
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8da1f778-aecd-4bb8-a545-b8cb4b18b3fe/5d90966f-a528-3b8b-8dc3-ede422faaf58.roa
File: 5d90966f-a528-3b8b-8dc3-ede422faaf58.roa (raw, json)
Hash identifier: ILxEGlJmF7caDKt5PM47uku5fHzUdOmpnb0610MSmKo=
Subject key identifier: 19:F5:3B:BE:9A:15:A2:29:36:73:27:45:9E:D4:8A:C1:29:D1:1C:58
Certificate issuer: /CN=8da1f778-aecd-4bb8-a545-b8cb4b18b3fe
Certificate serial: 010D0C9F4328584E253EFCC8291C1D67C4AE5A00
Authority key identifier: C2:CE:51:F7:CE:70:E9:93:AF:3A:AB:67:83:85:D5:7F:02:48:E9:CF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8da1f778-aecd-4bb8-a545-b8cb4b18b3fe.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8da1f778-aecd-4bb8-a545-b8cb4b18b3fe/5d90966f-a528-3b8b-8dc3-ede422faaf58.roa
Signing time: Fri 12 Jun 2026 09:00:11 +0000
ROA not before: Fri 12 Jun 2026 09:00:11 +0000
ROA not after: Thu 10 Sep 2026 09:00:11 +0000
asID: 397592
IP address blocks: 23.134.112.0/24 maxlen: 24
2620:13f:5000::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8da1f778-aecd-4bb8-a545-b8cb4b18b3fe/8da1f778-aecd-4bb8-a545-b8cb4b18b3fe.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8da1f778-aecd-4bb8-a545-b8cb4b18b3fe/8da1f778-aecd-4bb8-a545-b8cb4b18b3fe.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8da1f778-aecd-4bb8-a545-b8cb4b18b3fe.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:25:3e:fc:c8:29:1c:1d:67:c4:ae:5a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8da1f778-aecd-4bb8-a545-b8cb4b18b3fe
Validity
Not Before: Jun 12 09:00:11 2026 GMT
Not After : Sep 10 09:00:11 2026 GMT
Subject: CN=8df630cd-e6f8-4ea8-8463-8cfb41a15067
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:37:17:28:a5:d0:04:5c:fc:c9:08:31:f2:ae:
05:3f:57:af:ce:60:bb:66:91:89:74:ee:60:8a:e1:
91:4f:d3:09:b0:bd:2e:24:4b:45:01:e5:6f:a8:e9:
89:64:96:1a:3f:62:bb:46:fc:cb:b8:cb:c3:97:a0:
72:e0:d1:a3:2d:75:9f:a1:0e:89:65:0d:c3:5e:3e:
4b:bf:57:17:45:c5:d2:73:43:db:65:1f:48:81:41:
fe:c5:18:47:ce:63:2f:8f:a9:01:ee:34:5f:09:74:
84:98:09:a4:87:3a:17:43:95:0d:3e:8d:59:44:7e:
fd:e9:d4:12:91:b5:0c:b8:95:fb:b9:82:b7:40:97:
af:e9:5e:d8:61:ea:27:f5:a3:ec:98:4f:b2:f9:34:
55:66:5f:f2:6f:a1:ec:34:6a:1e:b2:99:ed:fb:55:
4f:e4:6f:0a:ab:e9:12:a5:0a:bb:fd:a0:63:1b:b2:
25:c9:e3:82:48:aa:a4:0c:f9:3e:be:aa:8b:4c:5d:
b8:8f:63:78:7b:6e:04:f2:2a:6e:d1:45:b8:17:64:
b8:3f:b2:27:91:ad:17:16:52:32:e6:9b:43:b6:71:
4b:81:26:93:14:5d:60:e2:9f:7d:8d:50:d1:3a:2f:
bc:65:d8:3a:75:72:09:78:07:f1:9a:02:38:71:6f:
02:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:F5:3B:BE:9A:15:A2:29:36:73:27:45:9E:D4:8A:C1:29:D1:1C:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8da1f778-aecd-4bb8-a545-b8cb4b18b3fe/5d90966f-a528-3b8b-8dc3-ede422faaf58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8da1f778-aecd-4bb8-a545-b8cb4b18b3fe/8da1f778-aecd-4bb8-a545-b8cb4b18b3fe.crl
X509v3 Authority Key Identifier:
keyid:C2:CE:51:F7:CE:70:E9:93:AF:3A:AB:67:83:85:D5:7F:02:48:E9:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8da1f778-aecd-4bb8-a545-b8cb4b18b3fe.cer
sbgp-ipAddrBlock: critical
IPv4:
23.134.112.0/24
IPv6:
2620:13f:5000::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:b6:25:e2:1e:ea:a3:c1:7c:69:af:0e:89:97:44:4a:7a:ae:
83:b2:11:76:d2:61:2b:c5:41:84:8b:03:75:e5:fb:c1:5b:22:
b3:84:f9:59:e9:f6:63:61:0c:4a:7b:45:9b:a4:0d:3a:ae:f3:
62:2a:5f:7d:ee:16:b0:ee:36:78:bb:ba:39:36:01:13:07:b2:
22:88:97:02:40:37:c6:ec:3f:b4:0c:ca:db:00:29:5d:bc:0d:
58:8d:e0:89:95:5d:88:03:b6:35:ab:0b:f6:dc:af:d5:42:48:
43:ca:f8:35:92:4b:7b:fa:44:69:0f:40:c7:6a:56:6e:90:d8:
e1:8c:bd:f6:5e:d2:1b:3f:2d:f0:81:36:03:35:a8:50:df:80:
dd:53:cf:fe:bb:64:d8:21:08:94:ba:ee:7a:83:72:98:4b:19:
3c:fa:8b:e4:63:26:23:dc:7f:28:42:28:f1:9a:66:74:40:8d:
a9:e1:91:ce:c9:91:f8:65:c1:4b:a3:f2:aa:3e:e5:d2:5f:23:
cc:91:36:34:40:b9:6c:e5:d9:d7:03:bd:6c:a1:ce:4f:b9:fe:
e6:eb:3a:5a:15:90:92:6b:9e:ed:8d:d8:a8:f9:2e:41:9f:fd:
01:ba:f3:e4:1f:6a:0e:08:8d:37:73:76:a1:34:cf:51:cc:eb:
9a:3e:7c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:08:06 2026 by rpki-client