
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f936a1e1-90de-4d04-8bef-ca6fea25558c/3339bdc8-afeb-376d-a715-d1f4adb10703.roa
File: 3339bdc8-afeb-376d-a715-d1f4adb10703.roa (raw, json)
Hash identifier: ySbZz64n6sOdTyIwFGaIa07YtrKWKTsqGUngVydw8iE=
Subject key identifier: 33:21:28:FC:CB:BA:70:86:45:03:FA:F8:05:C2:C9:A3:84:64:B4:58
Certificate issuer: /CN=f936a1e1-90de-4d04-8bef-ca6fea25558c
Certificate serial: 010D0C9F4328584CED277566FE269750D4661D00
Authority key identifier: 2D:E0:44:BD:CC:7F:2A:10:CE:8B:D5:1E:FA:6B:B3:8E:7B:5C:7D:73
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f936a1e1-90de-4d04-8bef-ca6fea25558c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f936a1e1-90de-4d04-8bef-ca6fea25558c/3339bdc8-afeb-376d-a715-d1f4adb10703.roa
Signing time: Fri 20 Feb 2026 14:00:41 +0000
ROA not before: Fri 20 Feb 2026 14:00:41 +0000
ROA not after: Thu 21 May 2026 13:00:41 +0000
asID: 9304
IP address blocks: 23.139.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f936a1e1-90de-4d04-8bef-ca6fea25558c/f936a1e1-90de-4d04-8bef-ca6fea25558c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f936a1e1-90de-4d04-8bef-ca6fea25558c/f936a1e1-90de-4d04-8bef-ca6fea25558c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f936a1e1-90de-4d04-8bef-ca6fea25558c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ed:27:75:66:fe:26:97:50:d4:66:1d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f936a1e1-90de-4d04-8bef-ca6fea25558c
Validity
Not Before: Feb 20 14:00:41 2026 GMT
Not After : May 21 13:00:41 2026 GMT
Subject: CN=ccf68260-3c5d-4cde-9c2d-5266cd784541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a1:a5:05:20:dc:d4:cd:eb:f6:ed:5a:92:e7:
54:1e:56:5f:76:67:41:c7:e1:30:c9:e3:7a:b1:ec:
af:a5:7e:de:4c:cd:cb:89:22:c2:7d:bc:75:85:dd:
12:fe:a3:c8:a4:fe:49:cd:eb:aa:4b:4d:a0:1c:22:
6e:ea:d4:13:3f:84:e7:a9:91:60:69:1a:4d:1c:86:
10:eb:2d:ca:cf:b9:78:36:18:e8:90:8c:60:78:b3:
d0:ba:07:a7:74:20:5a:ea:f1:56:a5:8c:74:e9:28:
63:0e:99:79:77:1b:83:9a:78:43:39:0b:fa:43:ad:
59:89:09:55:1d:1f:fb:d9:80:06:e2:a0:d7:be:f5:
ef:57:80:41:b8:ec:75:f5:97:0c:bf:4a:a7:8f:20:
4b:ff:58:8a:5f:99:f0:e7:b2:ca:64:1b:bc:06:cb:
0c:1f:85:2b:ec:8c:72:70:53:79:02:87:21:ad:a8:
54:a7:42:85:1c:5f:40:c3:ee:12:69:61:81:97:c3:
6d:ca:23:63:74:29:88:fc:5a:68:85:60:87:d0:e3:
60:57:d8:76:85:a3:ab:fc:c2:d6:f1:6d:db:88:62:
7b:ac:6f:5b:50:6e:bd:2e:c5:56:ae:9e:50:9f:81:
cf:f6:a2:d0:b5:4a:81:1b:94:1e:6a:72:2e:16:9e:
8b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:21:28:FC:CB:BA:70:86:45:03:FA:F8:05:C2:C9:A3:84:64:B4:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f936a1e1-90de-4d04-8bef-ca6fea25558c/3339bdc8-afeb-376d-a715-d1f4adb10703.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f936a1e1-90de-4d04-8bef-ca6fea25558c/f936a1e1-90de-4d04-8bef-ca6fea25558c.crl
X509v3 Authority Key Identifier:
keyid:2D:E0:44:BD:CC:7F:2A:10:CE:8B:D5:1E:FA:6B:B3:8E:7B:5C:7D:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f936a1e1-90de-4d04-8bef-ca6fea25558c.cer
sbgp-ipAddrBlock: critical
IPv4:
23.139.132.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:6a:51:c9:f3:49:1a:72:1a:aa:ed:65:71:38:00:5d:43:34:
24:af:1c:b1:2f:87:6b:7e:94:3c:64:61:bc:b6:0c:50:91:cf:
1f:58:a7:5c:63:43:db:17:df:61:0c:00:aa:26:dd:62:06:4e:
f2:d0:18:d8:e8:13:6f:5c:f8:3f:88:db:70:79:65:2b:8c:a2:
82:f1:e7:5d:fc:5b:86:72:ce:43:38:e8:ab:8a:40:de:7a:02:
75:28:82:48:05:8c:7c:02:4e:bd:4e:9c:f3:86:61:4b:bf:6b:
51:57:8c:7b:5c:c0:bf:89:b7:dd:f2:96:ce:70:f6:ef:61:12:
1f:29:2f:3f:90:c7:29:a9:40:ad:79:4f:aa:15:72:62:cf:0a:
d5:d8:95:2f:5e:b9:b8:04:ef:9e:52:67:41:75:16:1b:b7:97:
e3:b8:0d:d6:e1:62:02:08:6a:1b:7a:de:84:62:a3:cc:f0:c1:
cb:85:d6:be:96:a6:04:5b:a0:42:ec:3a:0d:8e:43:2c:d3:63:
c2:5d:63:26:87:1f:b3:18:78:e8:ef:47:ce:b8:d2:91:24:eb:
87:da:21:b6:62:3b:14:ea:9d:22:5d:a5:f1:47:b6:99:fc:07:
55:b7:2c:3c:b7:97:a8:17:8f:27:26:29:2d:33:db:d3:a1:2d:
63:b0:39:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:06:56 2026 by rpki-client