
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b/567a0c7b-3f86-31ea-8791-f3940e306bd1.roa
File: 567a0c7b-3f86-31ea-8791-f3940e306bd1.roa (raw, json)
Hash identifier: qj7QSh4XCXrDQUjdRngDiqp3IgdeL4ohFiENjJlUwJU=
Subject key identifier: 83:3D:AA:6D:CD:E6:24:6C:E0:0B:8F:1B:D0:AA:69:D1:1B:40:50:01
Certificate issuer: /CN=2d64a9b2-da39-490b-a76e-0928cd57270b
Certificate serial: 010D0C9F4328584CEA5CE1392A1A839F444ADAC8
Authority key identifier: C7:69:30:7A:B2:7A:76:4F:23:E1:E7:4E:DB:18:C6:3D:E0:0C:95:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b/567a0c7b-3f86-31ea-8791-f3940e306bd1.roa
Signing time: Thu 19 Feb 2026 14:00:40 +0000
ROA not before: Thu 19 Feb 2026 14:00:40 +0000
ROA not after: Wed 20 May 2026 13:00:40 +0000
asID: 54041
IP address blocks: 23.142.232.0/24 maxlen: 25
2602:faf5::/40 maxlen: 64
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b/2d64a9b2-da39-490b-a76e-0928cd57270b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b/2d64a9b2-da39-490b-a76e-0928cd57270b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ea:5c:e1:39:2a:1a:83:9f:44:4a:da:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d64a9b2-da39-490b-a76e-0928cd57270b
Validity
Not Before: Feb 19 14:00:40 2026 GMT
Not After : May 20 13:00:40 2026 GMT
Subject: CN=2d64e475-fa1d-4dac-b7a0-54aa3745b60b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:1b:f6:81:5f:fe:b1:e7:64:63:9d:87:84:4f:
0b:1a:73:17:71:24:7a:65:95:82:b8:75:72:6e:16:
ca:0d:e4:62:a8:16:48:2f:aa:05:23:77:c3:23:16:
13:ec:9d:6b:19:a5:68:84:1f:0a:90:4a:da:0a:8f:
a9:90:14:81:ff:09:00:55:27:68:c2:43:c6:3d:cd:
e7:d1:c4:16:9d:76:1d:7d:d9:d5:e1:84:b2:96:16:
1a:46:50:e3:c3:b6:a4:d5:be:01:30:0a:85:b4:0e:
92:4b:a7:9b:06:f1:56:ab:b0:12:80:55:48:e3:a9:
16:d9:94:47:48:ab:27:c6:a8:f1:5b:d6:6b:ad:11:
86:aa:8f:b4:dc:d0:8e:ba:bf:1a:c9:57:c1:cc:f7:
3a:97:2b:6c:1c:c1:52:51:ce:32:04:e6:57:cd:54:
28:54:13:4d:ff:2c:59:ef:1c:f2:31:65:87:72:c5:
49:83:00:3c:8e:2f:74:4d:d9:e1:7e:69:7d:37:ec:
cd:23:ec:88:7d:9e:12:83:7b:9f:7f:99:93:fe:e8:
ea:30:ef:f1:8a:b1:1a:85:9d:5f:64:11:d6:ea:3e:
5c:a3:3d:38:2d:94:02:06:64:72:c1:d4:fd:ba:53:
37:22:68:8f:ad:d5:d6:9b:5a:c0:1b:75:9c:22:93:
b3:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:3D:AA:6D:CD:E6:24:6C:E0:0B:8F:1B:D0:AA:69:D1:1B:40:50:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b/567a0c7b-3f86-31ea-8791-f3940e306bd1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b/2d64a9b2-da39-490b-a76e-0928cd57270b.crl
X509v3 Authority Key Identifier:
keyid:C7:69:30:7A:B2:7A:76:4F:23:E1:E7:4E:DB:18:C6:3D:E0:0C:95:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b.cer
sbgp-ipAddrBlock: critical
IPv4:
23.142.232.0/24
IPv6:
2602:faf5::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:5a:7f:4b:79:c7:7d:f5:46:62:b1:c8:71:71:b9:80:cd:4a:
71:62:15:43:bb:63:d1:3d:28:85:57:a9:06:e0:b2:d7:0d:4c:
83:b7:b9:d3:f8:0d:df:25:25:78:08:68:24:30:1b:46:0e:b2:
5c:f9:07:41:60:53:56:71:59:0b:35:1d:d9:5b:64:e9:0e:67:
14:57:6f:d8:8d:75:26:7a:fe:37:b8:5b:36:91:f4:36:67:21:
31:91:91:a2:5d:c2:55:19:90:8a:5a:56:2c:5a:49:3a:26:06:
28:db:9c:b7:45:b4:7e:72:0b:97:e4:cb:bc:95:5d:d7:be:d6:
ff:db:0c:99:de:3d:75:92:8f:54:c1:0b:99:3e:84:2f:92:14:
38:65:6f:69:6e:42:2c:6f:db:68:46:da:ae:0f:4a:ae:57:f2:
59:ea:fa:f6:21:49:46:eb:65:39:78:fe:45:c9:d7:2a:e2:ba:
ea:23:73:a3:a3:0a:f5:7d:6c:d8:15:96:8f:71:f6:5b:69:0f:
44:81:d5:12:f9:63:20:23:8a:a5:63:38:33:c3:ad:a1:a3:c3:
c8:2b:cb:e4:db:bb:90:ab:5f:e0:5f:f8:02:c4:5d:d9:14:89:
20:24:9e:4f:36:5f:a2:4e:ca:6c:eb:d1:08:16:dd:ce:84:a9:
c0:75:f7:b5
-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEzqXOE5KhqDn0RK2sgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmQ2NGE5YjItZGEzOS00OTBiLWE3NmUtMDkyOGNkNTcy
NzBiMB4XDTI2MDIxOTE0MDA0MFoXDTI2MDUyMDEzMDA0MFowLzEtMCsGA1UEAxMk
MmQ2NGU0NzUtZmExZC00ZGFjLWI3YTAtNTRhYTM3NDViNjBiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBv2gV/+sedkY52HhE8LGnMXcSR6ZZWCuHVy
bhbKDeRiqBZIL6oFI3fDIxYT7J1rGaVohB8KkEraCo+pkBSB/wkAVSdowkPGPc3n
0cQWnXYdfdnV4YSylhYaRlDjw7ak1b4BMAqFtA6SS6ebBvFWq7ASgFVI46kW2ZRH
SKsnxqjxW9ZrrRGGqo+03NCOur8ayVfBzPc6lytsHMFSUc4yBOZXzVQoVBNN/yxZ
7xzyMWWHcsVJgwA8ji90Tdnhfml9N+zNI+yIfZ4Sg3uff5mT/ujqMO/xirEahZ1f
ZBHW6j5coz04LZQCBmRywdT9ulM3ImiPrdXWm1rAG3WcIpOzjwIDAQABo4IDZTCC
A2EwHQYDVR0OBBYEFIM9qm3N5iRs4AuPG9CqadEbQFABMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yZDY0
YTliMi1kYTM5LTQ5MGItYTc2ZS0wOTI4Y2Q1NzI3MGIvNTY3YTBjN2ItM2Y4Ni0z
MWVhLTg3OTEtZjM5NDBlMzA2YmQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMmQ2NGE5YjItZGEzOS00OTBiLWE3
NmUtMDkyOGNkNTcyNzBiLzJkNjRhOWIyLWRhMzktNDkwYi1hNzZlLTA5MjhjZDU3
MjcwYi5jcmwwHwYDVR0jBBgwFoAUx2kwerJ6dk8j4edO2xjGPeAMlXYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yZDY0YTliMi1kYTM5LTQ5MGItYTc2ZS0wOTI4
Y2Q1NzI3MGIuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF47oMA4E
AgACMAgDBgAmAvr1ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCGWn9Lecd99UZischxcbmAzUpxYhVDu2PR
PSiFV6kG4LLXDUyDt7nT+A3fJSV4CGgkMBtGDrJc+QdBYFNWcVkLNR3ZW2TpDmcU
V2/YjXUmev43uFs2kfQ2ZyExkZGiXcJVGZCKWlYsWkk6JgYo25y3RbR+cguX5Mu8
lV3Xvtb/2wyZ3j11ko9UwQuZPoQvkhQ4ZW9pbkIsb9toRtquD0quV/JZ6vr2IUlG
62U5eP5Fydcq4rrqI3Ojowr1fWzYFZaPcfZbaQ9EgdUS+WMgI4qlYzgzw62ho8PI
K8vk27uQq1/gX/gCxF3ZFIkgJJ5PNl+iTsps69EIFt3OhKnAdfe1
-----END CERTIFICATE-----
Generated at Sun Mar 1 16:32:18 2026 by rpki-client