
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a7bb872d-e597-498e-8bd5-d2efae320554/3964af05-8f41-3757-ad9c-16b99f15cc39.roa
File: 3964af05-8f41-3757-ad9c-16b99f15cc39.roa (raw, json)
Hash identifier: 0GioSV1c94hsFoRqLgVL2kpEOKUJq0/i+Nr7BaYqCLQ=
Subject key identifier: 3D:C0:52:96:20:1A:EA:5C:85:44:5C:34:DB:96:02:1E:7E:F0:84:19
Certificate issuer: /CN=a7bb872d-e597-498e-8bd5-d2efae320554
Certificate serial: 010D0C9F4328584CBDB211C53E9B45C56FBC30C0
Authority key identifier: 0B:C1:1F:4E:79:79:D6:3F:8B:E2:4A:B8:4F:99:21:03:79:42:69:7D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a7bb872d-e597-498e-8bd5-d2efae320554.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a7bb872d-e597-498e-8bd5-d2efae320554/3964af05-8f41-3757-ad9c-16b99f15cc39.roa
Signing time: Tue 03 Feb 2026 14:00:39 +0000
ROA not before: Tue 03 Feb 2026 14:00:39 +0000
ROA not after: Mon 04 May 2026 13:00:39 +0000
asID: 62890
IP address blocks: 23.145.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a7bb872d-e597-498e-8bd5-d2efae320554/a7bb872d-e597-498e-8bd5-d2efae320554.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a7bb872d-e597-498e-8bd5-d2efae320554/a7bb872d-e597-498e-8bd5-d2efae320554.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a7bb872d-e597-498e-8bd5-d2efae320554.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 23:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:bd:b2:11:c5:3e:9b:45:c5:6f:bc:30:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7bb872d-e597-498e-8bd5-d2efae320554
Validity
Not Before: Feb 3 14:00:39 2026 GMT
Not After : May 4 13:00:39 2026 GMT
Subject: CN=d5437b38-8782-46e4-8273-c4253bfa3806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:71:f7:30:d2:d6:fb:75:d8:0d:62:4c:cf:32:
39:ca:1e:da:8e:ba:b5:af:21:f2:8f:17:4f:94:15:
d5:35:6f:e6:ff:e8:c9:3b:86:76:86:7f:44:08:78:
74:fc:e0:14:e2:16:a3:c6:56:d8:52:08:2b:d4:46:
84:4f:23:0b:b6:94:6c:9d:fc:33:ab:a4:e5:f4:04:
fc:07:8b:9d:b6:0d:80:52:46:55:72:64:a1:0a:1f:
f7:e5:9c:ad:f6:e7:15:ee:80:3d:b5:95:db:21:91:
2b:ae:26:d2:6f:cf:7a:55:8c:7a:4f:06:1a:27:c9:
67:89:55:77:c0:c5:83:7f:96:f8:0a:1a:e0:05:e4:
b9:d3:9d:a9:3e:02:ef:6c:55:03:c8:4d:ca:e7:95:
5c:14:20:52:26:73:89:8c:00:6f:4e:39:95:87:f0:
d6:56:cd:1f:c0:1a:88:fa:71:67:c4:4f:4b:19:9d:
bc:e0:30:18:8d:bb:01:04:7e:fd:9c:51:45:fd:2f:
ef:34:4e:43:7a:92:ff:cd:e9:0e:7e:aa:6a:e1:7e:
13:6a:76:87:e9:c9:d7:23:55:64:15:68:c5:80:d2:
6a:fc:d2:a5:71:bc:86:0b:3f:ab:15:54:d8:ca:80:
15:89:7e:9c:9e:a4:d8:2a:ec:6e:26:f8:df:b6:29:
b0:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:C0:52:96:20:1A:EA:5C:85:44:5C:34:DB:96:02:1E:7E:F0:84:19
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a7bb872d-e597-498e-8bd5-d2efae320554/3964af05-8f41-3757-ad9c-16b99f15cc39.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a7bb872d-e597-498e-8bd5-d2efae320554/a7bb872d-e597-498e-8bd5-d2efae320554.crl
X509v3 Authority Key Identifier:
keyid:0B:C1:1F:4E:79:79:D6:3F:8B:E2:4A:B8:4F:99:21:03:79:42:69:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a7bb872d-e597-498e-8bd5-d2efae320554.cer
sbgp-ipAddrBlock: critical
IPv4:
23.145.104.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:41:b2:aa:ec:03:19:7c:05:12:ae:09:fe:8a:ae:dc:22:e3:
aa:8a:42:26:c1:bb:9c:9b:94:87:c7:df:fd:2b:7f:dc:e2:39:
9b:1c:c9:d3:fb:60:11:fe:16:a8:cd:83:ba:72:96:6d:41:2b:
df:e8:5b:ba:a1:45:39:ec:25:eb:97:fd:8b:a1:02:23:a4:b3:
d1:f2:31:05:96:63:e7:48:29:29:b4:37:66:15:c2:a8:20:c0:
69:ab:29:68:45:f9:cb:3d:d6:e8:2e:92:35:04:25:46:31:11:
ae:55:fa:ae:a1:22:67:01:42:f7:38:3a:6f:25:1b:6a:29:10:
3b:5f:17:d6:5f:ac:13:fd:90:8e:6f:b0:f1:ad:2a:a7:d9:e1:
f9:44:e3:74:62:97:4e:cb:f9:7f:f6:7d:86:89:8f:1e:99:6a:
a7:af:f9:c8:23:fa:e2:bd:98:61:16:4d:81:f3:fb:67:13:38:
a4:70:33:5c:cb:21:f7:33:9b:8e:d9:c2:4e:1b:32:dd:ce:f1:
62:9a:e0:bf:af:ff:3e:70:84:79:e0:e1:65:c6:26:4f:46:d8:
bb:ff:52:8a:c7:f7:43:53:c7:a9:95:4f:92:a9:a5:84:5a:c5:
04:4b:f8:36:ea:35:b0:5b:e4:27:e0:d4:c6:4b:7d:0e:a0:10:
1a:68:bd:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:08:04 2026 by rpki-client