
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/3e17f3cb-ee97-39fb-800a-96b6754ca759.roa
File: 3e17f3cb-ee97-39fb-800a-96b6754ca759.roa (raw, json)
Hash identifier: i4SJ0q6hxHHf7m8oPmoczi0Aw4puG0t+A9Bg8yIVm7g=
Subject key identifier: 5D:52:BD:27:44:35:60:28:62:74:2E:BF:EC:DB:03:45:4C:41:05:14
Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial: 010D0C9F4328584D80FFD7C8678DCC125503DAC0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/3e17f3cb-ee97-39fb-800a-96b6754ca759.roa
Signing time: Tue 14 Apr 2026 13:00:30 +0000
ROA not before: Tue 14 Apr 2026 13:00:30 +0000
ROA not after: Mon 13 Jul 2026 13:00:30 +0000
asID: 19157
IP address blocks: 23.85.64.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:80:ff:d7:c8:67:8d:cc:12:55:03:da:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Validity
Not Before: Apr 14 13:00:30 2026 GMT
Not After : Jul 13 13:00:30 2026 GMT
Subject: CN=11838cf1-f9a5-44c2-b93f-64facad00f84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:54:3d:da:3a:09:e8:be:ee:ac:bc:c9:14:03:
be:ac:a6:4c:52:79:05:20:3b:7f:4a:99:ba:09:ba:
e5:b9:d5:ab:91:5b:72:2e:b2:6c:9f:36:43:84:e1:
db:35:ba:44:33:c7:97:da:c9:01:e5:f0:e9:5c:9f:
d4:52:d5:3c:fe:2c:cf:fd:2c:fb:16:4d:7c:d8:a3:
6a:6e:d6:cb:67:13:8b:a8:63:4a:5d:41:06:4b:92:
bc:a3:9e:ee:e3:df:8c:70:4f:a4:af:4c:dd:78:9c:
e4:fb:85:b9:8f:0f:43:35:5b:19:45:9a:0f:14:17:
6d:88:21:65:d2:50:ed:83:35:69:e4:2a:9d:43:57:
48:49:07:59:8f:20:0e:68:f2:74:42:a8:fb:d4:84:
d0:70:0b:79:7f:2d:20:2c:44:2c:79:0e:3b:54:cc:
f4:7b:9d:54:8b:58:1f:90:12:21:44:95:f5:a5:8c:
b0:24:9f:be:a6:da:29:c9:a8:fa:ef:6c:11:b2:31:
24:b1:07:cf:77:9a:f0:7f:e6:de:d4:36:57:ff:40:
74:31:d8:e0:fd:38:ff:e7:5d:4c:4f:50:b3:a7:47:
16:77:01:11:c6:4d:73:91:dc:89:b2:0b:8f:da:6c:
d6:4a:65:50:79:4a:2a:aa:ff:17:91:53:b8:5c:01:
a3:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:52:BD:27:44:35:60:28:62:74:2E:BF:EC:DB:03:45:4C:41:05:14
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/3e17f3cb-ee97-39fb-800a-96b6754ca759.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
X509v3 Authority Key Identifier:
keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
sbgp-ipAddrBlock: critical
IPv4:
23.85.64.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:a5:29:bc:27:2a:8c:94:7c:d8:c5:8b:d5:43:f5:1a:85:dd:
5b:e1:77:af:c7:4b:1a:7f:89:4d:e3:0a:ca:f5:ee:11:c7:d3:
b3:ad:de:ce:b3:5e:7a:33:72:20:26:ff:c0:d8:18:1a:a6:9a:
a0:2f:ae:33:61:2d:62:41:45:2d:96:d7:dd:23:c6:fb:e7:73:
58:e4:1d:c0:4f:a4:b6:38:ab:62:e1:20:02:a8:78:e8:33:81:
39:e1:0b:23:26:f6:c5:74:d6:0a:38:75:c9:91:6a:7f:f3:dd:
c1:e8:92:ac:7f:27:47:38:bf:d7:08:fd:88:61:d6:58:a5:86:
0a:19:e4:dd:b7:18:05:f2:c3:93:14:4e:66:98:4a:85:cf:28:
95:db:20:6e:b3:7f:15:11:ac:fb:79:96:c7:b8:67:0d:5e:a1:
d2:b1:44:83:9c:cd:a3:41:59:27:1f:e5:0e:23:67:7f:95:36:
af:a3:7c:7e:bd:7d:f0:32:69:2c:88:84:40:69:56:25:67:74:
c2:90:99:71:f6:13:16:3c:b0:30:f6:f9:bc:ed:35:c6:37:4a:
df:2f:ec:0a:3a:cd:cb:57:21:66:65:98:6b:f6:57:a6:ea:d6:
35:27:82:19:f0:fb:80:61:d8:d6:3b:68:3e:1b:73:a4:34:e0:
42:ac:81:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:34:40 2026 by rpki-client