
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/23f3c964-aab2-4965-9f55-d270cc840a73/0ea3fd91-deb2-3677-854f-64e931788b66.roa
File: 0ea3fd91-deb2-3677-854f-64e931788b66.roa (raw, json)
Hash identifier: oX5EhAAb/aLR5FrRDC6lGW1kNXVBfuQOWSbnyf36wA8=
Subject key identifier: 2A:D0:CE:04:59:D9:AB:85:D2:9E:8D:5C:EC:4C:89:9C:AF:D4:3D:2D
Certificate issuer: /CN=23f3c964-aab2-4965-9f55-d270cc840a73
Certificate serial: 010D0C9F4328584D237A3178BD00AC455C971000
Authority key identifier: 3B:43:D9:DB:E1:64:AD:7E:55:75:B1:27:1E:19:FF:64:55:A0:42:F3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/23f3c964-aab2-4965-9f55-d270cc840a73.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/23f3c964-aab2-4965-9f55-d270cc840a73/0ea3fd91-deb2-3677-854f-64e931788b66.roa
Signing time: Thu 12 Mar 2026 01:00:32 +0000
ROA not before: Thu 12 Mar 2026 01:00:32 +0000
ROA not after: Wed 10 Jun 2026 01:00:32 +0000
asID: 30265
IP address blocks: 23.184.248.0/24 maxlen: 24
2602:f86e::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/23f3c964-aab2-4965-9f55-d270cc840a73/23f3c964-aab2-4965-9f55-d270cc840a73.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/23f3c964-aab2-4965-9f55-d270cc840a73/23f3c964-aab2-4965-9f55-d270cc840a73.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/23f3c964-aab2-4965-9f55-d270cc840a73.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 16 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:23:7a:31:78:bd:00:ac:45:5c:97:10:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23f3c964-aab2-4965-9f55-d270cc840a73
Validity
Not Before: Mar 12 01:00:32 2026 GMT
Not After : Jun 10 01:00:32 2026 GMT
Subject: CN=8f970419-5fa9-4d77-b5a4-3ab9b6036e40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:25:45:bc:90:4c:d1:a1:40:ac:bf:8a:7a:ea:
a5:27:1e:a7:b3:5b:62:c9:4f:13:1b:cb:60:6d:fa:
57:1c:43:bf:20:83:e9:bb:73:31:8c:c2:9b:0e:5e:
88:0e:24:2d:e8:2b:e7:4f:d3:ac:1a:4c:32:2f:0f:
7b:c1:0a:38:18:f8:f7:bd:e5:f5:30:b8:13:dd:af:
b4:c0:62:fb:e7:a4:22:01:a7:e4:70:16:55:d4:61:
67:e0:e5:77:f8:06:2c:1a:1b:9e:2c:08:95:e9:c0:
fb:a4:77:4f:67:13:0b:98:a7:87:60:0b:14:a0:f2:
91:7a:ad:b4:b3:d8:2e:3a:59:d5:46:84:d7:23:d4:
9f:b4:52:18:f2:99:82:0b:a8:d2:53:93:0b:32:e5:
06:f7:9b:65:39:2c:85:11:5b:00:12:41:81:19:7b:
1f:8a:8a:c9:d7:46:85:04:0c:5e:6b:6f:d2:79:5d:
cc:b8:5f:4a:d3:65:ed:05:a8:75:10:cb:96:ca:28:
39:87:be:51:82:5e:61:e0:e2:62:ba:06:46:a2:85:
2f:39:65:31:5d:39:87:c0:5d:05:17:85:7a:7b:fb:
f2:37:22:6c:72:8c:5e:51:c1:37:fe:59:5f:a5:2f:
30:0d:89:86:eb:b0:ca:da:82:52:e2:ad:64:d5:0a:
ce:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:D0:CE:04:59:D9:AB:85:D2:9E:8D:5C:EC:4C:89:9C:AF:D4:3D:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/23f3c964-aab2-4965-9f55-d270cc840a73/0ea3fd91-deb2-3677-854f-64e931788b66.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/23f3c964-aab2-4965-9f55-d270cc840a73/23f3c964-aab2-4965-9f55-d270cc840a73.crl
X509v3 Authority Key Identifier:
keyid:3B:43:D9:DB:E1:64:AD:7E:55:75:B1:27:1E:19:FF:64:55:A0:42:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/23f3c964-aab2-4965-9f55-d270cc840a73.cer
sbgp-ipAddrBlock: critical
IPv4:
23.184.248.0/24
IPv6:
2602:f86e::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:27:ad:86:69:25:76:51:70:7d:d4:e8:d0:57:e9:ba:bf:d9:
53:da:77:cb:38:be:98:76:e3:61:6d:3e:8d:c2:47:db:30:be:
32:66:9e:b0:a5:1d:df:45:5d:33:da:15:2e:c4:77:ee:7e:57:
37:9d:df:6f:f7:8e:50:73:9a:4c:06:76:f9:82:85:87:0f:67:
2a:4f:2f:7d:b7:c4:97:51:2e:26:28:ba:ed:3a:61:92:6a:37:
00:41:c8:cf:09:53:3e:6c:e0:0a:77:27:57:b6:3d:29:db:8c:
c5:63:f9:83:6e:cd:d3:50:1d:3f:57:17:0e:1c:82:52:43:9e:
d3:ce:a6:93:c3:9f:62:c2:3c:51:5e:af:53:d9:ed:7e:14:28:
5f:79:5d:63:d1:3d:64:29:01:75:7b:2e:44:dc:3b:22:1a:dd:
d4:c7:25:72:d0:f2:bd:fa:a1:bd:b7:b5:9b:4c:d8:da:ee:f9:
02:db:b5:1c:48:a9:9d:71:04:bd:a2:67:c4:23:e1:d7:d7:7f:
80:56:95:b7:06:8b:da:50:0a:31:74:f5:f4:13:8e:1a:82:dc:
8f:e7:e0:e2:ee:78:f3:ed:90:08:c3:f4:11:e0:f3:8b:6e:7c:
41:95:99:55:e6:78:43:14:75:8e:fb:4f:a9:36:54:65:fa:0c:
09:80:1e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 06:05:54 2026 by rpki-client