
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6e4a0a5e-aa44-4dce-87f2-8e9cedff1234/0cd96795-711f-3224-bca1-c93721dc2050.roa
File: 0cd96795-711f-3224-bca1-c93721dc2050.roa (raw, json)
Hash identifier: Fcy9Zyr5cTevJoGR8oRYXQ685yhNLyc7T7SWGW6pr8E=
Subject key identifier: EA:30:3A:B9:C1:8F:34:B0:E6:47:54:22:D9:D8:AE:0A:49:16:E3:82
Certificate issuer: /CN=6e4a0a5e-aa44-4dce-87f2-8e9cedff1234
Certificate serial: 010D0C9F4328584CFE86A8AF9A58A98C654A8480
Authority key identifier: A4:40:0E:6F:80:B5:29:35:7D:D9:F8:B1:74:6E:D8:28:BD:D0:68:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6e4a0a5e-aa44-4dce-87f2-8e9cedff1234.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6e4a0a5e-aa44-4dce-87f2-8e9cedff1234/0cd96795-711f-3224-bca1-c93721dc2050.roa
Signing time: Thu 26 Feb 2026 19:21:17 +0000
ROA not before: Thu 26 Feb 2026 19:21:17 +0000
ROA not after: Wed 27 May 2026 18:21:17 +0000
asID: 53359
IP address blocks: 23.152.132.0/24 maxlen: 24
2602:f446::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6e4a0a5e-aa44-4dce-87f2-8e9cedff1234/6e4a0a5e-aa44-4dce-87f2-8e9cedff1234.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6e4a0a5e-aa44-4dce-87f2-8e9cedff1234/6e4a0a5e-aa44-4dce-87f2-8e9cedff1234.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6e4a0a5e-aa44-4dce-87f2-8e9cedff1234.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:fe:86:a8:af:9a:58:a9:8c:65:4a:84:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e4a0a5e-aa44-4dce-87f2-8e9cedff1234
Validity
Not Before: Feb 26 19:21:17 2026 GMT
Not After : May 27 18:21:17 2026 GMT
Subject: CN=565df467-9e60-4452-86fc-121e1e170bd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:3e:af:00:c1:14:9f:db:55:32:23:3f:78:56:
8a:c8:9e:64:ea:66:d2:ce:d7:e2:72:f1:b4:9f:2c:
db:4a:d1:1c:1b:73:79:35:fa:eb:21:0a:f0:6d:a0:
24:1e:ea:7c:fb:89:a8:e4:ae:c7:81:a8:ed:ad:b2:
84:23:35:a9:84:d0:9d:c7:39:62:ec:0a:7f:fd:c9:
e2:0f:b6:24:50:78:c8:d3:3c:7f:8f:22:22:40:60:
07:18:fc:e5:86:d5:66:45:31:28:0f:e4:f7:5f:8e:
12:75:e5:3a:05:70:51:bd:d7:c8:7b:6b:70:3d:22:
b5:c0:e4:18:c2:15:87:c1:a5:a0:05:18:17:9f:08:
cd:e9:55:8d:b5:1c:90:66:1e:e1:19:6b:24:ec:1e:
a8:3f:87:fd:87:57:a6:44:e6:3a:e2:1b:02:17:c0:
ea:7d:ce:f7:98:ff:ad:c1:58:4e:f0:a7:35:fa:d0:
07:5e:f5:cb:9d:66:d1:cd:93:58:cd:7c:65:6a:e9:
d9:8c:13:7b:45:a6:6b:d4:96:13:0e:62:23:0a:51:
da:ae:e1:a2:bc:a1:c2:58:75:93:06:91:0c:7a:ca:
45:5e:66:f7:e1:98:5e:12:14:b4:78:5c:76:b8:31:
d6:24:09:0a:a4:69:25:31:18:97:32:d5:74:42:8d:
a3:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:30:3A:B9:C1:8F:34:B0:E6:47:54:22:D9:D8:AE:0A:49:16:E3:82
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6e4a0a5e-aa44-4dce-87f2-8e9cedff1234/0cd96795-711f-3224-bca1-c93721dc2050.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6e4a0a5e-aa44-4dce-87f2-8e9cedff1234/6e4a0a5e-aa44-4dce-87f2-8e9cedff1234.crl
X509v3 Authority Key Identifier:
keyid:A4:40:0E:6F:80:B5:29:35:7D:D9:F8:B1:74:6E:D8:28:BD:D0:68:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6e4a0a5e-aa44-4dce-87f2-8e9cedff1234.cer
sbgp-ipAddrBlock: critical
IPv4:
23.152.132.0/24
IPv6:
2602:f446::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:53:e4:de:5f:87:06:70:fb:3a:4a:5c:77:29:15:42:01:2a:
a9:8c:4b:19:50:9f:d2:08:b7:a4:ef:91:9f:d7:e8:e8:a5:4e:
ff:66:61:48:19:ab:db:0e:34:7e:5e:ee:85:3e:42:58:f9:82:
19:0b:66:a9:37:a6:04:53:3c:f0:aa:67:44:64:72:8a:2e:71:
f1:bf:15:c4:20:ba:01:8e:61:d4:96:41:3a:45:a2:1f:f4:db:
38:4b:d2:d5:d7:44:b2:f0:06:97:24:cd:0e:96:3d:e6:9c:6c:
70:a5:00:a5:8e:cc:7a:db:7c:0f:59:63:2a:b3:08:3c:08:0a:
e4:bc:8a:92:9c:0d:50:38:9b:ca:b4:26:95:3b:37:f8:ac:d1:
8f:ed:a9:96:14:28:06:f3:93:b5:1f:93:d4:5d:ef:40:23:c5:
ee:f0:24:b3:3e:59:fd:2d:6c:a1:cc:57:e8:1c:39:2c:90:d5:
3b:1d:da:1c:6b:75:d0:38:ca:57:c6:c0:dc:ae:3a:a4:83:8d:
93:77:59:61:d0:29:b5:06:47:b8:15:90:c8:68:5c:64:20:80:
06:1c:35:bc:9b:99:ed:d5:1c:ef:a6:34:df:a6:65:80:8a:e8:
b8:d6:57:6e:e6:0d:39:2c:8c:18:48:6d:3c:23:64:a3:aa:1d:
60:e9:cf:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:11:44 2026 by rpki-client