
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/1bf077d6-68e0-35e4-9a86-4683bff20968.roa
File: 1bf077d6-68e0-35e4-9a86-4683bff20968.roa (raw, json)
Hash identifier: M6e27ObMyNM8R5bAoO0lJLTHyfwwojD5bt+CzgwpkyE=
Subject key identifier: 94:22:64:18:08:C2:00:12:D1:FA:C1:08:71:03:36:2B:BA:B6:06:38
Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial: 010D0C9F4328584CDF3242E60F5DC15F8C834D80
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/1bf077d6-68e0-35e4-9a86-4683bff20968.roa
Signing time: Sun 15 Feb 2026 14:00:41 +0000
ROA not before: Sun 15 Feb 2026 14:00:41 +0000
ROA not after: Sat 16 May 2026 13:00:41 +0000
asID: 26421
IP address blocks: 209.150.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:df:32:42:e6:0f:5d:c1:5f:8c:83:4d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Validity
Not Before: Feb 15 14:00:41 2026 GMT
Not After : May 16 13:00:41 2026 GMT
Subject: CN=c8ef82ee-da11-4fad-b394-97c3f118e1b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d4:f7:fd:18:6a:41:ad:87:3a:96:d8:e1:2d:
a8:a6:42:cb:d2:35:ad:5a:6b:91:74:fa:3e:a6:c7:
2e:bb:b0:6f:00:12:f0:0d:91:59:35:3f:0c:0d:e8:
66:71:6b:6a:9f:91:5b:95:84:65:3d:78:b8:01:fb:
6c:17:07:4c:ee:c8:01:39:b2:be:4c:25:4c:74:d5:
ad:55:96:94:c9:3f:b9:e0:6e:e9:8f:d5:1f:16:82:
be:9b:5e:58:0a:b2:fc:e7:88:e7:15:20:29:a9:86:
ab:93:05:e5:a7:f3:de:c6:c1:f7:49:d0:4d:33:d8:
3a:bb:56:26:b6:3c:db:f2:71:d5:87:f1:95:d9:5e:
7d:bf:b6:f3:54:63:45:6e:3f:5f:99:b9:2e:27:e4:
65:e1:b0:24:99:c4:70:5f:e1:32:d1:e2:51:c7:9b:
d2:f6:1b:60:79:20:8c:ab:0e:57:0b:fa:0d:dd:80:
e0:ee:20:e2:3a:27:76:86:12:72:e8:c7:93:4b:1e:
30:63:e7:10:be:bc:c0:e0:44:68:2c:94:44:b0:6d:
0a:56:d7:83:d8:a8:dd:54:f4:ca:d9:bb:c8:16:85:
6a:68:63:50:e3:a7:ad:dd:c3:04:0d:59:8a:a8:14:
ee:13:3f:0e:ae:d1:f4:ac:6c:a4:37:82:ae:06:ae:
9a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:22:64:18:08:C2:00:12:D1:FA:C1:08:71:03:36:2B:BA:B6:06:38
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/1bf077d6-68e0-35e4-9a86-4683bff20968.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
X509v3 Authority Key Identifier:
keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
sbgp-ipAddrBlock: critical
IPv4:
209.150.76.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:5f:70:7e:b4:07:80:82:70:1a:c9:25:68:a7:89:66:09:99:
17:2f:44:95:44:cb:04:4f:58:6a:80:c9:c4:70:c4:0b:3b:35:
2b:b8:4e:66:76:33:38:3b:85:76:33:d6:18:2b:9a:a7:be:7e:
04:36:dc:2f:39:31:c7:22:95:e6:f8:dc:b4:8c:a5:95:4d:5e:
3d:d3:7c:00:55:58:38:8b:c9:35:0a:78:9e:78:5c:f5:3b:ef:
56:3b:32:04:70:14:f7:00:c2:fb:a9:80:0e:18:2c:51:03:84:
eb:24:27:4e:df:67:98:b9:77:06:9d:f1:ee:0b:b3:50:ec:ff:
f1:34:9b:6a:d5:9d:a3:18:59:02:d2:33:d4:90:58:a8:c9:e0:
a7:a0:e7:68:d9:75:f0:dc:05:ad:84:f1:31:8a:3f:1f:c1:c4:
77:3f:f8:e5:5c:31:7f:a2:34:be:4d:19:72:2e:e0:b3:e3:7d:
6b:09:78:4d:43:8b:37:2a:7c:9e:63:8c:2e:7d:af:b8:00:9f:
e4:12:10:d5:ed:75:cd:2b:ce:b6:75:a4:5f:12:d9:52:91:e1:
94:03:6e:47:60:2e:42:59:8e:ac:e4:c7:5f:67:9a:52:cc:f1:
45:96:f3:aa:9e:e1:02:ea:ca:8a:21:fd:13:30:04:e1:85:aa:
73:7d:31:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:57:13 2026 by rpki-client