
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/04efd7cc-0d91-448d-bd9a-256355cac421/4cf83cf5-2d31-3dbb-a538-73d3ae9decc9.roa
File: 4cf83cf5-2d31-3dbb-a538-73d3ae9decc9.roa (raw, json)
Hash identifier: fm4755wtF6/N0gfNxR5L1FDE66fBSAysPKXCVoufRyA=
Subject key identifier: 97:A4:21:2B:6D:6F:DA:16:40:33:F1:1A:DA:17:41:65:41:0C:30:AC
Certificate issuer: /CN=04efd7cc-0d91-448d-bd9a-256355cac421
Certificate serial: 010D0C9F4328584F23C24A7A8DB88430CBD50180
Authority key identifier: 2C:AF:48:10:50:AB:80:1B:43:FC:88:46:91:F1:4E:9A:B6:BA:A8:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/04efd7cc-0d91-448d-bd9a-256355cac421.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/04efd7cc-0d91-448d-bd9a-256355cac421/4cf83cf5-2d31-3dbb-a538-73d3ae9decc9.roa
Signing time: Fri 11 Sep 2026 13:00:12 +0000
ROA not before: Fri 11 Sep 2026 13:00:12 +0000
ROA not after: Thu 10 Dec 2026 14:00:12 +0000
asID: 202036
IP address blocks: 23.157.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/04efd7cc-0d91-448d-bd9a-256355cac421/04efd7cc-0d91-448d-bd9a-256355cac421.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/04efd7cc-0d91-448d-bd9a-256355cac421/04efd7cc-0d91-448d-bd9a-256355cac421.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/04efd7cc-0d91-448d-bd9a-256355cac421.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 21 Sep 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:23:c2:4a:7a:8d:b8:84:30:cb:d5:01:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04efd7cc-0d91-448d-bd9a-256355cac421
Validity
Not Before: Sep 11 13:00:12 2026 GMT
Not After : Dec 10 14:00:12 2026 GMT
Subject: CN=0dfa2a28-3528-420c-a1e0-832f5d85acc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:86:c6:76:0a:06:22:fc:30:22:10:60:da:42:
c7:2c:94:62:b2:9e:b6:74:e6:a5:67:d0:1d:4e:46:
e1:cb:ef:ea:e4:a3:00:9e:91:a3:05:a8:8a:94:77:
16:fd:79:de:76:bf:6a:fc:a4:0f:83:de:c3:93:d8:
18:5f:c7:1f:ac:2f:b0:87:f9:a9:f7:63:ee:60:d5:
be:8a:07:16:4f:15:3e:75:0d:02:35:93:dd:fa:50:
c8:b6:18:e0:72:13:69:ac:3a:f2:71:54:1f:94:d2:
55:b9:9a:13:66:33:2b:fb:5a:ee:3e:9c:74:b5:2c:
2d:3b:28:85:8d:7c:b7:27:c8:9c:ac:4a:4d:27:3f:
94:9f:a2:2f:10:2a:2b:21:f5:16:dd:6b:d7:27:89:
30:0e:2d:85:6a:eb:cc:7d:74:ce:f6:fd:e3:25:28:
d6:64:a2:5c:0b:0f:63:e1:b5:36:df:b7:2f:6b:fa:
8c:14:c7:1f:9d:7f:8a:34:9e:4b:5f:06:84:27:92:
53:54:32:7f:fe:1c:c9:a0:0b:e4:3e:f6:19:e4:58:
2f:4b:f3:dd:b3:60:05:30:ab:9e:b2:57:16:c7:40:
2c:4a:c9:cc:86:3b:99:fc:e2:6a:4f:1d:ea:fe:18:
ae:14:e4:c7:87:9a:2a:44:f4:bb:d9:4b:98:23:d6:
a9:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:A4:21:2B:6D:6F:DA:16:40:33:F1:1A:DA:17:41:65:41:0C:30:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/04efd7cc-0d91-448d-bd9a-256355cac421/4cf83cf5-2d31-3dbb-a538-73d3ae9decc9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/04efd7cc-0d91-448d-bd9a-256355cac421/04efd7cc-0d91-448d-bd9a-256355cac421.crl
X509v3 Authority Key Identifier:
keyid:2C:AF:48:10:50:AB:80:1B:43:FC:88:46:91:F1:4E:9A:B6:BA:A8:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/04efd7cc-0d91-448d-bd9a-256355cac421.cer
sbgp-ipAddrBlock: critical
IPv4:
23.157.236.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:50:47:95:c9:07:2a:9e:e5:ca:63:55:5b:ff:06:24:79:b7:
dc:1c:d4:49:1a:1b:fb:07:0a:3b:20:4d:95:5f:1d:10:a4:e3:
26:26:c8:9e:7c:ec:10:62:21:b6:b2:fd:70:4e:12:6d:8a:b9:
53:7d:89:96:df:12:bb:77:74:88:d8:eb:c9:55:88:16:fd:ae:
ca:5a:4d:5f:3b:a6:8c:5d:ac:fa:76:7d:c7:6c:1c:78:df:15:
fc:cc:fa:fe:e4:0b:ca:fc:5c:08:78:65:f6:3d:7c:1a:37:9c:
4c:75:de:8e:99:92:ba:8d:2b:f7:7b:40:4f:ee:fd:a0:ae:bc:
d3:9a:60:62:7a:d5:3d:69:de:0e:c7:15:6d:84:0f:f2:55:59:
0c:5e:bc:db:75:a2:38:d0:1d:a7:66:52:c8:b8:24:d0:a2:b3:
28:c1:bb:56:17:88:f5:c4:fe:dd:a6:cd:41:e3:ba:c6:29:3b:
71:90:f3:d0:40:2b:b4:25:66:1e:f4:a9:bd:56:a9:63:88:01:
d1:e5:39:61:df:23:b5:97:e4:2b:41:08:7a:47:70:6f:ee:58:
2c:d6:df:17:22:40:ab:42:0a:ed:ae:e5:59:ee:a1:a8:af:a2:
be:14:ce:f5:71:90:a5:3e:e1:ca:8b:f7:fa:63:1c:1b:68:6e:
90:14:0a:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 17:44:04 2026 by rpki-client