
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0/7ca41dda-e456-3247-b2ab-cfdb860809e0.roa
File: 7ca41dda-e456-3247-b2ab-cfdb860809e0.roa (raw, json)
Hash identifier: nGusG6VJefgM/DhyhSgtbCrUsPYQwC1QAskQfS4DjI8=
Subject key identifier: 8D:1B:35:06:4A:C4:72:00:D2:39:F5:E6:7D:12:94:F5:67:8C:08:4D
Certificate issuer: /CN=3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0
Certificate serial: 010D0C9F4328584D83CA87F20F6334680CE97F00
Authority key identifier: 1A:1F:5A:6A:94:5D:B3:85:0A:41:53:82:34:5C:94:0A:54:F4:3A:2F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0/7ca41dda-e456-3247-b2ab-cfdb860809e0.roa
Signing time: Wed 15 Apr 2026 13:00:30 +0000
ROA not before: Wed 15 Apr 2026 13:00:30 +0000
ROA not after: Tue 14 Jul 2026 13:00:30 +0000
asID: 213622
IP address blocks: 23.130.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:83:ca:87:f2:0f:63:34:68:0c:e9:7f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0
Validity
Not Before: Apr 15 13:00:30 2026 GMT
Not After : Jul 14 13:00:30 2026 GMT
Subject: CN=3f2a7d15-3127-42fa-8c08-78ab0b8e0b99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:7b:ef:58:74:bf:f1:dd:44:5c:03:39:8e:d0:
94:3a:46:0b:6a:40:77:a3:f2:4d:db:66:9a:87:c2:
b6:e5:52:bc:10:3d:0a:19:c5:72:73:ce:c0:f1:7e:
33:29:4d:6f:f5:52:a0:8f:b2:71:d6:bb:03:f6:f2:
b7:95:b0:68:38:35:aa:2d:b2:29:fc:ec:46:cb:a0:
ea:66:6f:1d:44:8a:10:b7:dc:de:07:4c:87:2c:e7:
36:a1:e1:5a:4a:e3:a7:53:e1:6d:87:4f:9f:86:be:
14:95:2c:56:c9:70:62:a4:88:4d:9a:b8:d7:df:c6:
b9:a8:e1:b9:dc:67:b7:59:af:73:e1:9d:0b:3d:ea:
84:57:08:68:2b:59:c5:49:c6:89:4c:aa:d9:93:4d:
50:2e:3d:ca:bc:94:0e:b8:37:2c:ca:26:67:b8:31:
ed:f4:21:2b:91:78:12:a1:73:1a:5c:6c:fd:a0:68:
45:6b:a0:cc:35:99:a7:56:41:88:6a:35:14:90:04:
80:25:1a:03:f2:c7:8a:da:1d:f7:8d:0b:30:5c:8e:
07:c5:20:9c:72:76:78:56:a1:3e:b1:a5:8a:d0:7a:
a4:44:b4:d4:0e:c6:8c:25:a7:12:8b:da:aa:1f:86:
2d:17:82:87:cc:1c:3e:1a:e6:2c:81:72:24:c7:1e:
48:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:1B:35:06:4A:C4:72:00:D2:39:F5:E6:7D:12:94:F5:67:8C:08:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0/7ca41dda-e456-3247-b2ab-cfdb860809e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0.crl
X509v3 Authority Key Identifier:
keyid:1A:1F:5A:6A:94:5D:B3:85:0A:41:53:82:34:5C:94:0A:54:F4:3A:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0.cer
sbgp-ipAddrBlock: critical
IPv4:
23.130.28.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:31:a6:8d:43:fe:7e:58:8a:40:3e:d3:a4:14:81:89:cc:b4:
90:1e:62:bd:26:d2:71:a5:b8:a2:11:4d:7f:f8:51:ff:0a:15:
31:67:ab:86:b2:a2:44:cc:78:22:87:4b:2b:b2:eb:cc:6c:c4:
b4:79:af:9b:74:a4:58:09:96:64:b3:69:63:5c:33:fd:91:e8:
ac:63:d8:08:5f:ad:d0:19:ab:37:a5:b9:d4:bc:b7:75:ac:4d:
4b:00:70:3f:43:75:88:2a:fa:40:78:f7:30:00:c7:f3:47:bd:
d1:30:35:9f:8f:51:40:b0:4f:37:33:87:5b:5b:09:f6:55:d7:
f2:c2:c6:89:05:fd:58:fb:96:0f:8b:9f:a5:de:64:0b:84:72:
ac:5b:e6:76:bf:69:97:96:8e:16:b2:54:93:17:4d:03:48:98:
0f:59:a3:87:69:4e:17:2b:7d:04:0e:80:74:55:76:74:73:e1:
c7:42:ef:8b:07:9d:e7:49:5c:52:50:26:62:59:d2:19:30:24:
6c:36:80:07:d9:44:15:2a:5c:f1:20:5a:a6:0e:f0:bf:4e:49:
b8:0e:e0:36:0a:e3:80:28:a5:ab:f2:b7:c5:9e:7c:da:f5:f8:
2e:80:f1:56:a5:24:5d:ea:94:b0:74:5d:b6:de:d5:79:73:5c:
6d:9b:d4:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:17:35 2026 by rpki-client