
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb2539db-3965-4bf1-baef-b7f85ca967bd/21d3146c-b803-3260-b98f-e8fae0d54835.roa
File: 21d3146c-b803-3260-b98f-e8fae0d54835.roa (raw, json)
Hash identifier: ll5UEg7vxm8KFEF2uClGJf2juxcFL3LE0Y1YKcD1Ou8=
Subject key identifier: BD:25:C6:7D:9C:F9:0E:1F:F5:7C:A4:6C:06:5F:32:11:EF:E3:54:C5
Certificate issuer: /CN=cb2539db-3965-4bf1-baef-b7f85ca967bd
Certificate serial: 010D0C9F4328584EFB4762C34BA3A096497B2780
Authority key identifier: 35:C7:3C:89:B5:63:FF:C4:EA:B1:DA:09:76:E9:EF:ED:1B:BF:26:E9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb2539db-3965-4bf1-baef-b7f85ca967bd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb2539db-3965-4bf1-baef-b7f85ca967bd/21d3146c-b803-3260-b98f-e8fae0d54835.roa
Signing time: Fri 28 Aug 2026 01:00:12 +0000
ROA not before: Fri 28 Aug 2026 01:00:12 +0000
ROA not after: Thu 26 Nov 2026 02:00:12 +0000
asID: 401143
IP address blocks: 23.147.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb2539db-3965-4bf1-baef-b7f85ca967bd/cb2539db-3965-4bf1-baef-b7f85ca967bd.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb2539db-3965-4bf1-baef-b7f85ca967bd/cb2539db-3965-4bf1-baef-b7f85ca967bd.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb2539db-3965-4bf1-baef-b7f85ca967bd.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 22 Sep 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:fb:47:62:c3:4b:a3:a0:96:49:7b:27:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb2539db-3965-4bf1-baef-b7f85ca967bd
Validity
Not Before: Aug 28 01:00:12 2026 GMT
Not After : Nov 26 02:00:12 2026 GMT
Subject: CN=15793483-4ef3-41e2-bfbd-8cb02d56d497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:ff:49:18:15:a3:36:57:d5:f8:b9:57:bf:ed:
4e:6d:bd:29:51:e4:33:d2:a1:6d:3d:24:a2:61:d0:
f1:68:cb:d8:74:94:69:87:55:0b:c4:43:66:83:0a:
23:a8:34:63:e8:7f:31:ef:e6:26:a6:ef:78:30:17:
04:e8:ff:1e:1b:36:c9:8e:d2:b3:52:28:3f:f8:1e:
cf:47:14:e3:68:96:cf:11:b0:c7:0a:b8:f0:e2:d4:
54:aa:76:3b:91:c1:44:c4:43:0c:25:f7:67:74:53:
26:d3:6d:01:a9:e5:05:1b:fc:ac:d4:bb:7f:73:0a:
fd:5b:24:02:97:a6:03:2a:22:98:84:4c:65:46:cd:
f1:4a:f1:83:78:ff:22:3e:34:16:0c:f2:85:c0:08:
5a:cc:86:8a:41:a6:b9:51:64:3d:ba:3a:46:23:0d:
82:9a:8b:3a:b0:1c:d2:bd:87:93:84:e4:68:67:44:
cd:10:41:de:21:22:b7:9d:5d:94:df:ed:57:14:6e:
23:a7:40:b1:ec:44:fe:e9:5f:3e:8d:9e:96:89:cf:
0c:86:cc:f5:16:8f:fb:be:0d:10:03:f1:d5:25:23:
ec:e0:53:7f:cb:ca:95:da:92:75:6f:a5:47:f4:03:
29:3e:19:0d:84:ba:f2:bc:48:7d:38:59:0b:ed:a2:
ad:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:25:C6:7D:9C:F9:0E:1F:F5:7C:A4:6C:06:5F:32:11:EF:E3:54:C5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb2539db-3965-4bf1-baef-b7f85ca967bd/21d3146c-b803-3260-b98f-e8fae0d54835.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb2539db-3965-4bf1-baef-b7f85ca967bd/cb2539db-3965-4bf1-baef-b7f85ca967bd.crl
X509v3 Authority Key Identifier:
keyid:35:C7:3C:89:B5:63:FF:C4:EA:B1:DA:09:76:E9:EF:ED:1B:BF:26:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb2539db-3965-4bf1-baef-b7f85ca967bd.cer
sbgp-ipAddrBlock: critical
IPv4:
23.147.124.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:de:f8:28:66:1b:82:4f:5b:a6:7d:b6:c5:eb:43:1e:c5:df:
46:02:4e:1c:bd:35:68:dc:d2:bf:38:e0:01:ea:05:a5:6c:59:
95:27:ca:01:f4:51:3a:2c:b0:71:0b:97:12:67:13:19:c2:97:
36:ab:97:66:f7:fe:b7:3f:54:56:f3:b3:1d:fc:c0:d7:47:66:
50:79:c2:ff:78:7c:db:5e:53:29:a2:4d:c6:db:9a:05:0a:39:
06:87:4a:47:9c:4a:5c:4f:be:37:22:ed:38:bb:88:74:cd:76:
f2:62:b0:32:5b:f8:5b:7d:0f:4b:d9:0d:6c:bc:ff:12:c1:93:
77:94:bc:02:b1:3e:ea:eb:4b:74:35:2a:42:48:4b:49:d2:07:
02:9d:13:40:2e:24:91:63:80:ab:33:f7:6b:78:f3:c3:38:50:
5e:d6:09:fd:29:25:bd:9c:08:bf:52:8d:5c:05:c4:b8:bb:07:
66:dd:94:16:37:ab:a3:d6:ca:13:02:47:32:6e:57:7f:0a:f3:
f0:d6:37:2a:47:24:47:31:e0:05:95:a3:e4:ba:25:2f:9c:85:
e0:e3:76:ce:32:28:66:95:cf:40:e1:74:c0:f4:91:56:f5:7f:
f5:8e:c4:27:dc:44:91:e4:dc:ed:ac:8e:c3:11:a9:66:fb:94:
86:49:2d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:01:46 2026 by rpki-client