
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4f9daf15-de63-453b-a389-ff5afab0a952/01073802-359f-3fcc-8cd9-7191adb0b622.roa
File: 01073802-359f-3fcc-8cd9-7191adb0b622.roa (raw, json)
Hash identifier: hu4aUJXPKE/kH+POm73gaeVLRpMBvE+9sBx7YWIQ9is=
Subject key identifier: A3:F1:47:E2:7C:AE:CF:9A:D7:95:EC:08:9E:54:3B:FA:C8:B9:DA:CA
Certificate issuer: /CN=4f9daf15-de63-453b-a389-ff5afab0a952
Certificate serial: 010D0C9F4328584EDC91FA545E6135028472EA40
Authority key identifier: C7:1B:05:E9:DC:84:27:A2:75:BC:F9:74:12:C8:06:6B:58:BB:B2:1A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4f9daf15-de63-453b-a389-ff5afab0a952.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4f9daf15-de63-453b-a389-ff5afab0a952/01073802-359f-3fcc-8cd9-7191adb0b622.roa
Signing time: Mon 17 Aug 2026 01:00:12 +0000
ROA not before: Mon 17 Aug 2026 01:00:12 +0000
ROA not after: Sun 15 Nov 2026 02:00:12 +0000
asID: 401005
IP address blocks: 23.156.88.0/24 maxlen: 24
2602:fa79::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4f9daf15-de63-453b-a389-ff5afab0a952/4f9daf15-de63-453b-a389-ff5afab0a952.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4f9daf15-de63-453b-a389-ff5afab0a952/4f9daf15-de63-453b-a389-ff5afab0a952.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4f9daf15-de63-453b-a389-ff5afab0a952.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 26 Aug 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:dc:91:fa:54:5e:61:35:02:84:72:ea:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9daf15-de63-453b-a389-ff5afab0a952
Validity
Not Before: Aug 17 01:00:12 2026 GMT
Not After : Nov 15 02:00:12 2026 GMT
Subject: CN=b5b0eb96-e673-4c71-851b-b1dd7ec21897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0f:7f:c6:3c:44:05:51:a1:74:0f:cc:91:1f:
4d:6d:e0:7a:d8:6d:04:dc:6a:b7:3d:f0:15:2b:1b:
78:bc:bf:3b:8e:42:9b:53:c5:0b:c6:18:50:cc:51:
40:70:c4:6e:ae:94:a3:70:87:44:a8:2a:2b:7c:9c:
70:28:38:c4:ff:ee:e0:17:2a:ae:9c:1e:11:0f:01:
cd:96:5d:18:5c:8e:00:73:16:8c:ac:3e:bf:ac:d3:
fb:66:65:b3:cf:11:4f:9e:e4:98:96:96:ff:f6:ac:
2b:45:8c:e8:f3:2b:8f:83:f9:2a:13:6d:85:82:5d:
a1:6f:be:d7:8b:d4:5a:33:5c:48:85:0c:93:c2:dc:
f9:da:b8:84:02:39:3d:bd:30:fa:61:66:64:45:a2:
ec:26:e7:67:98:00:43:de:08:e3:16:68:ca:2c:ef:
92:27:25:ce:1d:e7:c1:1f:aa:06:a6:3b:e9:2a:71:
3b:49:8b:90:44:d3:80:da:4d:f5:2d:5c:e1:95:91:
6d:51:8d:85:15:04:4e:83:c8:02:5c:05:39:92:f4:
e3:44:11:cb:1c:86:cc:47:41:16:87:26:4a:9f:2a:
94:25:21:5e:b1:53:c4:f3:25:e4:0d:21:f0:c5:96:
5c:13:8e:39:14:74:9e:06:b6:3c:48:2a:01:52:83:
9f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:F1:47:E2:7C:AE:CF:9A:D7:95:EC:08:9E:54:3B:FA:C8:B9:DA:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4f9daf15-de63-453b-a389-ff5afab0a952/01073802-359f-3fcc-8cd9-7191adb0b622.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4f9daf15-de63-453b-a389-ff5afab0a952/4f9daf15-de63-453b-a389-ff5afab0a952.crl
X509v3 Authority Key Identifier:
keyid:C7:1B:05:E9:DC:84:27:A2:75:BC:F9:74:12:C8:06:6B:58:BB:B2:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4f9daf15-de63-453b-a389-ff5afab0a952.cer
sbgp-ipAddrBlock: critical
IPv4:
23.156.88.0/24
IPv6:
2602:fa79::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:b5:56:e2:56:55:9d:be:4d:12:1c:7b:10:74:ff:7b:d1:73:
7b:7a:57:5b:dc:56:ec:84:41:0f:91:87:18:11:89:6a:1a:b3:
f5:86:77:e0:b0:ff:67:77:79:25:e7:47:6a:b2:0a:39:f9:9d:
74:ba:56:26:e6:06:88:3a:1d:d3:58:cf:ff:3d:27:18:7f:55:
20:5c:f2:29:fe:d7:3e:50:5b:b1:ab:45:6d:d2:91:89:6e:78:
6c:49:6f:a3:fd:60:1b:07:2c:a3:f9:f8:d9:84:f6:29:aa:dd:
31:d4:37:20:9a:92:ab:fd:1d:57:19:2f:5e:5a:f1:83:8f:f1:
f5:a3:03:99:8b:cc:15:dd:2a:72:5b:58:b1:f5:b7:6c:79:a4:
72:67:20:e3:60:05:f9:e7:32:2d:70:51:19:45:b5:54:71:1d:
42:0d:0b:22:be:19:27:24:77:7d:55:9c:4d:14:ff:79:98:fa:
bc:a8:90:ce:4f:d8:0b:21:d0:65:5c:bc:a1:9a:4d:34:4f:b5:
a3:1f:d7:19:68:ca:dd:3c:59:af:aa:f5:6f:8a:78:31:c4:c7:
dd:53:6a:28:ef:b8:1b:35:1a:6f:ab:46:1a:0d:d7:ae:6c:81:
fd:07:3e:44:d5:5e:f7:c3:28:fd:68:b7:53:3d:af:33:93:44:
70:af:19:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 04:22:11 2026 by rpki-client