
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9c74a627-7577-4f11-89e0-589500621344/9fdf1578-2d9a-3898-b19c-fb3ca0e1cf8e.roa
File: 9fdf1578-2d9a-3898-b19c-fb3ca0e1cf8e.roa (raw, json)
Hash identifier: D+aqXXX3xXmInprnfQY47ZQxURHFfZNeHi7+dC61g2s=
Subject key identifier: 5C:E8:72:24:BB:5B:82:FA:C1:00:AF:AC:66:79:DC:4F:E5:4A:DF:53
Certificate issuer: /CN=9c74a627-7577-4f11-89e0-589500621344
Certificate serial: 010D0C9F4328584D667A488B0BA1F370297FAE80
Authority key identifier: D6:44:B8:32:E0:03:37:FD:A1:6A:62:DE:AE:42:CF:56:27:4A:A1:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9c74a627-7577-4f11-89e0-589500621344.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9c74a627-7577-4f11-89e0-589500621344/9fdf1578-2d9a-3898-b19c-fb3ca0e1cf8e.roa
Signing time: Sun 05 Apr 2026 01:00:24 +0000
ROA not before: Sun 05 Apr 2026 01:00:24 +0000
ROA not after: Sat 04 Jul 2026 01:00:24 +0000
asID: 2914
IP address blocks: 23.133.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9c74a627-7577-4f11-89e0-589500621344/9c74a627-7577-4f11-89e0-589500621344.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9c74a627-7577-4f11-89e0-589500621344/9c74a627-7577-4f11-89e0-589500621344.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9c74a627-7577-4f11-89e0-589500621344.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:66:7a:48:8b:0b:a1:f3:70:29:7f:ae:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c74a627-7577-4f11-89e0-589500621344
Validity
Not Before: Apr 5 01:00:24 2026 GMT
Not After : Jul 4 01:00:24 2026 GMT
Subject: CN=dfd5042c-9bec-4960-9bc7-b335f9403ce5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1d:fb:bd:0b:fd:5c:ee:da:d9:46:d6:f3:94:
56:a6:ef:cc:f2:40:d1:0b:a3:0e:f1:2f:9d:69:74:
d1:23:f8:f3:45:2c:79:2e:35:9a:89:85:32:9b:04:
e1:d2:f3:32:88:52:93:91:48:97:10:d6:ac:de:44:
51:ee:b9:70:05:cc:c2:39:b2:ad:77:30:ae:15:53:
f5:22:f5:9e:23:92:12:ac:c0:ee:75:5e:ad:7b:2e:
91:bb:e2:04:fa:75:24:26:08:f3:c6:dd:95:3c:c6:
88:4e:84:cf:f7:a3:1c:ac:19:0f:72:82:89:da:1d:
53:61:da:71:2a:75:60:53:a2:2d:14:b8:11:ed:2a:
bb:67:05:ef:86:ca:ce:b1:84:26:de:63:88:79:86:
71:de:7d:dd:da:46:2d:6f:d9:0b:51:99:a1:2e:b0:
86:77:85:66:bc:c5:0c:d7:82:c2:46:db:45:9e:b8:
47:5f:1f:ad:ef:6f:f6:b2:db:11:27:58:b4:33:63:
21:7b:3b:2a:0b:cf:f5:32:22:49:31:54:04:8d:c9:
88:fe:16:88:24:25:c9:74:ba:8e:69:57:1a:4f:e9:
ac:9c:36:39:31:b0:6d:9c:c3:eb:d8:2c:91:86:fc:
ed:11:f9:3e:08:25:75:eb:46:c5:11:05:f8:8d:79:
8d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:E8:72:24:BB:5B:82:FA:C1:00:AF:AC:66:79:DC:4F:E5:4A:DF:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9c74a627-7577-4f11-89e0-589500621344/9fdf1578-2d9a-3898-b19c-fb3ca0e1cf8e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9c74a627-7577-4f11-89e0-589500621344/9c74a627-7577-4f11-89e0-589500621344.crl
X509v3 Authority Key Identifier:
keyid:D6:44:B8:32:E0:03:37:FD:A1:6A:62:DE:AE:42:CF:56:27:4A:A1:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9c74a627-7577-4f11-89e0-589500621344.cer
sbgp-ipAddrBlock: critical
IPv4:
23.133.156.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bc:23:49:f1:4d:7a:1a:cf:bb:6f:06:c2:04:32:31:f6:99:82:
ab:e2:85:e7:80:0e:7f:d2:8b:df:be:d4:e9:f6:f6:b8:6e:5d:
b0:14:25:73:10:b2:2e:a5:e5:a8:b4:f4:8d:ee:20:b1:0b:e8:
56:c9:e7:24:e9:ee:68:c0:6e:fc:a7:3e:13:18:58:b3:a8:ee:
43:35:fe:ed:b9:5c:81:c7:db:45:55:89:5c:27:a9:f2:44:e8:
15:f3:c9:91:04:15:a6:26:d0:58:b3:26:00:ee:43:ec:3c:23:
83:85:b9:4d:df:39:44:be:1e:dd:29:99:59:d8:d5:20:e0:be:
fb:50:ab:f4:5c:3d:7d:79:3d:33:23:09:c2:33:0d:77:b8:66:
28:12:84:d7:62:e9:82:20:d4:0c:d3:4d:9b:8c:90:59:de:b3:
cc:e4:1f:08:76:f1:5e:46:13:76:37:dd:d8:7e:f8:24:23:1d:
04:15:e8:30:eb:14:61:9a:ee:7a:cb:28:ad:86:44:19:8e:56:
02:91:9d:62:d4:5c:1c:39:f0:5f:fe:8c:bf:ff:18:f6:db:b6:
31:87:8a:32:7c:ac:af:ed:73:7f:6b:9c:7f:63:0e:42:80:81:
27:9c:fc:9c:1a:6b:73:01:f9:9b:59:ac:38:6d:ba:30:0d:e2:
4e:01:a4:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:09:33 2026 by rpki-client