
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/401c5756-9626-3e7c-ad12-d22241ff196a.roa
File: 401c5756-9626-3e7c-ad12-d22241ff196a.roa (raw, json)
Hash identifier: iBA5iBVklNsJEYw/3+jC3IiV3zGN8Y3ZyZDHfHUHw+E=
Subject key identifier: FC:0D:2B:49:7A:93:2D:87:0A:6F:3B:AB:EF:95:45:64:71:D0:D1:EF
Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial: 010D0C9F4328584CC77747382DD9F0BECBF6E000
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/401c5756-9626-3e7c-ad12-d22241ff196a.roa
Signing time: Sat 07 Feb 2026 02:00:31 +0000
ROA not before: Sat 07 Feb 2026 02:00:31 +0000
ROA not after: Fri 08 May 2026 01:00:31 +0000
asID: 11525
IP address blocks: 63.208.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:c7:77:47:38:2d:d9:f0:be:cb:f6:e0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Validity
Not Before: Feb 7 02:00:31 2026 GMT
Not After : May 8 01:00:31 2026 GMT
Subject: CN=4fe0dbe5-b0f8-49d4-ad62-b103e1a13994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:93:e3:ae:b3:00:67:f3:b9:69:a6:4e:49:d0:
20:a5:a5:9f:cc:94:b6:fe:ec:6e:8d:7f:d3:a2:f5:
53:da:55:ef:30:00:0c:9e:46:44:c8:5c:ce:c4:70:
0a:73:85:dc:11:74:1d:7b:63:b0:98:43:46:ec:01:
e0:84:5f:7e:cb:ab:55:0f:79:60:de:03:05:ad:cc:
17:66:ae:bd:39:b3:aa:7b:f2:90:a6:9e:df:a2:01:
ba:89:22:35:c7:07:25:90:75:aa:27:db:f7:bc:09:
20:b0:31:66:f7:8d:9d:de:1f:b5:fb:af:ba:44:01:
50:0e:15:2d:36:57:40:ba:1f:5e:20:58:c3:41:d5:
c0:25:88:6e:44:c5:1f:fc:16:14:81:a2:a9:c8:23:
07:55:b1:aa:40:e8:d4:3d:af:d4:e8:45:a4:87:66:
65:f0:af:88:85:5a:61:6d:36:0b:fb:ae:aa:5a:18:
6d:25:89:ed:ca:f3:e1:e6:6a:8f:4e:85:03:99:f1:
bd:cb:18:fd:06:82:39:a5:6b:99:a3:71:6c:90:a1:
87:33:ec:2f:c0:8c:79:77:1d:89:fc:f7:c5:76:76:
bc:31:77:7d:7e:21:de:ce:03:db:b9:4e:1e:90:a4:
28:02:77:eb:a4:49:86:cd:29:a4:55:0a:61:7a:d4:
a1:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:0D:2B:49:7A:93:2D:87:0A:6F:3B:AB:EF:95:45:64:71:D0:D1:EF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/401c5756-9626-3e7c-ad12-d22241ff196a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
X509v3 Authority Key Identifier:
keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
sbgp-ipAddrBlock: critical
IPv4:
63.208.139.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:be:04:5b:a7:66:fa:8e:35:b8:f1:6d:85:49:c0:1f:3d:08:
e7:01:f2:ab:8a:97:58:26:de:aa:e3:d4:b5:20:25:a2:80:ea:
0f:06:3e:b6:df:61:d0:03:c0:6c:2a:e5:d7:4d:e8:dc:2d:ea:
97:e3:57:d8:03:9a:4f:c9:47:81:f9:6e:fb:5f:58:a2:b5:81:
5d:c3:0c:7e:17:ec:bf:62:4e:a8:d1:48:10:37:ea:2c:bf:7d:
ab:1d:59:3e:d3:ee:98:61:20:64:01:d9:c0:4b:89:7c:93:78:
2d:1a:4d:84:b5:09:3e:2f:90:09:74:a3:80:79:64:d8:5e:64:
51:e4:1c:17:6f:e4:6f:63:64:e4:42:5a:16:7a:8d:14:9c:8e:
ab:62:49:39:ad:00:e3:b5:d9:0c:f3:1e:c6:df:23:26:1e:03:
a9:6a:ad:78:93:af:7d:5d:ca:a2:bc:60:7b:c2:87:c2:92:e3:
eb:03:8d:0e:3b:6f:19:39:3b:0b:38:aa:5a:1d:6b:7f:c7:e8:
d6:8a:2f:a0:ae:7f:12:ab:f2:2b:a4:f4:2f:70:47:f7:99:07:
84:a1:3d:31:39:5b:4d:46:f2:90:2c:b5:97:0b:03:57:c3:f2:
70:75:51:a3:d2:d9:16:70:d4:65:9d:9f:07:25:3f:a0:a9:60:
57:8d:f5:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:47:54 2026 by rpki-client