
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/589a433f-d0bb-4ea9-85da-52c4d90317c6/d78e784b-8c0d-3569-95c4-94dd80ba0a0d.roa
File: d78e784b-8c0d-3569-95c4-94dd80ba0a0d.roa (raw, json)
Hash identifier: cL0EDH57NX7ymvaXIMC7Y79/YvuydpOGF77bR41ug8A=
Subject key identifier: 42:EE:A3:59:DD:3B:45:2E:59:BB:4A:DB:FC:1E:6B:30:DB:54:94:8A
Certificate issuer: /CN=589a433f-d0bb-4ea9-85da-52c4d90317c6
Certificate serial: 010D0C9F4328584CB3EC6582B216167861483500
Authority key identifier: 79:60:22:BE:33:4D:1A:6C:DB:E7:AD:84:0F:70:4A:B7:E9:87:6B:F3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/589a433f-d0bb-4ea9-85da-52c4d90317c6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/589a433f-d0bb-4ea9-85da-52c4d90317c6/d78e784b-8c0d-3569-95c4-94dd80ba0a0d.roa
Signing time: Sat 31 Jan 2026 02:00:32 +0000
ROA not before: Sat 31 Jan 2026 02:00:32 +0000
ROA not after: Fri 01 May 2026 01:00:32 +0000
asID: 401454
IP address blocks: 23.147.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/589a433f-d0bb-4ea9-85da-52c4d90317c6/589a433f-d0bb-4ea9-85da-52c4d90317c6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/589a433f-d0bb-4ea9-85da-52c4d90317c6/589a433f-d0bb-4ea9-85da-52c4d90317c6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/589a433f-d0bb-4ea9-85da-52c4d90317c6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:b3:ec:65:82:b2:16:16:78:61:48:35:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=589a433f-d0bb-4ea9-85da-52c4d90317c6
Validity
Not Before: Jan 31 02:00:32 2026 GMT
Not After : May 1 01:00:32 2026 GMT
Subject: CN=079efb91-3ce4-4639-95f0-ddbddcf52f1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8c:b0:2c:ba:b9:ae:06:aa:17:0d:e8:30:c6:
07:93:be:3a:a8:fe:fd:1d:75:25:c2:b3:97:c4:17:
de:c1:90:b8:2b:43:59:48:15:f2:b7:6b:b8:55:e8:
f0:3e:0f:6a:cf:e4:79:13:d1:60:64:68:dc:3a:9c:
69:e2:2d:0f:90:ec:a7:d1:9d:71:11:a0:f9:46:78:
8d:a8:f9:03:8c:aa:38:57:a9:88:cd:a3:a8:3f:79:
c2:11:12:0b:1c:53:f4:c5:fb:a7:c8:cb:92:1b:55:
81:91:32:5a:f3:cd:4d:1a:0b:81:d6:f7:cc:f3:2d:
b8:0f:c5:b5:67:d1:b6:ca:f5:86:f3:7d:1c:28:95:
84:c2:16:4e:5b:b6:fb:27:9e:9f:d9:e5:c2:ca:8e:
8e:90:2d:e0:7d:7e:50:d1:29:32:86:9b:06:4a:84:
09:30:83:5d:b2:5a:47:ea:52:62:7e:25:bc:c0:a5:
73:cd:39:ff:3f:5b:36:1a:3e:65:fd:99:bd:38:b5:
a6:d6:3e:da:5a:95:f5:11:93:b5:2c:40:a7:31:f8:
5e:56:99:1c:b2:04:06:68:7d:4a:ef:64:5b:36:c9:
f2:c7:f0:09:30:5c:ba:43:af:52:bf:e8:58:7f:30:
9d:b5:58:13:be:f6:31:c5:56:ed:7d:b7:a7:23:02:
f8:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:EE:A3:59:DD:3B:45:2E:59:BB:4A:DB:FC:1E:6B:30:DB:54:94:8A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/589a433f-d0bb-4ea9-85da-52c4d90317c6/d78e784b-8c0d-3569-95c4-94dd80ba0a0d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/589a433f-d0bb-4ea9-85da-52c4d90317c6/589a433f-d0bb-4ea9-85da-52c4d90317c6.crl
X509v3 Authority Key Identifier:
keyid:79:60:22:BE:33:4D:1A:6C:DB:E7:AD:84:0F:70:4A:B7:E9:87:6B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/589a433f-d0bb-4ea9-85da-52c4d90317c6.cer
sbgp-ipAddrBlock: critical
IPv4:
23.147.116.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:95:91:53:51:93:1f:85:5a:17:6f:53:63:74:c6:3e:24:cd:
1e:81:ac:2c:93:cb:a2:62:f6:e9:d9:d4:7d:21:9f:df:76:17:
91:e7:5e:34:13:50:a4:1c:2b:95:bd:ed:a4:1f:1c:1e:a4:40:
34:ed:36:32:ac:c0:e2:f2:dc:ba:72:52:5e:8a:70:98:f8:25:
85:26:8c:de:35:53:d4:70:66:c9:2b:ea:05:bd:6f:0d:40:60:
7a:c0:b3:aa:99:89:b5:d6:71:ad:ab:fa:a5:48:ac:76:f1:b7:
11:ae:cf:fc:c2:ab:c4:f1:1a:6d:b2:f6:f2:e3:18:f3:40:a3:
1c:f8:49:cb:09:83:89:c8:fd:0f:7d:69:a9:8c:d6:58:63:27:
b5:44:1b:26:2a:2a:5d:e1:73:77:aa:5e:6f:79:4c:53:18:09:
32:df:aa:4d:1f:61:12:de:e5:bf:72:6e:95:d8:9e:d3:a9:4d:
6a:53:14:09:ca:44:fd:d9:ae:f7:bd:12:21:a7:29:bb:1c:3d:
06:09:de:a1:a1:d3:5b:78:5e:2c:32:88:7e:1c:80:de:1e:94:
b2:f4:63:45:50:7d:0d:7b:6f:0a:f7:95:9d:67:7b:c3:89:12:
78:82:6d:b1:5e:32:d8:b4:ad:52:92:f6:c3:67:83:85:ef:ab:
f8:d4:d3:bc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyz7GWCshYWeGFINQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTg5YTQzM2YtZDBiYi00ZWE5LTg1ZGEtNTJjNGQ5MDMx
N2M2MB4XDTI2MDEzMTAyMDAzMloXDTI2MDUwMTAxMDAzMlowLzEtMCsGA1UEAxMk
MDc5ZWZiOTEtM2NlNC00NjM5LTk1ZjAtZGRiZGRjZjUyZjFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYywLLq5rgaqFw3oMMYHk746qP79HXUlwrOX
xBfewZC4K0NZSBXyt2u4VejwPg9qz+R5E9FgZGjcOpxp4i0PkOyn0Z1xEaD5RniN
qPkDjKo4V6mIzaOoP3nCERILHFP0xfunyMuSG1WBkTJa881NGguB1vfM8y24D8W1
Z9G2yvWG830cKJWEwhZOW7b7J56f2eXCyo6OkC3gfX5Q0SkyhpsGSoQJMINdslpH
6lJifiW8wKVzzTn/P1s2Gj5l/Zm9OLWm1j7aWpX1EZO1LECnMfheVpkcsgQGaH1K
72RbNsnyx/AJMFy6Q69Sv+hYfzCdtVgTvvYxxVbtfbenIwL4tQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFELuo1ndO0UuWbtK2/weazDbVJSKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81ODlh
NDMzZi1kMGJiLTRlYTktODVkYS01MmM0ZDkwMzE3YzYvZDc4ZTc4NGItOGMwZC0z
NTY5LTk1YzQtOTRkZDgwYmEwYTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNTg5YTQzM2YtZDBiYi00ZWE5LTg1
ZGEtNTJjNGQ5MDMxN2M2LzU4OWE0MzNmLWQwYmItNGVhOS04NWRhLTUyYzRkOTAz
MTdjNi5jcmwwHwYDVR0jBBgwFoAUeWAivjNNGmzb562ED3BKt+mHa/MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC81ODlhNDMzZi1kMGJiLTRlYTktODVkYS01MmM0
ZDkwMzE3YzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5N0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADuVkVNRkx+FWhdvU2N0xj4kzR6BrCyTy6Ji9unZ1H0hn992F5HnXjQT
UKQcK5W97aQfHB6kQDTtNjKswOLy3LpyUl6KcJj4JYUmjN41U9RwZskr6gW9bw1A
YHrAs6qZibXWca2r+qVIrHbxtxGuz/zCq8TxGm2y9vLjGPNAoxz4ScsJg4nI/Q99
aamM1lhjJ7VEGyYqKl3hc3eqXm95TFMYCTLfqk0fYRLe5b9ybpXYntOpTWpTFAnK
RP3Zrve9EiGnKbscPQYJ3qGh01t4XiwyiH4cgN4elLL0Y0VQfQ17bwr3lZ1ne8OJ
EniCbbFeMti0rVKS9sNng4Xvq/jU07w=
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:28:28 2026 by rpki-client