
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a4f6bcaf-c068-4737-bce4-15a489dc54f8/dbc777ba-e8bd-3885-8fcd-475e8dc50826.roa
File: dbc777ba-e8bd-3885-8fcd-475e8dc50826.roa (raw, json)
Hash identifier: wo72PyDnRDuwtEXkFtAfX1rOsTIjU7vXb/GEU37EObQ=
Subject key identifier: 6F:D4:A1:C9:3F:39:0B:9F:53:95:10:FE:09:E1:1B:B1:05:5F:4A:4D
Certificate issuer: /CN=a4f6bcaf-c068-4737-bce4-15a489dc54f8
Certificate serial: 010D0C9F4328584CAE5726D4D4A163E0423C6D80
Authority key identifier: F1:0C:5A:A4:B7:A3:6E:C7:94:72:C7:DE:23:19:28:8B:B1:93:B3:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a4f6bcaf-c068-4737-bce4-15a489dc54f8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a4f6bcaf-c068-4737-bce4-15a489dc54f8/dbc777ba-e8bd-3885-8fcd-475e8dc50826.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 53654
IP address blocks: 23.171.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a4f6bcaf-c068-4737-bce4-15a489dc54f8/a4f6bcaf-c068-4737-bce4-15a489dc54f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a4f6bcaf-c068-4737-bce4-15a489dc54f8/a4f6bcaf-c068-4737-bce4-15a489dc54f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a4f6bcaf-c068-4737-bce4-15a489dc54f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 19 Feb 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:57:26:d4:d4:a1:63:e0:42:3c:6d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4f6bcaf-c068-4737-bce4-15a489dc54f8
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=3157e856-e575-4056-b644-1acdd4848cf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b5:1a:09:bd:f8:ef:03:02:00:69:18:5b:e7:
ee:f9:e5:6a:d9:38:3e:24:f6:84:9a:ac:f4:59:6a:
36:a4:73:b0:bc:be:c2:47:61:c8:ea:cb:78:a3:b6:
f4:aa:b1:7f:1a:49:78:d4:13:53:ac:c7:a2:29:f0:
55:3f:99:3b:de:8f:4c:76:8f:25:90:1c:19:92:fa:
06:b8:11:1f:f2:73:05:d8:a8:4c:10:de:f5:f2:98:
70:aa:f0:24:fb:05:b8:8a:bc:37:ea:f8:4d:9a:93:
4e:d1:88:fd:32:d7:ff:bc:94:5f:20:eb:90:9f:23:
4c:ae:3f:85:03:f9:ee:85:e8:0a:bf:b7:58:d9:b6:
34:f9:f1:d4:92:5a:ff:db:f7:c0:f5:5a:4d:d4:93:
75:88:6d:11:e4:a8:26:4a:75:0c:66:33:7c:e5:7b:
29:26:99:13:46:2b:ab:b3:e1:b4:9c:a6:8c:1d:d2:
ca:4e:3e:c0:18:1b:cf:3d:e2:6d:6d:c8:ba:aa:09:
53:b5:9f:a9:1f:7e:b9:a3:0c:a8:92:92:7f:81:89:
42:54:70:85:9d:c7:c6:c9:56:1c:23:03:7d:85:ff:
53:4e:35:73:7a:7f:fb:ff:55:af:e3:db:4e:be:1d:
a1:1a:55:fd:c3:d8:ea:a8:d8:9e:81:c6:bb:bf:c2:
63:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:D4:A1:C9:3F:39:0B:9F:53:95:10:FE:09:E1:1B:B1:05:5F:4A:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a4f6bcaf-c068-4737-bce4-15a489dc54f8/dbc777ba-e8bd-3885-8fcd-475e8dc50826.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a4f6bcaf-c068-4737-bce4-15a489dc54f8/a4f6bcaf-c068-4737-bce4-15a489dc54f8.crl
X509v3 Authority Key Identifier:
keyid:F1:0C:5A:A4:B7:A3:6E:C7:94:72:C7:DE:23:19:28:8B:B1:93:B3:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a4f6bcaf-c068-4737-bce4-15a489dc54f8.cer
sbgp-ipAddrBlock: critical
IPv4:
23.171.24.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:e1:0e:ac:78:90:00:b5:64:b8:c6:e0:38:72:8c:04:f5:ea:
8f:41:9e:8a:63:91:ed:4c:2f:77:10:cc:1b:a7:38:b5:a9:59:
80:51:8d:6d:d3:16:b2:38:9a:15:19:ba:7f:ce:07:df:ae:92:
21:36:00:17:fc:73:98:35:a3:fe:4f:2e:a3:15:40:9b:80:ee:
03:a6:48:1d:37:61:32:05:27:58:d2:42:0c:3b:02:67:cc:88:
9f:e7:59:83:3f:89:cd:25:bc:47:18:5b:de:c1:9e:d5:da:a0:
ee:af:83:50:0a:36:75:9e:18:6a:a6:aa:bd:f1:e7:5e:93:0a:
9b:50:f1:d7:c1:0f:28:f9:a2:83:88:87:62:4a:34:68:44:bc:
6c:81:62:bc:e3:ae:9c:2e:f8:05:47:59:4e:4d:8f:ee:87:f2:
eb:b4:87:bf:2e:e9:8d:e0:80:b4:0a:02:a0:dd:f6:93:0f:68:
66:ea:9f:1b:bd:fb:1e:a7:ea:29:c4:b0:1c:69:70:f5:c2:03:
f1:98:18:54:62:f8:e2:5c:a7:0f:10:c1:6c:bd:64:33:94:e5:
a9:4a:63:f5:10:41:df:9b:20:61:af:20:45:e3:55:86:34:fa:
39:17:22:4f:dc:c4:0a:67:cd:b8:23:41:7d:88:4b:ab:65:05:
13:62:49:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 18 04:07:49 2026 by rpki-client