
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2e06fcf2-dda2-4ce0-8a33-46133120abec/e93cb9cb-b013-35b8-b6b2-638601d638e7.roa
File: e93cb9cb-b013-35b8-b6b2-638601d638e7.roa (raw, json)
Hash identifier: lLUxJKLK6VjaG/sEGiHD4MR48vHGttzeebjcaKv8n8o=
Subject key identifier: DB:74:92:0E:C8:D6:CB:D3:47:BB:91:0D:0F:6F:28:A6:B9:FB:60:E8
Certificate issuer: /CN=2e06fcf2-dda2-4ce0-8a33-46133120abec
Certificate serial: 010D0C9F4328584D5E1A6F3148C152FA7F950AA0
Authority key identifier: 41:0C:10:D1:1F:D3:4F:C8:5D:4B:DD:55:92:B3:76:1E:FD:41:34:7D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2e06fcf2-dda2-4ce0-8a33-46133120abec.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2e06fcf2-dda2-4ce0-8a33-46133120abec/e93cb9cb-b013-35b8-b6b2-638601d638e7.roa
Signing time: Thu 02 Apr 2026 01:00:23 +0000
ROA not before: Thu 02 Apr 2026 01:00:23 +0000
ROA not after: Wed 01 Jul 2026 01:00:23 +0000
asID: 999
IP address blocks: 23.145.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2e06fcf2-dda2-4ce0-8a33-46133120abec/2e06fcf2-dda2-4ce0-8a33-46133120abec.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2e06fcf2-dda2-4ce0-8a33-46133120abec/2e06fcf2-dda2-4ce0-8a33-46133120abec.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2e06fcf2-dda2-4ce0-8a33-46133120abec.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 20 Apr 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:5e:1a:6f:31:48:c1:52:fa:7f:95:0a:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e06fcf2-dda2-4ce0-8a33-46133120abec
Validity
Not Before: Apr 2 01:00:23 2026 GMT
Not After : Jul 1 01:00:23 2026 GMT
Subject: CN=246ab7e3-5d60-4102-a0f5-793bae2bf7ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ca:e1:55:49:f9:50:b7:75:f6:72:8e:32:03:
9d:b7:71:62:e2:72:a4:be:66:50:18:82:a6:d2:c5:
20:cf:06:31:1e:bb:f7:7a:14:06:ca:97:17:b9:5e:
eb:c8:28:d9:45:99:31:c3:73:4d:eb:d8:eb:2a:34:
69:92:10:75:fa:e4:fa:40:b5:1f:b8:8a:32:8d:ad:
9c:7f:7e:6b:cf:c1:ce:b3:07:a6:58:f4:09:ab:04:
0d:6a:17:81:6d:32:63:89:9e:94:92:23:f7:66:1b:
01:e9:58:14:02:cf:b4:8a:ca:16:dd:06:db:91:b7:
42:a5:b8:b6:79:61:4f:29:5d:b2:2b:5e:46:10:14:
b3:0a:43:9b:06:9a:33:49:bb:b6:34:e1:a9:e7:a4:
40:41:b8:9e:c3:1e:96:13:58:87:52:05:36:24:64:
25:bd:d7:34:05:b0:9e:b7:5e:66:0d:92:a3:d2:49:
a1:9d:f4:eb:fd:85:fd:76:04:9e:46:c0:2c:be:4c:
78:a3:7b:53:59:55:1f:26:21:28:6f:ea:25:10:fe:
14:c0:06:e1:8a:50:a5:45:d8:a9:de:f1:0f:60:ee:
7c:42:d2:50:06:12:01:8b:41:02:cc:66:e2:b6:a8:
03:fe:f9:31:a2:84:1b:0c:89:5c:c8:81:5d:6a:71:
f4:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:74:92:0E:C8:D6:CB:D3:47:BB:91:0D:0F:6F:28:A6:B9:FB:60:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2e06fcf2-dda2-4ce0-8a33-46133120abec/e93cb9cb-b013-35b8-b6b2-638601d638e7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2e06fcf2-dda2-4ce0-8a33-46133120abec/2e06fcf2-dda2-4ce0-8a33-46133120abec.crl
X509v3 Authority Key Identifier:
keyid:41:0C:10:D1:1F:D3:4F:C8:5D:4B:DD:55:92:B3:76:1E:FD:41:34:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2e06fcf2-dda2-4ce0-8a33-46133120abec.cer
sbgp-ipAddrBlock: critical
IPv4:
23.145.72.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:c5:df:51:63:80:3f:01:8c:5d:ff:a5:9e:90:d1:d1:e1:83:
6e:38:5c:f6:11:9a:a0:b4:a8:b6:f3:0e:25:d5:bf:07:29:1d:
72:7b:55:4d:49:c0:4c:f2:eb:7b:db:b9:35:5c:e6:b3:3c:e8:
f2:ba:1a:33:d7:45:30:f7:b4:b3:82:03:93:98:39:b6:5b:0f:
0d:ce:7a:e7:9c:5b:ba:23:37:6c:30:cd:aa:89:e1:b7:fe:cc:
86:4a:d4:a4:46:ba:9d:52:5f:0c:5e:64:45:c9:50:1c:d4:39:
35:3a:a2:5c:4b:40:83:da:ef:b7:4e:e2:4c:90:e4:00:60:c7:
1c:38:d9:09:22:6f:5d:db:35:f2:1c:a9:c1:2b:b3:d4:77:2e:
45:95:78:47:d2:73:35:e0:ba:90:08:14:2c:b7:44:b3:42:5e:
71:ed:ff:b9:ed:4c:4f:2a:41:1c:2c:8f:b3:05:2e:64:12:63:
be:dc:58:37:76:ed:32:19:e6:9c:3b:b9:fd:c3:b3:65:b2:b7:
ad:49:38:cd:a3:54:41:0a:db:48:ca:bd:0b:ca:db:42:c4:d3:
2e:1d:5e:a3:1f:99:27:99:4b:61:2f:35:65:19:4e:f6:c4:12:
f3:17:80:8e:b1:37:04:c7:c9:0d:35:c7:51:15:ee:26:f8:48:
a5:06:8d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:52:00 2026 by rpki-client