
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ce5da6ad-b990-4402-a862-1c9a918309ea/d7b31348-a718-3a86-8c95-328e00d36578.roa
File: d7b31348-a718-3a86-8c95-328e00d36578.roa (raw, json)
Hash identifier: JS6tLbwn2/txVsSxIh2Apw4bCmez3Jco2azZesSqjSY=
Subject key identifier: BD:39:9C:D7:86:1F:29:79:D4:CC:7A:4A:D6:AF:E2:5D:8C:FE:8B:B4
Certificate issuer: /CN=ce5da6ad-b990-4402-a862-1c9a918309ea
Certificate serial: 010D0C9F4328584DF6465BB3DB7C1F3345FDA840
Authority key identifier: F6:B5:DA:FB:36:F0:76:9A:48:DB:91:DA:E2:16:EC:8D:C7:AE:01:C7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ce5da6ad-b990-4402-a862-1c9a918309ea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ce5da6ad-b990-4402-a862-1c9a918309ea/d7b31348-a718-3a86-8c95-328e00d36578.roa
Signing time: Tue 26 May 2026 13:12:12 +0000
ROA not before: Tue 26 May 2026 13:12:12 +0000
ROA not after: Mon 24 Aug 2026 13:12:12 +0000
asID: 55149
IP address blocks: 23.141.248.0/24 maxlen: 24
2602:fb01::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ce5da6ad-b990-4402-a862-1c9a918309ea/ce5da6ad-b990-4402-a862-1c9a918309ea.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ce5da6ad-b990-4402-a862-1c9a918309ea/ce5da6ad-b990-4402-a862-1c9a918309ea.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ce5da6ad-b990-4402-a862-1c9a918309ea.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 16 Jun 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:f6:46:5b:b3:db:7c:1f:33:45:fd:a8:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce5da6ad-b990-4402-a862-1c9a918309ea
Validity
Not Before: May 26 13:12:12 2026 GMT
Not After : Aug 24 13:12:12 2026 GMT
Subject: CN=bc3be423-af86-41f4-b039-1b77dbff05d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:1f:8c:f0:b5:ab:7b:ba:6b:ff:74:81:f5:f0:
03:cb:88:19:54:2b:08:a5:7e:9f:37:42:f6:1c:a1:
43:09:cb:58:7e:3e:b5:cb:b1:47:34:e9:fa:7a:ed:
0a:98:88:8b:d2:52:f7:1c:04:bf:57:1e:99:1c:7a:
93:55:b8:c9:fb:14:4e:b9:f0:bf:79:4b:c9:76:85:
19:99:51:70:82:ff:3f:87:72:ed:fe:46:59:cd:3d:
45:d1:19:6b:68:af:27:f1:cc:5f:54:4c:cb:cd:a0:
22:26:bc:6a:cf:fe:c0:2a:f9:42:62:a1:26:05:c3:
91:ce:6f:d1:bf:b5:18:f4:8c:86:7d:b5:5b:6a:1c:
68:5f:e6:ee:32:8e:28:3e:72:93:ae:a5:58:f1:7e:
ae:c8:5a:6e:11:79:74:1f:fb:1b:4d:af:f6:43:d7:
2c:21:b5:ef:c3:f3:bc:45:38:8d:d5:df:79:7c:35:
9e:9b:b8:74:0d:93:d5:82:e5:f6:0e:b4:b0:fa:ae:
d5:a0:be:47:c0:03:40:54:80:d0:e4:55:06:30:19:
7a:30:49:d0:88:ed:e7:4d:d9:87:63:e1:5d:86:9b:
cf:ba:ef:a0:97:7b:25:50:ba:4d:c0:15:f0:44:60:
64:79:53:c5:e3:15:c7:21:68:cb:84:22:90:de:8c:
79:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:39:9C:D7:86:1F:29:79:D4:CC:7A:4A:D6:AF:E2:5D:8C:FE:8B:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ce5da6ad-b990-4402-a862-1c9a918309ea/d7b31348-a718-3a86-8c95-328e00d36578.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ce5da6ad-b990-4402-a862-1c9a918309ea/ce5da6ad-b990-4402-a862-1c9a918309ea.crl
X509v3 Authority Key Identifier:
keyid:F6:B5:DA:FB:36:F0:76:9A:48:DB:91:DA:E2:16:EC:8D:C7:AE:01:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ce5da6ad-b990-4402-a862-1c9a918309ea.cer
sbgp-ipAddrBlock: critical
IPv4:
23.141.248.0/24
IPv6:
2602:fb01::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:94:e4:29:c2:7e:25:56:58:a0:4e:f3:6e:a9:6c:09:f2:54:
97:6a:70:f2:b2:0e:c1:cc:03:24:40:8d:0d:6b:c3:76:0c:e5:
31:b7:82:f7:f9:bc:17:00:1a:24:db:f2:c6:fa:e9:8c:61:f4:
2e:90:e1:4a:71:01:47:b2:21:7f:cf:de:42:d7:fe:c1:1a:8f:
a5:4f:e8:78:31:b4:67:75:0d:15:16:c0:60:13:3d:43:db:12:
ed:55:96:dc:03:be:0a:c0:9b:c6:45:dd:41:a3:a1:d9:6f:7f:
7f:42:41:1a:72:95:55:c6:9d:27:be:c1:91:49:8a:8e:e3:74:
7c:ed:be:de:e2:00:3e:d5:52:66:8d:f5:cf:cb:e1:e4:60:d5:
6b:cd:38:a5:63:55:e6:c2:d3:f5:66:bf:8b:e0:af:6f:a3:ae:
b8:99:3d:e9:8c:13:a7:ab:d0:78:72:e4:c2:81:a4:88:b0:45:
00:07:97:5a:1d:57:3f:75:07:a4:d1:25:39:15:18:51:1c:bd:
fa:2c:9b:11:ef:dd:7d:22:96:4b:85:ba:63:ce:99:87:b0:8d:
e5:13:06:7e:f0:37:13:33:6a:93:86:ce:c6:ca:45:b8:80:d6:
4e:2e:b7:93:da:d1:d0:a4:de:f9:74:ff:e5:e5:e1:cc:43:17:
a2:e1:cf:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:13:27 2026 by rpki-client