
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07/5cc65789-e006-3aa4-ab5b-31603ba48809.roa
File: 5cc65789-e006-3aa4-ab5b-31603ba48809.roa (raw, json)
Hash identifier: 2by7KDRfhUbZ91qrKZTn1V0yNNCI95whpY18qkExPAQ=
Subject key identifier: AA:97:D3:05:FA:77:61:88:01:80:99:B7:67:C2:79:83:43:87:24:8F
Certificate issuer: /CN=af7885f2-5b14-4ded-b2dd-7befe215db07
Certificate serial: 010D0C9F4328584EE0C208C597D3C0071266D300
Authority key identifier: BD:34:91:4A:B0:1B:60:12:AA:CE:A1:2D:C1:64:C9:BC:BE:E5:61:B0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07/5cc65789-e006-3aa4-ab5b-31603ba48809.roa
Signing time: Tue 18 Aug 2026 13:00:12 +0000
ROA not before: Tue 18 Aug 2026 13:00:12 +0000
ROA not after: Mon 16 Nov 2026 14:00:12 +0000
asID: 20067
IP address blocks: 23.148.8.0/24 maxlen: 24
2602:811:c000::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07/af7885f2-5b14-4ded-b2dd-7befe215db07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07/af7885f2-5b14-4ded-b2dd-7befe215db07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 14 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:e0:c2:08:c5:97:d3:c0:07:12:66:d3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af7885f2-5b14-4ded-b2dd-7befe215db07
Validity
Not Before: Aug 18 13:00:12 2026 GMT
Not After : Nov 16 14:00:12 2026 GMT
Subject: CN=90a837d8-7fd1-4f21-8b8d-bf532f451ac2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:24:6f:3d:1f:25:b4:a5:5e:7c:25:21:dd:55:
fe:cd:d0:e9:8e:5d:8a:72:fc:7a:0b:50:39:b4:35:
21:2d:57:8b:b3:42:f8:93:cf:f0:38:8d:cd:f5:b1:
22:f3:35:76:2d:cd:8a:ec:05:49:df:80:48:69:89:
0e:6e:0c:8b:3e:1c:1f:7b:ab:8a:c7:80:f5:4d:75:
7c:d7:a5:f1:7f:a5:ac:32:a8:da:c0:97:1c:40:47:
a5:d8:e3:64:01:ae:35:b5:71:27:66:89:bc:9b:4a:
3c:f3:97:10:a7:57:c6:91:4f:14:f3:3a:93:9a:9f:
f8:6d:49:69:11:4c:84:ce:53:ec:48:ee:11:a3:60:
b6:a6:28:c1:56:de:14:c3:d1:ab:65:dd:9b:de:07:
3d:29:38:bc:c4:bf:bd:98:d7:5e:5e:0c:5b:0c:75:
0c:7b:a8:0c:ea:47:f1:cf:d2:d1:a3:90:2c:9f:e4:
aa:c5:be:fa:df:c0:b0:2b:df:b0:3b:f9:dd:72:39:
85:63:64:29:1f:d5:55:61:63:8d:6c:a9:1e:b4:71:
74:21:be:53:f2:5a:90:4c:ba:65:9c:64:11:43:c0:
24:99:95:52:53:7d:aa:ce:e5:42:8d:74:d8:81:5e:
5d:17:5a:77:6b:26:73:11:8c:4a:71:79:79:39:2a:
1f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:97:D3:05:FA:77:61:88:01:80:99:B7:67:C2:79:83:43:87:24:8F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07/5cc65789-e006-3aa4-ab5b-31603ba48809.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07/af7885f2-5b14-4ded-b2dd-7befe215db07.crl
X509v3 Authority Key Identifier:
keyid:BD:34:91:4A:B0:1B:60:12:AA:CE:A1:2D:C1:64:C9:BC:BE:E5:61:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07.cer
sbgp-ipAddrBlock: critical
IPv4:
23.148.8.0/24
IPv6:
2602:811:c000::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:9b:f6:be:53:4a:a6:f4:2e:cd:88:80:03:8d:cd:2c:4d:35:
89:e4:9c:e7:bd:60:43:9c:27:02:c3:1d:d8:3d:49:50:b0:0b:
f0:c1:08:68:a6:77:2b:45:39:05:01:3e:89:bc:95:42:55:1f:
cb:5f:c0:14:18:92:e2:86:58:b6:2c:f0:dc:28:04:2b:b3:98:
64:d7:7b:68:34:93:e4:db:47:6c:b8:08:96:54:29:1e:f9:b0:
11:3f:5d:da:78:76:67:8b:92:e9:5d:be:d8:f1:fd:02:2f:49:
05:98:55:92:6e:a1:05:2d:5a:a1:19:66:6a:a9:b2:21:60:df:
9b:3e:02:42:5e:ff:bc:70:ec:28:82:3c:fa:b2:9b:25:11:d6:
e9:e3:48:b6:cb:e4:e5:26:2e:44:fe:b6:43:77:e6:c8:ee:7b:
37:77:91:5b:a7:de:08:68:aa:ad:81:80:b3:a7:d6:0e:54:81:
1e:67:c1:7d:b6:88:23:e2:9a:fa:95:11:44:b3:5d:c5:90:1a:
e0:92:1b:7e:82:4f:0c:63:c6:76:6f:9f:09:6a:1b:ca:cd:bb:
b2:d5:3d:4b:4f:82:a6:aa:c6:fe:c2:d6:bc:17:4c:13:14:23:
44:be:bc:41:8b:f2:99:11:8e:65:d1:6f:32:6b:09:2b:7c:98:
07:ad:27:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 12:34:24 2026 by rpki-client