
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/14d13ebc-3e62-32c4-9e5a-7a9c1fb9560b.roa
File: 14d13ebc-3e62-32c4-9e5a-7a9c1fb9560b.roa (raw, json)
Hash identifier: 0Q9dfiFupYjp7/NJB+/iRN6ufZaFYS9CtKCRMBLkcus=
Subject key identifier: D8:D2:1A:FA:DA:FF:09:5D:BE:B1:B1:7A:44:FC:BD:35:A8:0F:85:34
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584CDB022C3A38887D1FDD486D60
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/14d13ebc-3e62-32c4-9e5a-7a9c1fb9560b.roa
Signing time: Sat 14 Feb 2026 02:00:32 +0000
ROA not before: Sat 14 Feb 2026 02:00:32 +0000
ROA not after: Fri 15 May 2026 01:00:32 +0000
asID: 16625
IP address blocks: 23.42.240.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:db:02:2c:3a:38:88:7d:1f:dd:48:6d:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 14 02:00:32 2026 GMT
Not After : May 15 01:00:32 2026 GMT
Subject: CN=2e8429ed-14dc-434a-a3a7-6637ccc095b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:01:d2:67:e5:1f:55:90:39:da:1e:6d:39:75:
a5:0c:51:1f:aa:4c:c3:b4:89:9d:c1:0a:14:3a:37:
7c:20:ed:2a:85:fb:84:ce:f5:68:4b:7d:f2:ba:fc:
69:0c:46:a8:d9:77:43:10:c1:36:20:e4:db:15:0b:
3f:0b:64:15:eb:ef:22:e4:9f:d8:07:6b:af:25:79:
89:24:86:62:4d:8e:1f:fb:a8:01:e2:06:09:45:97:
12:34:a2:6e:30:f8:80:17:dd:ce:97:8a:28:97:c1:
b9:a0:5f:c1:cc:2e:a3:8e:f9:bc:e7:99:5c:97:14:
10:8a:bd:d4:34:fa:c4:c1:9c:3e:49:ab:21:46:3f:
60:a3:c5:3a:89:3d:d7:8a:47:6f:ac:7c:af:3a:b5:
27:ee:47:23:bf:01:fc:4b:e3:91:95:f0:69:b8:85:
be:c5:40:85:d5:80:9d:54:eb:48:50:b0:cf:b2:18:
34:ba:4c:19:22:91:5e:07:12:c5:40:42:c1:e3:a7:
b8:da:d7:9d:8a:0f:9c:af:75:7d:d9:b2:97:c0:74:
83:6f:bf:b0:7f:61:0b:34:84:d4:27:e1:18:2e:40:
c6:66:e2:5a:ed:82:7b:85:44:f6:9b:63:6a:95:20:
b1:be:85:a4:74:8c:d1:15:84:0d:74:72:f2:46:45:
6a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:D2:1A:FA:DA:FF:09:5D:BE:B1:B1:7A:44:FC:BD:35:A8:0F:85:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/14d13ebc-3e62-32c4-9e5a-7a9c1fb9560b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.42.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:01:4f:81:21:72:36:23:5c:87:fa:eb:50:a5:a0:fc:be:3f:
07:60:f2:e1:e9:91:49:64:09:f8:11:36:78:0e:02:a4:37:0b:
4f:cc:32:3a:f1:12:3c:b1:ee:fe:73:b6:5a:55:83:9b:0e:0e:
e8:bb:fb:89:f2:83:e7:85:17:cc:11:65:7b:0c:14:7a:3d:4f:
61:12:13:77:cd:4a:74:b9:24:ea:79:d5:5e:bc:3f:02:8d:f3:
30:af:36:7a:9d:56:7d:c8:70:57:39:a6:17:d0:26:1c:04:9e:
a6:43:30:5f:49:08:c4:31:5f:67:18:7b:23:49:99:74:9f:56:
ee:b7:09:3a:fe:0f:3f:9a:68:f3:81:54:8d:ff:21:c0:9d:5c:
f8:76:0f:73:4a:ad:56:bc:c8:be:e7:17:fa:e6:28:de:94:be:
6a:b6:9e:80:81:71:58:91:51:51:3c:aa:51:23:ac:76:45:34:
31:65:04:e3:07:21:33:35:a6:d6:d0:f5:0b:a1:a8:69:8d:de:
30:40:e4:9a:43:c6:0b:33:6b:78:16:61:67:63:c9:85:57:11:
6d:d3:ac:ba:94:ed:f2:9d:83:bf:9c:33:30:c3:fd:fd:ae:70:
85:fb:cf:d0:2c:5c:e3:5d:20:a1:c8:ec:6d:20:cd:f7:b9:45:
33:85:86:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:37:55 2026 by rpki-client