
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c424337b-6d69-49df-8a01-857b948a7a5a/1cab8cb6-9967-30cc-8928-c74df236ff92.roa
File: 1cab8cb6-9967-30cc-8928-c74df236ff92.roa (raw, json)
Hash identifier: 3Sgd7cli55MdsLcJq6ULQBQ0Ehby9jh5qtm09RDeJRM=
Subject key identifier: 43:FB:96:3C:FA:93:2B:47:FF:1F:FE:C4:F6:EC:3A:F2:17:A3:FF:02
Certificate issuer: /CN=c424337b-6d69-49df-8a01-857b948a7a5a
Certificate serial: 010D0C9F4328584E51E9FFE97DD26B0718D2B570
Authority key identifier: 08:AB:D3:BB:04:B8:74:C8:8D:36:07:46:43:0B:D9:7D:F6:EB:02:22
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c424337b-6d69-49df-8a01-857b948a7a5a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c424337b-6d69-49df-8a01-857b948a7a5a/1cab8cb6-9967-30cc-8928-c74df236ff92.roa
Signing time: Sun 28 Jun 2026 09:00:11 +0000
ROA not before: Sun 28 Jun 2026 09:00:11 +0000
ROA not after: Sat 26 Sep 2026 09:00:11 +0000
asID: 979
IP address blocks: 23.141.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c424337b-6d69-49df-8a01-857b948a7a5a/c424337b-6d69-49df-8a01-857b948a7a5a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c424337b-6d69-49df-8a01-857b948a7a5a/c424337b-6d69-49df-8a01-857b948a7a5a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c424337b-6d69-49df-8a01-857b948a7a5a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 26 Jul 2026 04:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:51:e9:ff:e9:7d:d2:6b:07:18:d2:b5:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c424337b-6d69-49df-8a01-857b948a7a5a
Validity
Not Before: Jun 28 09:00:11 2026 GMT
Not After : Sep 26 09:00:11 2026 GMT
Subject: CN=4b6694f4-3ff8-4aad-a40c-a7cb40777584
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:92:5c:98:b1:fe:85:84:32:5e:e5:63:8f:f5:
9e:99:e7:cc:af:66:a9:78:51:3f:b3:8d:6a:e8:38:
f4:15:f8:d9:d0:7b:41:c0:c7:6f:2f:20:e6:8e:1c:
15:8c:e3:8a:4e:be:14:18:d2:89:6f:86:e0:0b:a5:
b1:6e:57:d7:21:35:b6:60:46:b5:48:1a:a0:c7:12:
b9:0c:7c:e6:f9:6a:c8:95:4d:ba:67:51:17:c3:af:
bc:06:e6:e1:ab:a4:15:45:b7:9b:4f:90:90:d5:60:
89:9b:3b:4f:94:f7:b3:74:3a:89:6a:bc:46:32:ba:
16:f9:47:c6:c8:b5:10:2f:81:54:8e:ce:37:2b:ed:
b2:4d:ac:e0:89:57:15:1b:cd:35:d8:3b:58:17:c0:
5d:00:02:42:55:ee:80:67:cb:72:38:c1:50:8f:a7:
cb:4e:2b:52:a1:5a:f2:c3:82:d7:90:78:f4:0f:ae:
f2:24:de:e9:13:2c:0a:3e:b5:6f:3a:1d:b1:9a:5f:
98:a5:32:08:94:53:be:a6:94:1b:0e:44:bb:3f:77:
73:f9:d2:a9:44:1c:70:a7:4c:11:58:da:34:3d:4f:
63:f5:ab:fd:3f:e3:3e:d0:09:cc:82:54:a9:dc:47:
21:50:3b:22:d9:45:8e:ac:37:7c:d5:83:ed:93:18:
e9:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:FB:96:3C:FA:93:2B:47:FF:1F:FE:C4:F6:EC:3A:F2:17:A3:FF:02
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c424337b-6d69-49df-8a01-857b948a7a5a/1cab8cb6-9967-30cc-8928-c74df236ff92.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c424337b-6d69-49df-8a01-857b948a7a5a/c424337b-6d69-49df-8a01-857b948a7a5a.crl
X509v3 Authority Key Identifier:
keyid:08:AB:D3:BB:04:B8:74:C8:8D:36:07:46:43:0B:D9:7D:F6:EB:02:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c424337b-6d69-49df-8a01-857b948a7a5a.cer
sbgp-ipAddrBlock: critical
IPv4:
23.141.196.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:ee:4a:35:59:2b:b9:c8:f6:4d:53:2c:5d:b9:53:7d:27:69:
b6:75:64:f2:21:b7:f2:9b:30:1c:ed:af:ed:67:c7:86:78:4b:
f8:7b:8a:2e:a1:66:2b:35:d2:85:c0:c7:4d:91:26:2e:7a:ec:
25:99:b0:87:7b:3d:86:df:69:3c:83:c4:4d:2a:96:7c:49:f2:
83:c9:37:5c:78:f8:8f:d6:8c:c1:d8:bd:f3:c3:51:70:a6:65:
76:41:62:56:9b:54:ac:e7:85:81:fb:cd:d5:62:49:9e:44:ef:
4d:5c:31:6b:96:9f:72:84:0e:d8:01:ba:78:26:77:ee:30:44:
47:46:ac:6c:44:0c:67:d6:a9:35:a8:5b:78:7a:4e:ae:61:c2:
4c:29:61:eb:9e:79:e8:bd:07:ee:0c:63:e9:8f:f6:dc:25:87:
88:47:a9:56:17:9c:d4:08:01:c8:46:e2:26:71:ba:b4:64:45:
fa:02:c3:2e:83:c6:e7:cf:93:0a:77:99:36:cf:e5:6f:81:32:
01:82:f0:03:3f:72:df:70:a8:38:46:27:42:14:75:c9:87:db:
21:5d:2f:27:26:76:63:e6:11:64:f2:01:7b:e0:ac:62:62:d1:
a6:24:7e:01:e1:8c:45:0c:dd:c0:a9:fa:e7:30:e1:68:61:9e:
42:53:59:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:02:34 2026 by rpki-client