
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/5f538c17-1400-3f27-809c-12dd726dc36b.roa
File: 5f538c17-1400-3f27-809c-12dd726dc36b.roa (raw, json)
Hash identifier: rZ268+dvXcCN9DpSyvOvgPw2LvtibBislgxq5Yo9g64=
Subject key identifier: B1:AE:F5:88:85:4B:14:4E:10:BE:D3:08:2F:BC:F1:A0:6E:42:B2:49
Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial: 010D0C9F4328584EF181FE155E8E0E6C64C25880
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/5f538c17-1400-3f27-809c-12dd726dc36b.roa
Signing time: Mon 24 Aug 2026 13:00:12 +0000
ROA not before: Mon 24 Aug 2026 13:00:12 +0000
ROA not after: Sun 22 Nov 2026 14:00:12 +0000
asID: 209
IP address blocks: 192.216.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 30 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:f1:81:fe:15:5e:8e:0e:6c:64:c2:58:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Validity
Not Before: Aug 24 13:00:12 2026 GMT
Not After : Nov 22 14:00:12 2026 GMT
Subject: CN=d48ee987-b103-40e8-aa56-a35bf3c25751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f2:16:4e:0a:02:3c:52:8e:80:cd:84:5d:2b:
42:a9:97:36:8e:d9:20:bf:4c:35:62:03:39:61:bd:
cf:14:b3:80:66:d0:8c:b6:a3:ba:2d:78:55:a4:62:
eb:03:b6:c6:ae:07:0f:2d:d8:d9:63:62:58:41:8f:
9e:a2:e1:80:6b:80:7f:41:cd:86:ce:35:ff:d6:45:
66:6a:e2:b4:57:48:96:2c:9e:4c:c3:1b:a8:1b:37:
32:b3:20:6b:18:6d:f2:17:b3:92:18:ca:fc:46:e4:
b3:92:31:8b:35:37:c9:ee:52:d8:d9:27:aa:19:41:
8a:47:c6:15:6f:29:e7:36:31:12:5f:33:84:8c:29:
ef:5b:d6:11:fa:1f:80:da:59:ad:43:72:a4:47:96:
05:49:83:f5:0a:a6:b9:60:c1:6d:e4:3e:1b:b0:fc:
00:8f:ba:29:28:a9:b0:b4:48:5b:2e:90:90:b3:4b:
af:14:ee:16:0f:7a:09:33:b8:d7:4e:fc:0b:6f:a9:
dd:56:8f:31:a9:97:46:94:cb:79:e1:d2:07:fd:95:
ba:09:9e:a8:71:c9:cc:12:f8:6f:f5:77:4a:77:fe:
14:46:c1:19:a2:3a:ab:3b:47:d9:c1:86:72:c7:49:
8f:26:84:e7:2c:79:b9:18:e2:18:ca:79:94:2d:46:
da:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:AE:F5:88:85:4B:14:4E:10:BE:D3:08:2F:BC:F1:A0:6E:42:B2:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/5f538c17-1400-3f27-809c-12dd726dc36b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
X509v3 Authority Key Identifier:
keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
sbgp-ipAddrBlock: critical
IPv4:
192.216.121.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:cc:d0:68:e8:ca:8d:84:75:49:91:01:6d:10:68:fa:99:3c:
df:4d:fb:19:d3:15:f2:57:74:f6:40:ea:c0:bd:f4:cc:00:27:
30:b2:74:dd:d1:ba:b3:4c:da:6c:a9:b0:28:2a:35:9b:48:82:
2e:d2:81:73:a2:58:c4:b4:dc:05:4d:5d:42:8a:c1:5d:cf:a7:
fb:fe:53:57:de:31:f1:6e:c0:03:6c:b2:2b:5e:92:a9:d1:93:
d3:f4:8e:df:c9:29:1b:14:e5:1e:18:8f:aa:40:7f:63:5a:bb:
6d:fd:7c:71:99:b3:4e:34:9b:54:42:8a:70:fd:42:3c:35:e6:
1b:88:dd:ce:9e:d1:54:57:0e:92:96:4a:f2:68:1d:8f:0f:a3:
c9:03:3e:e9:a3:9b:34:85:f0:8f:58:6d:40:c4:cc:c3:2e:7b:
fd:bb:9d:fd:a2:4d:ab:f7:65:1c:1b:0e:ca:8d:b5:33:8b:c3:
18:0a:5d:68:b4:9c:b7:3f:6f:ca:49:35:ab:f2:f4:02:1e:3c:
dc:22:b0:db:cb:57:6c:8c:72:4f:ed:67:a4:e2:e1:1e:4f:95:
ec:a4:ba:a6:41:0d:17:10:6f:a4:b4:e0:3b:4c:01:13:06:3e:
7f:74:73:54:c3:09:2c:18:eb:9a:78:ca:be:8b:9b:3b:5f:c3:
08:44:ad:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 05:25:00 2026 by rpki-client