
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/07f8c0d9-a730-33db-879d-4b7255a22c83.roa
File: 07f8c0d9-a730-33db-879d-4b7255a22c83.roa (raw, json)
Hash identifier: 4SYAcuML1R9XDmv86CByY8JZYl94AAVQ8C1iyHM5FA4=
Subject key identifier: C2:D3:9A:5B:65:77:00:FF:CC:8D:26:BE:D4:7B:81:99:B3:99:2C:2A
Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial: 010D0C9F4328584CAE570826D9914F6BF73A7E00
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/07f8c0d9-a730-33db-879d-4b7255a22c83.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 16509
IP address blocks: 23.239.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:57:08:26:d9:91:4f:6b:f7:3a:7e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=bed4d3a3-ff3f-45eb-87c6-500139745328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:23:06:92:0f:ce:6f:fe:75:f0:ea:c8:a6:09:
e2:2f:29:c5:be:c1:29:b8:cd:31:8c:59:d9:8e:f2:
c3:16:b2:a6:5d:48:c0:70:0a:a8:48:bf:d2:5b:b5:
08:c8:6e:e7:7c:7a:3b:b5:02:84:01:2b:2f:b0:61:
e7:b0:c7:c4:98:4e:8c:29:b7:5b:ac:47:f2:50:70:
4a:ed:0e:df:87:d5:38:95:2d:df:67:a4:03:e1:7c:
3e:56:ac:63:6a:f8:8d:ce:b8:37:9e:e8:98:17:38:
a6:3c:7f:00:d3:30:c3:66:26:ff:95:b4:ef:08:7e:
92:5d:d8:b7:8a:9c:bc:71:f5:36:db:95:08:74:5f:
77:ee:10:36:45:1d:a2:a3:31:2a:a4:8b:01:aa:56:
a3:5a:d8:4f:08:29:23:1d:ba:ae:52:56:c1:3a:3e:
da:a9:a5:41:a5:52:95:b8:b2:5f:de:1e:a2:2b:b3:
07:32:fd:79:4c:9e:75:5d:12:a5:5c:af:1c:c8:e5:
13:38:40:ed:99:99:69:c4:50:85:a8:ca:68:94:24:
3b:97:30:78:15:06:d2:6e:b6:c6:d3:d0:ae:e6:78:
0c:61:21:52:b9:5e:d5:67:f1:d4:5c:21:03:1f:c8:
b1:e2:56:42:7a:26:ca:46:71:d7:18:66:5a:6c:69:
62:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:D3:9A:5B:65:77:00:FF:CC:8D:26:BE:D4:7B:81:99:B3:99:2C:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/07f8c0d9-a730-33db-879d-4b7255a22c83.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
X509v3 Authority Key Identifier:
keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
sbgp-ipAddrBlock: critical
IPv4:
23.239.241.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:8a:27:a7:45:ab:cf:a3:7d:79:ea:31:14:b0:84:2f:98:e8:
f3:1b:22:1f:99:e5:ce:f9:55:e0:e5:d9:81:9e:3d:93:d1:0a:
fa:d2:b9:12:01:07:2c:2e:4b:df:42:f9:c5:13:df:d7:15:9d:
08:b3:91:a4:c3:f8:0b:67:ef:48:91:24:6d:82:b8:8f:30:48:
32:90:a5:e6:6b:34:b7:0c:82:91:b4:e0:09:3c:02:f5:dc:6a:
15:b4:5c:6c:e3:a4:81:54:71:e1:bd:78:b5:9a:eb:d3:4d:16:
0d:c2:67:b7:1e:4f:e9:f9:2d:73:c5:50:1f:b5:5b:34:31:5a:
de:a4:c6:49:7b:37:66:94:32:10:30:6f:09:bf:19:ed:bc:bd:
74:ef:33:02:35:58:92:67:54:34:fd:33:fe:f5:62:05:1a:e3:
bb:a4:93:9a:87:ac:37:d0:8c:58:74:1d:0a:35:73:72:91:66:
30:ac:8b:8b:4e:3d:97:45:10:94:5d:8d:27:97:b7:92:b3:ce:
01:e5:27:8c:c8:7a:8c:8b:ee:af:98:a0:e7:0f:e1:94:5a:dc:
b7:f7:d5:10:f4:4d:c6:76:37:6e:52:ae:62:74:33:bd:b9:64:
65:c8:b4:18:60:07:41:28:72:3b:80:34:25:6e:dc:f6:49:8f:
81:59:4b:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:39:10 2026 by rpki-client