
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3fc97993-0267-3733-b482-07b3ea56b923.roa
File: 3fc97993-0267-3733-b482-07b3ea56b923.roa (raw, json)
Hash identifier: WkIFxtg8Ke4FrmBn2RQN0gjhB8PbRScLUifesd7258M=
Subject key identifier: 95:5D:CC:55:B0:A2:62:F0:B4:E6:49:5E:60:96:85:41:B9:81:C3:07
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584CE8F771172E990373D8B64700
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3fc97993-0267-3733-b482-07b3ea56b923.roa
Signing time: Thu 19 Feb 2026 02:00:32 +0000
ROA not before: Thu 19 Feb 2026 02:00:32 +0000
ROA not after: Wed 20 May 2026 01:00:32 +0000
asID: 16625
IP address blocks: 23.2.128.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:e8:f7:71:17:2e:99:03:73:d8:b6:47:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Feb 19 02:00:32 2026 GMT
Not After : May 20 01:00:32 2026 GMT
Subject: CN=d34b355a-9766-4e26-800e-187b0d18e0d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:2a:0f:ff:2d:3c:24:ab:26:23:4d:0a:64:3d:
4c:9e:52:00:25:e7:3c:42:8e:c6:11:9a:1e:69:54:
a2:2d:a9:bc:65:f3:50:09:68:48:4c:71:fb:1e:17:
0f:68:9b:95:de:22:7a:d4:c2:b0:b5:61:4d:0c:bc:
a8:2d:0b:46:e0:6f:1f:a0:f9:66:b6:1d:04:d2:fe:
d0:67:f4:cc:99:a9:f8:cf:84:da:2b:40:b2:ea:2a:
24:64:b7:ed:d2:f7:30:94:82:92:e3:64:8e:5b:c7:
82:49:c0:45:65:81:26:9c:25:f0:b7:0a:6b:06:b8:
6f:d5:c2:46:2e:5b:54:12:fd:c4:8d:b2:04:99:65:
dd:89:8b:5f:eb:4e:f6:4b:3b:b3:ad:5d:65:69:b9:
da:51:38:b3:d5:ad:43:b3:41:2d:8f:df:67:fe:26:
60:c7:d4:e7:41:40:4e:a0:3f:21:dd:d9:ac:e4:88:
e1:b8:26:57:e5:73:d9:c3:1f:90:0d:01:df:f6:48:
a5:61:ab:e6:46:0a:35:87:e0:d2:30:6a:05:a0:9c:
40:d8:97:f6:7f:d8:a3:55:83:4d:32:d1:f9:58:ff:
92:36:66:91:eb:ab:a7:47:39:38:f2:ad:3e:87:1f:
30:3f:62:4a:89:4d:3f:88:0d:a9:fc:5f:20:70:ce:
20:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:5D:CC:55:B0:A2:62:F0:B4:E6:49:5E:60:96:85:41:B9:81:C3:07
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3fc97993-0267-3733-b482-07b3ea56b923.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.2.128.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:62:9a:f2:40:2b:87:1b:d7:e9:c0:21:0f:8f:6f:57:e6:90:
20:15:5c:26:af:c2:d6:75:d1:4d:65:db:56:46:04:2a:f9:f7:
e6:db:3a:32:58:93:0a:c6:67:8f:df:4b:3c:62:9f:92:28:ee:
7d:b8:3e:45:22:8b:f1:62:75:b5:9b:5f:71:62:da:7b:c4:77:
7d:c6:0d:69:de:51:e3:8f:3f:ba:6a:2d:d4:1a:e3:21:1d:06:
4c:16:56:c9:fb:0a:b4:13:9d:67:3f:a7:5b:ad:e9:27:b0:d5:
58:05:05:76:5d:c9:14:52:ab:bf:82:f0:8b:4c:6e:94:82:51:
5b:3f:dd:a3:e6:1b:fd:13:9b:3a:26:1a:c7:3b:63:e7:4a:7d:
d9:40:3c:64:02:aa:b8:f6:cd:29:da:54:7d:35:89:ca:ba:8c:
74:82:73:91:24:ae:96:89:24:4b:02:26:39:73:0b:94:95:c7:
61:af:e3:cd:cb:1f:0f:c8:b7:e7:65:7f:38:b8:b0:7b:64:bb:
c3:1f:03:42:0a:5d:14:d1:81:12:4a:55:51:de:86:0f:d6:92:
b5:61:95:84:54:a5:30:3f:e0:90:a2:9b:3c:08:66:ea:b5:a4:
83:d8:fd:29:3e:36:ef:83:98:92:9c:ed:a0:aa:41:a6:93:d3:
47:00:d2:a6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzo93EXLpkDc9i2RwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI2MDIxOTAyMDAzMloXDTI2MDUyMDAxMDAzMlowLzEtMCsGA1UEAxMk
ZDM0YjM1NWEtOTc2Ni00ZTI2LTgwMGUtMTg3YjBkMThlMGQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyoP/y08JKsmI00KZD1MnlIAJec8Qo7GEZoe
aVSiLam8ZfNQCWhITHH7HhcPaJuV3iJ61MKwtWFNDLyoLQtG4G8foPlmth0E0v7Q
Z/TMman4z4TaK0Cy6iokZLft0vcwlIKS42SOW8eCScBFZYEmnCXwtwprBrhv1cJG
LltUEv3EjbIEmWXdiYtf6072SzuzrV1labnaUTiz1a1Ds0Etj99n/iZgx9TnQUBO
oD8h3dms5IjhuCZX5XPZwx+QDQHf9kilYavmRgo1h+DSMGoFoJxA2Jf2f9ijVYNN
MtH5WP+SNmaR66unRzk48q0+hx8wP2JKiU0/iA2p/F8gcM4gvQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJVdzFWwomLwtOZJXmCWhUG5gcMHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2ZjOTc5OTMtMDI2Ny0z
NzMzLWI0ODItMDdiM2VhNTZiOTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFFwKAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGpimvJAK4cb1+nAIQ+Pb1fmkCAVXCavwtZ10U1l21ZGBCr59+bbOjJY
kwrGZ4/fSzxin5Io7n24PkUii/FidbWbX3Fi2nvEd33GDWneUeOPP7pqLdQa4yEd
BkwWVsn7CrQTnWc/p1ut6Sew1VgFBXZdyRRSq7+C8ItMbpSCUVs/3aPmG/0Tmzom
Gsc7Y+dKfdlAPGQCqrj2zSnaVH01icq6jHSCc5EkrpaJJEsCJjlzC5SVx2Gv483L
Hw/It+dlfzi4sHtku8MfA0IKXRTRgRJKVVHehg/WkrVhlYRUpTA/4JCimzwIZuq1
pIPY/Sk+Nu+DmJKc7aCqQaaT00cA0qY=
-----END CERTIFICATE-----
Generated at Mon Mar 2 21:55:39 2026 by rpki-client