
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/23168d98-beae-3197-8375-14702f665631.roa
File: 23168d98-beae-3197-8375-14702f665631.roa (raw, json)
Hash identifier: EYJsvLCpu55zat8Qz70q2SDVoa/0jz9fdBVTL+h4iXo=
Subject key identifier: 9D:80:6B:74:B8:4A:60:50:1B:D0:0E:DF:12:AE:35:4D:A8:12:30:0C
Certificate issuer: /CN=603ec9c3-6a7f-4455-baee-5999e253e735
Certificate serial: 010D0C9F4328584E1FA9A439D53CFEA1442D7B00
Authority key identifier: 8E:2C:C0:E0:03:39:DF:F9:32:13:AA:61:21:F8:AB:2D:67:F8:BA:F1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/23168d98-beae-3197-8375-14702f665631.roa
Signing time: Wed 10 Jun 2026 09:00:13 +0000
ROA not before: Wed 10 Jun 2026 09:00:13 +0000
ROA not after: Tue 08 Sep 2026 09:00:13 +0000
asID: 3676
IP address blocks: 128.255.0.0/16 maxlen: 24
129.255.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/603ec9c3-6a7f-4455-baee-5999e253e735.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/603ec9c3-6a7f-4455-baee-5999e253e735.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 16 Jun 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:1f:a9:a4:39:d5:3c:fe:a1:44:2d:7b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=603ec9c3-6a7f-4455-baee-5999e253e735
Validity
Not Before: Jun 10 09:00:13 2026 GMT
Not After : Sep 8 09:00:13 2026 GMT
Subject: CN=301670dc-9e33-4253-98e7-4afdf8298af6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:22:19:03:76:20:3e:aa:1d:bc:64:cb:9b:7d:
01:12:27:e8:7d:93:e9:6e:88:d1:a7:89:a7:3a:95:
04:ec:6a:51:20:14:d2:30:a9:b8:e9:37:97:2c:0e:
13:09:f4:17:a2:d9:1f:91:1b:42:83:af:e0:49:ab:
58:a2:6a:e9:64:de:48:39:8c:b9:4a:2e:7f:4f:e8:
33:e9:c6:77:c2:92:8e:55:d7:44:9c:70:12:6b:82:
a6:59:34:59:c9:35:bb:fb:02:dc:24:24:10:4c:94:
e8:77:b9:29:c3:be:26:8d:e5:bb:66:2a:ac:a4:0b:
47:b6:9e:4b:31:06:12:7c:3e:df:46:59:57:bb:ba:
54:8c:eb:cb:a5:08:03:9c:9e:b2:74:d1:eb:ec:d2:
21:5e:d1:ab:0d:8d:ab:79:15:a5:a6:8b:46:e7:b4:
89:b4:40:c0:a1:58:82:72:76:7c:f2:4d:8b:7c:ce:
ca:df:05:cc:19:a1:f0:48:26:49:f5:0f:95:0e:62:
be:09:dd:d6:d0:b7:fd:3b:35:c5:df:9c:ce:36:0b:
5d:5c:5c:6f:91:9f:e4:bd:9b:9d:14:b7:ad:2a:71:
1d:e9:fa:3e:2a:78:e8:ab:da:8c:52:16:7f:5e:5b:
7f:34:1c:41:a7:ec:08:7d:12:fd:1a:c0:54:cb:ef:
b0:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:80:6B:74:B8:4A:60:50:1B:D0:0E:DF:12:AE:35:4D:A8:12:30:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/23168d98-beae-3197-8375-14702f665631.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/603ec9c3-6a7f-4455-baee-5999e253e735.crl
X509v3 Authority Key Identifier:
keyid:8E:2C:C0:E0:03:39:DF:F9:32:13:AA:61:21:F8:AB:2D:67:F8:BA:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735.cer
sbgp-ipAddrBlock: critical
IPv4:
128.255.0.0/16
129.255.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:5c:d8:65:7a:e9:d9:2f:4d:a4:e8:6f:08:ad:0f:de:83:18:
54:6c:37:7d:93:42:7f:f4:34:cf:72:db:ac:2d:9c:89:9c:56:
28:79:b7:81:28:6e:05:6e:b7:bf:de:e5:8b:86:09:f6:59:b8:
ad:e5:5a:17:2f:03:ad:03:2f:51:ae:da:a3:60:86:a6:70:3f:
4d:f2:b0:d9:94:e9:d1:a8:ff:55:38:82:c8:f3:37:6a:14:9c:
e3:f0:8e:22:28:4d:54:2f:fe:0b:95:7a:7f:75:7d:c1:22:47:
07:3e:74:64:e2:e9:a5:6f:eb:31:81:f4:64:36:e6:ed:51:1a:
26:12:17:f2:e9:f1:7f:64:e7:da:6c:ea:54:91:09:4c:36:86:
22:25:09:26:3a:6b:a4:1a:d1:c7:67:b1:71:02:e8:fd:f3:7e:
74:f4:91:8b:92:eb:79:47:96:dd:90:c0:51:90:17:52:2e:9f:
17:c5:80:15:7e:ce:8c:93:56:de:a0:b7:14:38:99:6f:46:ed:
d5:eb:69:2a:50:69:c5:2c:e4:14:44:3a:00:d8:f6:95:45:51:
7f:ae:2d:4f:67:f2:a2:e1:ba:6a:85:98:68:fc:80:ec:bd:eb:
3f:23:12:bd:43:93:3b:5f:e5:a0:2d:57:73:28:f0:e9:ed:bd:
51:e2:6d:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:36:38 2026 by rpki-client