
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/843cf6ab-c96b-3e76-be87-2bea83664ff9.roa
File: 843cf6ab-c96b-3e76-be87-2bea83664ff9.roa (raw, json)
Hash identifier: UIQvVTVxp/j5pRaX96kDRd18G/QO/gChriVNXiU2aBo=
Subject key identifier: E0:B9:E6:C8:33:B8:F3:A9:80:AD:34:FB:03:CD:26:2D:58:1F:68:3A
Certificate issuer: /CN=2d448124-6e45-40ca-b551-28ef364c99c7
Certificate serial: 010D0C9F4328584F119D05BBE11F5393D1BD2380
Authority key identifier: 25:7D:1B:53:85:94:FC:AD:91:3E:C3:91:34:7B:77:79:5E:58:F5:A6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/843cf6ab-c96b-3e76-be87-2bea83664ff9.roa
Signing time: Sat 05 Sep 2026 01:00:12 +0000
ROA not before: Sat 05 Sep 2026 01:00:12 +0000
ROA not after: Fri 04 Dec 2026 02:00:12 +0000
asID: 397994
IP address blocks: 23.136.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2d448124-6e45-40ca-b551-28ef364c99c7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2d448124-6e45-40ca-b551-28ef364c99c7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 27 Sep 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:11:9d:05:bb:e1:1f:53:93:d1:bd:23:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d448124-6e45-40ca-b551-28ef364c99c7
Validity
Not Before: Sep 5 01:00:12 2026 GMT
Not After : Dec 4 02:00:12 2026 GMT
Subject: CN=7847b0db-9d65-4dc6-ad0f-4e0274edbea0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ea:43:ec:b2:c8:ea:1e:a8:2a:62:f0:f5:a3:
5e:3c:67:40:d9:38:9b:2e:35:a3:1e:c1:67:fd:48:
a2:b3:8d:5d:3a:f2:88:92:cf:09:67:23:a0:68:5b:
f8:3f:ed:83:ad:7c:fd:f1:cb:a0:38:aa:5a:21:20:
ff:ff:7a:98:6b:d3:0a:32:f5:1d:3f:80:11:18:91:
6f:e4:87:a9:51:63:9c:6a:f4:71:f2:73:c8:aa:8a:
c8:ef:59:b4:e9:73:ff:74:7b:f2:18:03:35:e0:b5:
93:57:7e:a0:2a:f8:f6:89:4b:57:76:4c:70:70:8b:
af:2a:4e:ba:10:8e:b6:18:b8:f6:f6:f4:59:a5:74:
85:f3:01:49:42:c6:7d:e2:d0:82:ac:fc:ad:13:8f:
24:ab:5a:1b:f3:09:1f:d6:72:96:11:5f:59:e0:49:
7a:c7:3b:4c:b6:62:6f:7f:76:eb:67:f8:f8:05:cb:
c0:ac:cb:b3:5b:6b:ca:3c:bb:bb:d6:57:4b:9f:d2:
e1:b9:f5:68:15:b8:ce:76:4a:87:bd:5a:ae:26:67:
8e:5f:96:90:98:fd:f0:0e:d4:f1:4d:61:1a:21:cd:
cc:31:bd:6f:20:8c:e3:94:62:d3:ec:68:5b:79:aa:
f6:75:86:2b:c3:08:0e:1c:b7:d5:b0:1d:a2:90:59:
15:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:B9:E6:C8:33:B8:F3:A9:80:AD:34:FB:03:CD:26:2D:58:1F:68:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/843cf6ab-c96b-3e76-be87-2bea83664ff9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7/2d448124-6e45-40ca-b551-28ef364c99c7.crl
X509v3 Authority Key Identifier:
keyid:25:7D:1B:53:85:94:FC:AD:91:3E:C3:91:34:7B:77:79:5E:58:F5:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2d448124-6e45-40ca-b551-28ef364c99c7.cer
sbgp-ipAddrBlock: critical
IPv4:
23.136.8.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:fe:31:b6:ff:35:b8:b6:5b:8c:b4:10:87:82:69:2e:19:f0:
03:b0:f0:cd:a7:1b:08:32:95:9e:c0:67:45:92:c4:cf:7c:ba:
35:aa:b8:3e:6e:88:a7:5d:af:9b:aa:04:85:86:da:99:01:84:
29:79:67:57:06:77:ce:c4:45:e4:26:c6:2b:39:51:5f:dc:16:
33:a1:fa:64:7a:e7:d9:91:cb:f0:75:9f:bd:df:fb:57:af:61:
d0:2f:4d:9e:ba:9d:08:01:8d:c4:2e:19:24:fc:dc:4b:4b:39:
d3:6c:f2:f5:73:a2:9f:53:00:ea:4c:08:9d:51:01:8b:43:08:
39:0a:d9:1a:cb:94:8e:cd:79:09:ba:52:81:5e:1d:bc:92:b6:
7c:4c:9d:ee:07:67:15:9d:9d:34:ae:04:21:1b:90:ac:3c:35:
86:8b:1b:fa:6a:a0:9c:00:b9:96:ac:9a:37:31:c9:b6:f6:92:
ea:03:8c:a1:9b:e5:95:85:68:59:af:41:ff:3c:5d:ad:0f:91:
68:27:eb:55:90:a7:c7:d5:e5:e3:b8:fb:3d:81:f0:dc:11:b4:
e5:07:dd:24:91:00:0b:56:49:c9:5a:0d:ad:67:d8:d7:f4:29:
2b:5f:63:4a:b1:2f:c7:5e:3b:8e:7f:8a:74:75:26:a7:ab:a1:
b2:a9:3e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:17:59 2026 by rpki-client