB:86:63:FE:F4:9B:2D:9E:75:F0:7A:E6:45:EE:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a58fe14b-04a0-43bf-b9b8-f6564f858306/5a0ed2e0-efb4-3b93-aa7b-ccaeb273dc2a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a58fe14b-04a0-43bf-b9b8-f6564f858306/a58fe14b-04a0-43bf-b9b8-f6564f858306.crl
X509v3 Authority Key Identifier:
keyid:68:90:F5:E8:05:4F:CA:75:7B:B7:17:12:88:17:D0:65:2D:46:41:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a58fe14b-04a0-43bf-b9b8-f6564f858306.cer
sbgp-ipAddrBlock: critical
IPv4:
23.130.80.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:df:72:9c:65:30:9f:15:2e:6b:57:97:27:84:6c:4f:5b:c6:
84:82:f9:0d:81:cc:ea:b4:1e:b8:64:3d:fc:46:95:7e:c6:ec:
ac:9a:8e:9a:96:67:ec:f5:fe:97:7b:b6:7f:3d:8e:52:34:cc:
08:f2:16:a2:70:6c:42:ec:77:cf:d9:c9:c9:bd:a7:b9:a6:9a:
7f:36:8d:7e:9b:17:62:88:1b:84:09:00:de:1e:f7:10:a9:fa:
39:dd:77:69:47:f4:4e:2d:1c:cc:2b:0a:68:03:75:4f:fd:50:
ba:46:a9:80:21:16:e7:f2:b4:8a:93:bf:12:c1:2b:ea:d3:24:
cc:56:98:93:53:51:9e:e7:67:01:8c:2b:d5:55:c5:0d:8c:e6:
64:ad:86:1c:15:a1:15:dc:8a:53:76:8d:32:5c:77:a7:1a:d7:
03:48:26:91:7e:17:95:ef:a5:53:bb:b0:e4:ef:3d:70:2c:c7:
52:e4:b6:7b:5b:17:ce:cc:65:11:a9:ff:2a:ab:4a:b1:b9:b3:
f4:8e:84:c4:73:e2:28:41:f3:d4:62:0c:59:7e:44:1f:19:5e:
6a:a4:b8:35:de:31:8a:f5:9f:41:96:95:19:46:ee:90:eb:89:
ba:46:cf:5a:2e:64:d6:7d:11:13:57:dc:f0:4d:aa:63:e3:2c:
2e:fc:9c:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:44:03 2026 by rpki-client