
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/872f627e-5df9-3c1d-a906-1cd3fb10679b.roa
File: 872f627e-5df9-3c1d-a906-1cd3fb10679b.roa (raw, json)
Hash identifier: bXMNCRbkABeVgkVaU8qJIGgVLm5UlC2S2tpAp/SdZdQ=
Subject key identifier: 11:9C:24:A4:28:91:65:28:F4:4E:8C:E9:FE:75:91:A7:E8:53:E7:8C
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584D091262F51CCD067C05BD8200
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/872f627e-5df9-3c1d-a906-1cd3fb10679b.roa
Signing time: Mon 02 Mar 2026 14:00:41 +0000
ROA not before: Mon 02 Mar 2026 14:00:41 +0000
ROA not after: Sun 31 May 2026 13:00:41 +0000
asID: 19318
IP address blocks: 23.26.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 12 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:09:12:62:f5:1c:cd:06:7c:05:bd:82:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Mar 2 14:00:41 2026 GMT
Not After : May 31 13:00:41 2026 GMT
Subject: CN=02365bc7-39da-4083-be36-c627c010c9e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:31:53:ce:fe:e2:39:85:07:e3:45:d8:45:cd:
20:22:b4:76:00:86:c3:30:4c:ce:cb:bc:ae:74:7d:
ab:b0:b0:ff:f5:b5:70:9b:10:f7:5b:c2:ab:a3:55:
82:21:e0:09:75:b0:be:09:1e:83:e9:5a:f5:71:2f:
56:15:a5:14:1d:5f:5b:0b:5b:56:fe:15:eb:39:94:
c3:34:54:56:47:15:27:37:63:5a:dc:44:fd:72:0e:
d2:50:66:cb:e4:f2:86:04:ac:6f:09:e5:7d:02:b3:
9c:01:72:41:9b:77:61:51:e5:54:c8:0a:f3:31:12:
e9:be:5f:8f:01:a0:dc:51:f0:1f:ee:8b:d7:63:fa:
99:2a:a3:e1:a4:cb:3a:fc:1f:a8:f6:ad:c3:92:42:
cb:5e:1b:88:b3:e1:0a:16:c6:32:32:21:e3:27:02:
9c:c2:f9:20:31:e3:78:e4:7e:97:cf:e7:22:ca:0c:
1e:b6:a4:c8:04:7a:60:86:11:01:2f:04:74:6f:57:
95:ea:8a:4c:ba:8e:70:a9:cf:e7:b1:4f:f3:2d:8d:
a1:59:0b:74:fa:99:9a:7a:af:93:49:c8:82:03:3e:
8b:9d:57:28:aa:dd:13:73:2f:ad:f5:06:b1:ed:f4:
02:24:b4:1d:b1:20:28:ad:07:92:65:b7:67:ab:a3:
e8:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:9C:24:A4:28:91:65:28:F4:4E:8C:E9:FE:75:91:A7:E8:53:E7:8C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/872f627e-5df9-3c1d-a906-1cd3fb10679b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.201.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:a9:0a:34:ab:3f:e5:c6:00:fc:e9:76:3e:eb:7c:33:bc:ca:
f2:48:ac:fe:ba:b0:6e:88:62:6a:86:95:fc:4c:b2:6c:f8:c5:
20:1c:c2:cb:6b:ee:f2:14:ad:29:5e:a6:a1:5a:c1:31:f8:bf:
68:4d:a3:18:50:cd:61:a9:b3:cd:24:6c:b2:df:52:69:1c:be:
58:6a:82:1b:e2:7b:5a:6a:ad:2d:dc:75:c9:62:0d:eb:c0:94:
03:38:47:1b:c0:80:c4:c1:60:7a:20:36:eb:6e:1e:77:4f:f1:
ec:00:c0:ca:aa:78:62:61:24:b4:d8:dd:80:9f:6a:d6:39:91:
d7:41:af:af:65:dd:b5:b0:39:b6:9a:e4:1a:dd:82:61:a3:bd:
57:48:b1:66:ef:62:69:3d:25:ff:bf:75:9a:e4:eb:d7:a8:70:
a8:ee:08:3d:a0:3c:d2:26:b8:a6:1e:99:59:89:bc:2a:67:3e:
08:c4:68:6b:93:95:2f:8f:64:55:c8:4a:3b:21:4b:08:15:f0:
c3:02:fc:72:38:a9:df:63:bc:4c:8b:d0:f0:a4:e8:b5:42:60:
01:48:27:d8:48:cb:6e:a8:29:5e:e2:4a:0b:4c:97:dc:0c:2a:
8f:20:a5:c5:eb:c5:b6:39:6d:24:e2:dc:0f:ff:09:c0:af:5c:
d2:85:d8:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 10 11:23:50 2026 by rpki-client