
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24/14a619d0-4751-3dd0-8357-da775049c7ff.roa
File: 14a619d0-4751-3dd0-8357-da775049c7ff.roa (raw, json)
Hash identifier: 9iM5YXtTrYMWt1vLxxFSAPzsFjQ3rsnDDWoPtxpbH8M=
Subject key identifier: 3D:94:44:F1:D6:78:78:6D:86:92:A6:A1:6B:D9:47:84:61:E8:64:69
Certificate issuer: /CN=41e38da5-de4f-400d-83ab-65ee2e2c2d24
Certificate serial: 010D0C9F4328584D20AF515B3943073FD1A72C00
Authority key identifier: BF:79:16:BE:B7:8F:69:FB:FD:63:A6:BF:89:19:7D:9E:A8:F2:CA:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24/14a619d0-4751-3dd0-8357-da775049c7ff.roa
Signing time: Wed 11 Mar 2026 01:00:32 +0000
ROA not before: Wed 11 Mar 2026 01:00:32 +0000
ROA not after: Tue 09 Jun 2026 01:00:32 +0000
asID: 26554
IP address blocks: 65.23.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24/41e38da5-de4f-400d-83ab-65ee2e2c2d24.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24/41e38da5-de4f-400d-83ab-65ee2e2c2d24.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 14 Mar 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:20:af:51:5b:39:43:07:3f:d1:a7:2c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41e38da5-de4f-400d-83ab-65ee2e2c2d24
Validity
Not Before: Mar 11 01:00:32 2026 GMT
Not After : Jun 9 01:00:32 2026 GMT
Subject: CN=f2e72b15-76ba-440e-89fc-8b86da3a938f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ce:5d:32:a4:a6:e0:cd:14:0a:ec:fa:ed:2b:
9e:a0:fb:bd:a9:90:64:00:78:f0:38:b3:d7:b8:9f:
4c:34:c0:0d:41:56:9c:c9:3b:fb:2c:a2:f8:15:09:
8f:ad:ca:64:d9:d9:c0:22:cf:17:b3:a2:e0:e7:fe:
0c:11:81:34:24:4b:94:52:51:8f:08:22:91:61:dc:
84:2d:53:55:fc:71:d8:9e:3b:69:e4:50:4b:80:b0:
9a:3a:8e:e8:69:31:8c:ff:51:b7:81:b2:94:9d:45:
1d:d0:3e:7b:3d:46:1d:73:65:94:84:6d:81:8f:b8:
93:77:d3:5c:7d:45:62:83:50:1b:60:98:bc:11:2b:
0f:ec:7c:86:55:ce:19:e3:62:75:53:c3:34:e7:29:
40:39:65:e6:9a:e1:e3:41:e0:e6:c0:bd:ae:45:03:
11:6c:8c:ce:1c:b6:6b:4c:bb:64:d7:68:ab:d8:42:
63:8d:18:2f:80:d2:ec:f6:b1:51:57:e3:18:76:4f:
64:bc:6a:9f:ce:36:27:85:10:e6:62:d4:32:5f:e8:
90:5f:46:b7:65:81:a4:09:bb:87:d2:4b:47:b7:28:
d5:3b:65:9f:28:55:53:69:fe:6e:df:f0:0d:20:59:
c7:89:b8:66:bc:b9:68:21:44:84:4f:76:78:f6:84:
9d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:94:44:F1:D6:78:78:6D:86:92:A6:A1:6B:D9:47:84:61:E8:64:69
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24/14a619d0-4751-3dd0-8357-da775049c7ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24/41e38da5-de4f-400d-83ab-65ee2e2c2d24.crl
X509v3 Authority Key Identifier:
keyid:BF:79:16:BE:B7:8F:69:FB:FD:63:A6:BF:89:19:7D:9E:A8:F2:CA:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24.cer
sbgp-ipAddrBlock: critical
IPv4:
65.23.88.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:05:b7:8a:2a:0c:8d:4f:69:1f:25:3a:ad:92:a1:9a:94:76:
55:29:e7:91:3c:ea:69:4e:d9:e9:58:37:8d:f7:bd:76:8a:69:
32:21:b4:d0:dd:c2:59:69:9d:ad:22:5c:38:c1:2f:b7:38:53:
0d:cc:46:3e:dc:12:7a:eb:a1:f8:37:bc:58:c4:4c:05:b4:f8:
a1:d1:25:bf:1b:7e:63:c0:c6:94:40:99:2d:4f:ff:e2:c9:ed:
65:53:b3:80:46:9a:1e:ee:aa:af:60:4b:5a:f5:38:21:7d:fc:
54:82:4c:3c:28:11:ee:d1:ec:b6:3b:5d:d3:63:24:a4:59:3c:
db:2c:f5:0c:de:7b:3c:4f:54:c5:3d:4f:23:9e:db:ee:95:43:
8c:80:2f:c2:b0:d7:59:75:f9:4f:b7:f9:cf:23:0e:35:ff:09:
02:20:79:cf:29:9f:2c:a5:54:e2:19:69:6b:13:40:d1:84:35:
db:b5:45:be:df:05:97:43:b7:ac:c7:9a:1f:74:33:b1:47:46:
38:ea:0f:06:23:45:ba:cf:e4:89:b0:17:72:53:07:b2:9e:25:
0c:b3:fb:ec:db:d5:59:27:d8:1b:04:e7:cc:cc:dd:fd:a8:8d:
92:99:e1:64:03:bb:28:93:6e:4d:e3:c6:87:27:49:c9:80:43:
04:ea:c6:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 11:19:58 2026 by rpki-client