
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64faafdc-0ef2-4ca2-ab11-63c839e7aa72/0ca10f39-3db3-339e-a199-354a0dc2a78f.roa
File: 0ca10f39-3db3-339e-a199-354a0dc2a78f.roa (raw, json)
Hash identifier: KvNf5FIAUnGNOW+Cy5nY4cbU+72hSWEK7iQv8qTBZUU=
Subject key identifier: 29:67:B5:01:2A:91:04:55:21:3C:EB:7F:2F:F7:26:57:40:97:51:D7
Certificate issuer: /CN=64faafdc-0ef2-4ca2-ab11-63c839e7aa72
Certificate serial: 010D0C9F4328584C50D1441845A58C8094354700
Authority key identifier: D0:2C:70:62:10:03:4D:34:01:4E:E9:8F:3E:5F:BC:52:B7:27:8B:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64faafdc-0ef2-4ca2-ab11-63c839e7aa72.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64faafdc-0ef2-4ca2-ab11-63c839e7aa72/0ca10f39-3db3-339e-a199-354a0dc2a78f.roa
Signing time: Fri 26 Dec 2025 14:00:39 +0000
ROA not before: Fri 26 Dec 2025 14:00:39 +0000
ROA not after: Thu 26 Mar 2026 13:00:39 +0000
asID: 32673
IP address blocks: 23.170.104.0/24 maxlen: 24
2607:7c40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64faafdc-0ef2-4ca2-ab11-63c839e7aa72/64faafdc-0ef2-4ca2-ab11-63c839e7aa72.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64faafdc-0ef2-4ca2-ab11-63c839e7aa72/64faafdc-0ef2-4ca2-ab11-63c839e7aa72.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64faafdc-0ef2-4ca2-ab11-63c839e7aa72.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:50:d1:44:18:45:a5:8c:80:94:35:47:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64faafdc-0ef2-4ca2-ab11-63c839e7aa72
Validity
Not Before: Dec 26 14:00:39 2025 GMT
Not After : Mar 26 13:00:39 2026 GMT
Subject: CN=da4f6e8c-33d2-4698-a19f-e0875af89501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d5:91:a9:f0:b8:44:0f:85:8d:10:21:40:a2:
11:ab:65:f0:84:26:8c:3f:ed:76:bd:0c:69:5d:93:
9d:16:ea:61:7c:06:fe:fe:02:f6:12:80:f9:43:76:
fb:3c:67:80:b1:bd:da:ee:01:b6:0b:35:25:7f:20:
75:28:bf:da:29:2e:c3:42:5d:5d:62:37:eb:00:6e:
f8:d2:70:c1:4c:00:53:8c:eb:12:2c:f7:f4:5c:9c:
bc:6c:fa:e8:01:80:6e:f9:f8:5d:61:fc:10:ef:55:
d6:31:0f:1d:38:51:3e:aa:9e:0b:e2:32:70:0d:3c:
57:da:fa:04:fa:43:c6:c7:27:28:2c:87:ef:f2:fa:
a3:2e:f9:18:42:62:30:50:17:82:f2:6b:3d:99:b7:
41:26:ee:f3:b9:14:39:f6:59:f6:ec:a5:3d:86:78:
c8:ac:34:f9:9c:bc:ea:c0:5d:9e:c0:12:d6:7f:8c:
72:d6:e1:5c:a3:19:95:54:39:f5:c6:cb:e4:fd:0b:
74:a8:cd:4f:68:e0:c8:f4:fc:53:10:d9:1e:a2:af:
7b:5e:ad:4a:63:b3:76:dc:a6:ca:87:8e:f6:80:ef:
25:41:e6:b1:a6:03:a3:64:0d:4f:89:fb:4a:5e:dc:
51:10:2c:3f:dd:2f:76:25:e8:6e:c6:31:94:21:75:
a2:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:67:B5:01:2A:91:04:55:21:3C:EB:7F:2F:F7:26:57:40:97:51:D7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64faafdc-0ef2-4ca2-ab11-63c839e7aa72/0ca10f39-3db3-339e-a199-354a0dc2a78f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64faafdc-0ef2-4ca2-ab11-63c839e7aa72/64faafdc-0ef2-4ca2-ab11-63c839e7aa72.crl
X509v3 Authority Key Identifier:
keyid:D0:2C:70:62:10:03:4D:34:01:4E:E9:8F:3E:5F:BC:52:B7:27:8B:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/64faafdc-0ef2-4ca2-ab11-63c839e7aa72.cer
sbgp-ipAddrBlock: critical
IPv4:
23.170.104.0/24
IPv6:
2607:7c40::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:66:c9:35:25:23:68:7b:39:00:ac:5f:ae:07:0b:73:4a:4c:
61:ce:d5:ef:03:c1:f8:a8:29:e0:0e:b6:8e:65:70:77:07:e7:
b6:96:8d:1b:95:74:17:0c:25:53:42:fb:15:b0:e1:29:cd:46:
ca:ac:e4:aa:9c:e9:49:3f:f6:59:71:91:0c:cb:d0:e1:e3:a8:
e8:71:a7:f9:ad:e2:f0:ec:22:ab:eb:a3:41:cd:ab:df:5c:97:
aa:02:ef:da:07:cb:14:1c:21:d8:3d:ea:97:56:46:a0:eb:92:
29:f7:65:b0:5a:f9:2b:bd:e0:3d:eb:8a:5d:33:53:e6:60:94:
19:e9:ae:23:67:bc:2f:28:a8:c6:73:ae:0b:7d:a0:56:c9:36:
d6:f2:ba:b6:c0:0e:7a:56:2f:57:35:17:ed:2d:58:a8:61:d7:
2d:2b:d7:1a:e2:c6:7b:d5:9c:d2:ea:ac:79:4d:1c:1d:e2:02:
ed:45:27:61:70:e8:e9:0c:5d:d4:3e:3a:6f:aa:93:ba:bc:e1:
4b:f9:77:19:e8:bf:72:e9:ff:d5:26:ad:46:b4:8e:61:7c:21:
16:7c:06:36:d6:7e:51:ae:43:00:3b:b6:80:34:29:14:aa:77:
7e:e4:10:84:6a:38:e2:4e:16:b6:62:b9:b6:eb:37:fe:21:71:
2d:49:b5:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:54:20 2026 by rpki-client