
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/41f98563-88ce-3a2f-930b-fd7902d789a9.roa
File: 41f98563-88ce-3a2f-930b-fd7902d789a9.roa (raw, json)
Hash identifier: nlpiZ9k92qjFZfv0XcQjvUGWfnwmVlQKLJ45wBgLaE4=
Subject key identifier: 1A:56:AB:AF:F2:9D:43:B0:81:5B:9F:B0:36:F1:BF:51:E2:46:24:66
Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial: 010D0C9F4328584F6C5836B4ED4630B97DEEFA80
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/41f98563-88ce-3a2f-930b-fd7902d789a9.roa
Signing time: Wed 07 Oct 2026 13:00:13 +0000
ROA not before: Wed 07 Oct 2026 13:00:13 +0000
ROA not after: Tue 05 Jan 2027 14:00:13 +0000
asID: 19157
IP address blocks: 23.86.32.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 10 Oct 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:6c:58:36:b4:ed:46:30:b9:7d:ee:fa:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Validity
Not Before: Oct 7 13:00:13 2026 GMT
Not After : Jan 5 14:00:13 2027 GMT
Subject: CN=823e63e5-13fa-406f-add9-b854a404e487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:0e:ce:e4:a3:a4:98:99:d0:a0:5b:0e:ab:b9:
70:51:1d:9b:18:22:11:56:b1:ce:8e:e5:e2:4d:2d:
71:8c:8a:22:7c:8c:4a:7a:c3:af:5e:2f:00:ee:17:
da:f1:f9:f4:64:8f:9a:d8:b9:3d:d4:08:79:69:03:
9a:18:af:32:24:0a:9b:29:9b:59:ec:23:f7:b3:6d:
63:48:e7:1d:ed:b3:03:f5:2a:95:16:ee:43:f3:cb:
bd:4a:90:eb:80:4b:22:5f:dc:7f:d0:e7:19:69:ae:
dc:64:53:b2:30:f0:3d:52:fa:2e:20:29:1e:18:5f:
ab:5a:f8:46:db:61:30:64:10:21:50:38:c1:61:74:
e9:97:29:89:2a:0a:84:36:ba:ad:28:09:73:80:88:
b3:25:32:29:af:5a:4a:7a:72:07:6e:78:cd:d7:2a:
fd:41:0b:01:8b:b4:a8:87:5a:db:45:85:e7:02:22:
bf:67:4b:4c:4d:07:76:43:f3:c1:fc:5d:56:5a:d9:
8e:24:d0:88:7c:54:95:01:bc:fb:20:02:9f:37:d6:
4c:b5:a5:05:2d:b0:77:d5:21:4e:bc:22:0a:11:1e:
b1:18:19:0b:45:3a:a2:9f:33:10:9d:9f:80:d7:29:
6a:6d:8a:26:ea:7b:1d:11:06:52:18:ec:13:cf:0b:
38:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:56:AB:AF:F2:9D:43:B0:81:5B:9F:B0:36:F1:BF:51:E2:46:24:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/41f98563-88ce-3a2f-930b-fd7902d789a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
X509v3 Authority Key Identifier:
keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
sbgp-ipAddrBlock: critical
IPv4:
23.86.32.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:23:16:82:91:c2:b9:f4:8b:7a:23:c0:f3:f5:f6:ca:bd:be:
94:9e:17:39:ab:90:05:bd:26:e4:0b:67:eb:00:53:07:0f:55:
d5:8b:cd:8e:c4:36:d3:b3:0e:40:e8:b5:dd:10:14:73:8b:02:
d3:e7:66:e5:51:dc:a0:41:53:bc:33:d8:15:43:fb:c4:61:3a:
61:d7:9f:d4:85:d9:28:1e:ba:0c:e4:d3:fa:6b:18:23:61:90:
67:b4:7a:dd:18:da:fc:4e:c5:91:f6:01:29:45:ef:d4:3e:36:
53:81:28:c3:f0:d8:06:54:9a:46:e4:b6:09:f8:ef:b7:09:0d:
ff:a8:aa:c1:de:48:4e:33:09:78:43:36:b7:e6:fd:90:45:42:
cd:86:39:10:7f:82:99:c1:f2:f2:6f:ca:74:52:65:15:cb:8c:
47:c9:3a:95:a1:45:2c:9a:81:42:ec:1e:36:22:a6:21:8b:17:
0e:a3:c5:69:ef:c6:c7:dd:9d:f9:62:32:f4:66:0c:1d:54:62:
80:54:d5:f0:d4:59:7b:18:53:03:b5:1d:d1:f4:83:17:b2:a2:
3c:76:8f:5a:6a:b7:03:e5:9c:aa:8e:aa:e6:3c:cc:71:09:47:
bd:fc:c9:ae:ec:54:93:a2:af:21:af:b2:5f:e0:a0:41:cf:85:
4e:26:9a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 13:54:53 2026 by rpki-client