
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/65373b22-d003-3664-af25-5e36b1d06812.roa
File: 65373b22-d003-3664-af25-5e36b1d06812.roa (raw, json)
Hash identifier: 6i9Uy+/i3JRCLN823eJOak7ZsUdWDpEYDgU7FKCEDgY=
Subject key identifier: 2B:38:2C:F7:B6:22:57:E5:4B:9F:BF:B2:42:59:9B:12:97:38:5C:65
Certificate issuer: /CN=5df6ebd7-0ccd-4c06-80a0-45fd76077f54
Certificate serial: 010D0C9F4328584D55BA42613A4E5EA67A8FD300
Authority key identifier: F9:95:F2:99:32:98:E6:4A:40:C8:BC:48:CF:27:49:EC:AD:5E:FE:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/65373b22-d003-3664-af25-5e36b1d06812.roa
Signing time: Mon 30 Mar 2026 01:00:23 +0000
ROA not before: Mon 30 Mar 2026 01:00:23 +0000
ROA not after: Sun 28 Jun 2026 01:00:23 +0000
asID: 19905
IP address blocks: 23.128.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 04:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:55:ba:42:61:3a:4e:5e:a6:7a:8f:d3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5df6ebd7-0ccd-4c06-80a0-45fd76077f54
Validity
Not Before: Mar 30 01:00:23 2026 GMT
Not After : Jun 28 01:00:23 2026 GMT
Subject: CN=64c6c90f-0900-4d6e-8cdf-0162ebe6c8da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d6:53:89:2d:d6:6d:64:f3:f7:74:3d:ea:a8:
c9:3d:b0:62:f2:c9:ac:86:f6:cb:be:7f:74:d5:3f:
53:88:7e:73:f4:e1:84:18:98:0b:8c:d7:f5:aa:c3:
d3:87:27:25:a1:57:11:c2:f2:81:15:83:88:e1:38:
b5:36:ae:0e:5d:bb:60:ed:8c:fe:a2:32:cd:ef:55:
c7:df:02:17:3b:1b:b9:b2:d7:13:f5:45:bd:9e:fb:
72:d9:e4:44:f4:fd:b4:11:6b:46:09:b8:f4:7b:0f:
9b:79:96:04:76:b3:e5:bf:88:b0:f5:1f:ba:f2:c2:
87:e2:55:52:c7:59:33:7e:d2:6e:1b:75:bf:ca:4c:
a0:df:cf:15:8c:20:63:17:48:8a:67:4d:fc:20:6f:
d7:3d:e2:ed:c4:31:ba:cc:1f:03:41:e1:bf:81:8c:
54:2c:bd:31:20:78:6a:41:75:e5:b9:0e:30:cc:52:
0d:9e:d4:8e:38:62:53:ed:c3:d3:a6:47:f8:0a:a9:
94:a0:e5:7e:a1:8e:63:b4:9f:1b:af:4c:ff:16:1b:
06:69:a3:21:50:83:13:c8:0e:72:89:89:ff:dd:56:
35:58:15:91:2c:e2:95:10:04:a3:e1:2f:75:bc:0e:
ce:d1:8a:3a:2c:99:ce:35:2c:26:8c:ec:26:ff:05:
01:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:38:2C:F7:B6:22:57:E5:4B:9F:BF:B2:42:59:9B:12:97:38:5C:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/65373b22-d003-3664-af25-5e36b1d06812.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.crl
X509v3 Authority Key Identifier:
keyid:F9:95:F2:99:32:98:E6:4A:40:C8:BC:48:CF:27:49:EC:AD:5E:FE:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5df6ebd7-0ccd-4c06-80a0-45fd76077f54.cer
sbgp-ipAddrBlock: critical
IPv4:
23.128.122.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:8c:67:e6:4d:ac:14:b4:43:fe:94:e6:4d:06:63:16:86:c1:
80:24:37:84:df:8e:fa:5f:67:a3:81:d6:f7:6d:17:8a:d5:3f:
b6:81:da:6d:f4:99:69:c9:c4:47:48:f2:a1:3f:cf:f2:84:7a:
bd:e4:fe:bb:ed:30:2a:79:99:fa:70:3d:81:85:cb:bf:62:84:
be:dd:71:5e:ba:4a:1e:9e:8b:de:1d:bb:04:c3:7b:46:b1:35:
35:08:02:73:1f:e8:c5:06:ff:47:a8:5d:5f:9b:12:20:0a:04:
6f:8c:e0:83:c6:c9:2b:8a:4d:f1:62:2b:f1:4b:ee:42:6b:ef:
8c:88:fd:9a:b3:62:92:62:bf:d4:db:bb:fd:3f:f3:12:67:0d:
b6:f8:43:c9:ad:10:04:45:97:a4:75:34:d8:46:0c:92:07:61:
d2:03:7e:63:a3:f0:95:80:6c:ec:0f:b3:8c:50:21:aa:79:48:
7c:ac:aa:08:72:e6:e3:de:c2:dd:6e:7e:e4:99:db:c0:3d:20:
4f:21:a9:b0:50:3f:12:3f:d2:24:ad:61:d5:54:2d:62:31:45:
b1:09:67:d4:91:5f:8f:05:5e:95:c3:80:12:8c:3f:79:f2:e0:
00:6c:e7:db:19:bf:e3:f9:aa:d8:f6:76:41:4f:30:8e:4d:9b:
fd:09:d4:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:58:19 2026 by rpki-client