
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ac6a63e7-061e-3c5b-b2a5-7be285060597.roa
File: ac6a63e7-061e-3c5b-b2a5-7be285060597.roa (raw, json)
Hash identifier: n26u+1Y48HlG1pPnXChjqntC6QWJZxRDFkhf6D5cgM0=
Subject key identifier: 59:34:81:29:B1:2D:93:2B:5F:90:FF:47:6A:C4:4C:D6:5C:28:9F:2B
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584F5E62E299F0248ADB5405FD60
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ac6a63e7-061e-3c5b-b2a5-7be285060597.roa
Signing time: Fri 02 Oct 2026 13:00:13 +0000
ROA not before: Fri 02 Oct 2026 13:00:13 +0000
ROA not after: Thu 31 Dec 2026 14:00:13 +0000
asID: 19905
IP address blocks: 173.23.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 14 Oct 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:5e:62:e2:99:f0:24:8a:db:54:05:fd:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Oct 2 13:00:13 2026 GMT
Not After : Dec 31 14:00:13 2026 GMT
Subject: CN=fd44288e-7a0e-4858-b423-facad4139d2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8e:36:f0:01:1f:48:d4:f9:9a:24:e1:e8:f2:
14:12:c6:11:1d:67:86:79:39:b7:81:af:53:c5:8b:
39:c8:c8:60:f9:d6:b5:04:ad:e9:36:c1:0b:ad:66:
36:6b:54:04:e9:b2:71:a0:ed:ce:a8:d8:f9:61:38:
29:61:b7:a7:20:d4:db:c1:0a:51:bf:c9:5d:9e:36:
44:90:e1:25:ab:4f:e1:2c:8f:6f:d1:5c:be:e9:fa:
f9:92:3c:31:62:a3:00:7c:b9:61:27:00:d4:a4:d5:
85:2a:d1:6d:e6:21:8b:cf:52:68:8b:e7:03:d1:3a:
90:96:69:c0:17:36:d6:fb:d6:cf:8b:d4:18:45:96:
c8:a5:b3:60:83:98:dc:99:66:3f:04:53:e7:bb:12:
e3:f0:b0:2a:12:af:90:6d:ab:03:61:ac:69:53:c9:
21:5d:ca:46:5b:86:59:02:e3:88:c1:8d:95:44:27:
71:54:45:72:12:fb:b5:c0:51:db:e6:a1:a0:34:65:
e0:b9:10:1f:c9:b1:4e:98:21:0a:88:09:1b:72:9b:
44:93:21:46:5c:8f:16:ef:a8:e8:a8:49:33:07:6f:
cf:2e:37:22:0b:e1:e7:e5:e4:93:6e:fb:f5:63:a6:
49:dd:50:e5:c1:f6:4a:dd:98:83:d6:81:51:94:38:
e5:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:34:81:29:B1:2D:93:2B:5F:90:FF:47:6A:C4:4C:D6:5C:28:9F:2B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ac6a63e7-061e-3c5b-b2a5-7be285060597.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv4:
173.23.111.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:36:24:44:01:33:c7:30:6e:79:30:af:6c:c8:a5:df:fd:36:
67:9f:70:c1:95:6b:e4:db:31:94:f2:be:f9:62:50:f4:10:50:
f4:f1:2a:a4:21:a1:ae:47:ad:e9:f7:a4:25:78:3a:a0:55:23:
d8:14:62:e2:2a:ea:63:4e:dc:ef:35:5d:cf:17:45:ee:66:2f:
70:82:24:fb:41:c2:30:e3:6b:92:3a:ee:a4:83:00:36:59:6f:
e5:2d:07:3c:bd:fe:7b:da:ac:ad:8f:0e:94:36:55:18:a9:f6:
ea:5f:c0:79:04:95:0a:36:96:7f:c0:fe:22:d1:72:cf:e0:82:
73:db:96:c1:31:12:7c:ea:82:8a:49:fc:19:4e:60:c6:a0:a3:
78:0e:9d:79:5c:9c:83:ac:3f:8f:0d:7b:cb:00:91:b0:06:8a:
be:a7:31:85:17:f9:a8:f7:c9:24:7b:a2:b9:54:30:a7:6b:05:
f1:62:3b:ef:cd:dc:e1:4f:bb:a0:cb:a0:e9:00:e8:31:59:92:
7b:c9:e5:bc:9d:fb:55:16:5f:85:60:99:e8:7e:66:7b:74:05:
dc:29:cb:40:ba:50:9c:66:f4:42:3d:6d:2c:db:a7:87:35:85:
a2:17:14:a1:3e:e3:71:b2:c3:13:3d:46:ba:a8:53:b6:d5:5b:
17:a4:84:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 21:57:59 2026 by rpki-client