
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/affdef19-8fb7-342f-80fa-ce7195996ddf.roa
File: affdef19-8fb7-342f-80fa-ce7195996ddf.roa (raw, json)
Hash identifier: L2tbHrXhj42KFZrNzEuBJLp++inIDxCoJZRKklN+xWk=
Subject key identifier: 0E:27:82:26:83:A7:A7:D4:D5:AE:A9:2A:34:27:D7:44:A5:CD:5C:11
Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial: 010D0C9F4328584DD8F0829E55BAB72493DA59E0
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/affdef19-8fb7-342f-80fa-ce7195996ddf.roa
Signing time: Sat 16 May 2026 01:00:26 +0000
ROA not before: Sat 16 May 2026 01:00:26 +0000
ROA not after: Fri 14 Aug 2026 01:00:26 +0000
asID: 0
IP address blocks: 170.147.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 16 Jun 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:d8:f0:82:9e:55:ba:b7:24:93:da:59:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Validity
Not Before: May 16 01:00:26 2026 GMT
Not After : Aug 14 01:00:26 2026 GMT
Subject: CN=efbe2f5b-d085-44ee-9df0-ef14313bf927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e8:85:a6:54:61:7a:44:cf:0b:8b:90:83:e9:
47:85:f9:64:8e:e1:01:d3:bf:b8:d8:88:dd:ce:f9:
43:ae:e8:d7:68:59:9e:a5:00:e0:9b:d4:41:de:82:
84:fc:db:7b:4b:1c:ab:13:ac:68:a8:f5:27:1e:d8:
aa:4e:d6:1e:01:37:ec:24:38:38:5d:58:77:6b:b3:
a3:22:1d:53:7e:0b:60:9e:7a:86:e3:b4:7b:ef:3b:
3f:54:d4:40:9e:80:1e:6d:55:ab:63:41:da:60:55:
cc:14:8a:6b:35:71:bb:91:55:bb:b8:14:2f:40:f5:
68:2e:52:ca:ca:18:f3:29:2a:95:c2:05:01:3d:99:
f8:e4:a4:48:4d:0f:be:b4:aa:01:06:8e:dd:72:9f:
2a:fa:ca:dc:34:38:17:bd:41:77:b2:bf:6d:f4:3b:
df:85:e7:b0:aa:cf:62:35:44:5d:a9:a3:4e:75:a9:
97:1f:a8:87:d4:98:22:ec:63:56:8f:c1:8f:84:de:
49:fc:37:ba:28:1f:6d:ec:43:af:45:df:63:81:c0:
42:df:84:ae:99:05:64:58:0a:5a:2e:7d:f2:24:ce:
e0:77:d9:a8:b3:5d:de:3a:61:29:68:53:89:d0:fa:
7c:aa:b8:14:4a:d6:82:e9:93:88:d6:2f:a9:97:2b:
9a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:27:82:26:83:A7:A7:D4:D5:AE:A9:2A:34:27:D7:44:A5:CD:5C:11
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/affdef19-8fb7-342f-80fa-ce7195996ddf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
X509v3 Authority Key Identifier:
keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
sbgp-ipAddrBlock: critical
IPv4:
170.147.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:22:9a:78:f8:70:37:af:58:3a:a9:a7:aa:0d:27:bc:f9:66:
16:60:0e:97:4c:a1:55:3f:5a:3b:76:14:d6:89:4a:cd:c2:d0:
c3:41:a3:1f:91:73:a5:29:ed:40:60:12:13:fa:ec:bf:7f:df:
28:f0:bd:0c:a2:1b:4e:52:c0:c1:3a:b3:ff:24:09:97:45:ed:
38:7f:62:c3:09:13:9c:3d:a6:16:2b:3e:92:a3:97:53:48:4e:
a1:b2:7d:85:f4:ad:30:c3:19:6a:e0:94:fe:c8:f5:44:e2:2f:
6e:67:4e:90:14:cf:fb:b3:a6:3f:23:9f:b3:b8:8b:24:ba:14:
b5:ea:43:21:e5:8a:d3:e9:04:36:5d:0e:90:2b:4e:08:69:5b:
e2:79:05:0a:42:aa:4c:fb:1b:04:7a:bf:04:75:34:b8:01:55:
11:ec:d7:ec:06:c4:c1:36:9c:9e:c6:64:2d:56:ea:bc:13:fb:
78:13:91:27:49:8c:92:83:1e:c0:ee:ba:f4:9d:86:a8:1d:5b:
0e:b2:3f:ab:eb:94:21:3a:85:e8:49:33:af:49:bb:f3:87:15:
f0:37:f6:da:66:7a:6c:43:db:66:02:38:c7:b6:c5:de:74:c2:
7e:a0:5f:3e:a3:fb:c3:7c:51:29:3c:23:54:cf:e8:73:cb:b4:
e7:a3:ad:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:37:05 2026 by rpki-client