
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/6a3b6e53-ee39-3fe8-8225-d0d1e61067ab.roa
File: 6a3b6e53-ee39-3fe8-8225-d0d1e61067ab.roa (raw, json)
Hash identifier: VYxh1fKkxS4nB72s5t5Upqi6NSB02Zo5NEUSYTfcG5o=
Subject key identifier: BB:2C:A9:CE:FF:71:FA:B9:9D:4B:63:5D:25:39:59:0A:AA:5C:52:2F
Certificate issuer: /CN=1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c
Certificate serial: 010D0C9F4328584D237A6891A5B6A5F686E89100
Authority key identifier: 1B:2E:C9:32:69:C0:91:AD:78:83:F0:75:7E:D4:FB:FE:E0:3C:A6:0C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/6a3b6e53-ee39-3fe8-8225-d0d1e61067ab.roa
Signing time: Thu 12 Mar 2026 01:00:32 +0000
ROA not before: Thu 12 Mar 2026 01:00:32 +0000
ROA not after: Wed 10 Jun 2026 01:00:32 +0000
asID: 62553
IP address blocks: 23.129.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 17 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:23:7a:68:91:a5:b6:a5:f6:86:e8:91:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c
Validity
Not Before: Mar 12 01:00:32 2026 GMT
Not After : Jun 10 01:00:32 2026 GMT
Subject: CN=b51666bc-cb73-4670-8dff-a66792ae9a55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c2:9a:fa:09:05:f9:c0:9a:f6:92:d4:09:75:
e9:9e:dd:bd:40:e1:16:70:1f:06:bb:f1:81:31:c5:
41:1c:a6:36:4c:f3:e4:05:fb:21:09:86:01:a3:68:
37:9a:86:cd:f0:62:0e:a3:60:58:b2:58:4b:6c:99:
df:a3:95:be:6a:08:73:58:4a:a4:5b:92:f5:a3:58:
47:38:e0:37:4d:cf:30:05:d7:dd:6e:ce:c5:4c:51:
a8:43:78:e0:bb:9a:ce:a5:5a:ba:f1:7e:9e:07:44:
32:5a:b5:0e:00:cd:8e:c5:8d:66:c1:3a:2b:19:48:
04:44:78:d8:03:65:cf:ba:a5:35:59:8c:7c:94:80:
88:c0:fb:78:2a:3b:eb:1f:31:97:ac:a1:1d:08:bb:
d6:52:13:f6:5b:31:48:57:8f:9c:ca:3f:ad:2d:67:
00:38:4a:aa:ab:b7:2f:be:3a:56:78:94:2b:a4:1f:
5e:f9:49:56:e7:dd:bc:f4:9d:05:38:4f:37:fc:12:
80:bf:04:94:c1:43:5f:f2:f0:ba:b2:39:61:a7:33:
3c:3b:30:58:04:ef:ca:f5:a7:1f:a7:5b:88:65:4c:
0f:8e:95:ad:52:3f:72:b6:66:1b:ad:1a:b3:5c:87:
29:cd:23:29:86:06:cf:23:e2:42:5c:0c:94:25:29:
c6:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:2C:A9:CE:FF:71:FA:B9:9D:4B:63:5D:25:39:59:0A:AA:5C:52:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/6a3b6e53-ee39-3fe8-8225-d0d1e61067ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.crl
X509v3 Authority Key Identifier:
keyid:1B:2E:C9:32:69:C0:91:AD:78:83:F0:75:7E:D4:FB:FE:E0:3C:A6:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.cer
sbgp-ipAddrBlock: critical
IPv4:
23.129.100.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:1a:6c:b6:bd:b3:58:f2:66:8b:3a:f4:4d:7d:2c:ef:14:30:
49:10:b0:b6:cd:52:22:8b:3f:54:d3:ec:e7:5d:f0:db:57:18:
23:e3:3d:11:50:71:15:65:71:67:27:6d:cc:f5:5e:1c:ca:af:
a9:fe:0e:0d:43:d2:8d:63:d3:dd:38:f4:50:fe:71:02:1e:d1:
d9:ca:f8:28:ad:22:c6:5b:27:85:24:ef:a9:c0:43:29:d4:a8:
04:88:70:f3:2d:73:f4:6f:0b:ce:ab:d3:59:9e:ff:43:5e:a9:
1f:92:a4:a6:e9:fa:66:28:1a:8d:fc:dc:b9:0b:8d:cd:9c:fd:
4c:ff:d3:34:98:44:fc:6d:28:49:bc:70:1e:09:70:fb:f8:44:
ec:63:83:7b:ab:42:30:7d:49:07:02:00:e2:38:4c:d0:1c:7a:
cf:e8:1c:c1:76:0e:f5:99:be:bd:3a:cd:8e:f2:9c:0e:d3:09:
27:b7:68:5c:2a:8e:31:fd:e5:92:04:a5:0a:2a:43:c6:62:13:
6c:73:bc:29:10:13:fd:5c:69:cf:99:6d:3a:00:57:93:d6:61:
2a:59:19:91:37:d6:ed:c5:f8:46:20:2e:db:a1:c4:ae:34:c3:
ac:8d:86:dc:7a:6c:3d:bc:fb:04:59:ad:60:b3:85:f7:7c:49:
5c:1a:fc:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 08:05:09 2026 by rpki-client