
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07/5cc65789-e006-3aa4-ab5b-31603ba48809.roa
File: 5cc65789-e006-3aa4-ab5b-31603ba48809.roa (raw, json)
Hash identifier: a/728wCA42CSQHlTX+2HePbaZZ5JljEtD5dI7/TyOvI=
Subject key identifier: 3E:C7:C4:29:24:00:A0:80:41:72:48:63:6E:4C:9E:24:68:1B:85:65
Certificate issuer: /CN=af7885f2-5b14-4ded-b2dd-7befe215db07
Certificate serial: 010D0C9F4328584F82ADBB412EDAAA1F116B7000
Authority key identifier: BD:34:91:4A:B0:1B:60:12:AA:CE:A1:2D:C1:64:C9:BC:BE:E5:61:B0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07/5cc65789-e006-3aa4-ab5b-31603ba48809.roa
Signing time: Thu 15 Oct 2026 13:00:13 +0000
ROA not before: Thu 15 Oct 2026 13:00:13 +0000
ROA not after: Wed 13 Jan 2027 14:00:13 +0000
asID: 20067
IP address blocks: 23.148.8.0/24 maxlen: 24
2602:811:c000::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07/af7885f2-5b14-4ded-b2dd-7befe215db07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07/af7885f2-5b14-4ded-b2dd-7befe215db07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Nov 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:82:ad:bb:41:2e:da:aa:1f:11:6b:70:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af7885f2-5b14-4ded-b2dd-7befe215db07
Validity
Not Before: Oct 15 13:00:13 2026 GMT
Not After : Jan 13 14:00:13 2027 GMT
Subject: CN=eee1514d-b244-45ca-8307-fca063b2189e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a8:5c:42:78:07:6b:2a:b5:a2:34:a3:fb:05:
f4:ee:d5:9f:31:2c:d4:c3:61:5e:6a:93:4a:96:70:
a3:5d:60:db:3a:5f:bf:c1:a1:69:0a:a5:c4:98:96:
b5:3f:eb:74:77:09:cf:27:45:c7:56:4e:90:4e:27:
31:f4:aa:a2:90:60:96:9c:d0:dc:02:bb:82:e0:cc:
38:c1:a0:7b:d8:a5:77:09:73:3c:08:5c:98:df:13:
49:fb:df:df:8f:4b:9b:35:74:ef:6e:09:65:7d:55:
47:f2:6f:27:6d:02:7d:6c:a0:73:c5:02:24:28:cc:
91:4d:98:c7:0b:07:6e:c5:ee:15:cf:db:25:ae:d1:
8a:6b:c6:c7:e3:b3:ae:26:3f:18:b0:bf:a0:dd:89:
12:fb:98:66:1b:34:59:bd:84:5e:73:1d:f4:09:29:
61:52:8a:d9:ac:05:16:d6:e3:fe:36:8f:e1:2c:5b:
d0:a2:36:6c:7e:d7:b0:25:24:9b:1b:8c:29:e7:11:
a4:05:59:fa:00:4c:5f:fb:26:89:b7:1f:76:24:1b:
d9:41:de:b2:d4:45:b1:eb:e1:f2:92:1e:b9:26:11:
f3:39:99:d1:4d:8f:a7:04:ca:fa:d6:c9:fb:f7:8a:
4b:cf:c0:ba:5a:38:b8:43:2a:ac:06:65:7d:95:c6:
57:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:C7:C4:29:24:00:A0:80:41:72:48:63:6E:4C:9E:24:68:1B:85:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07/5cc65789-e006-3aa4-ab5b-31603ba48809.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07/af7885f2-5b14-4ded-b2dd-7befe215db07.crl
X509v3 Authority Key Identifier:
keyid:BD:34:91:4A:B0:1B:60:12:AA:CE:A1:2D:C1:64:C9:BC:BE:E5:61:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07.cer
sbgp-ipAddrBlock: critical
IPv4:
23.148.8.0/24
IPv6:
2602:811:c000::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:e2:43:89:57:a6:8b:66:95:1a:19:ca:04:4e:da:6f:79:57:
57:f6:de:03:b9:c1:8c:e3:b9:7e:5c:0d:3f:85:16:b2:9d:88:
f3:06:37:95:09:43:c2:12:96:a9:8f:2f:13:8b:fa:a7:0d:c2:
ff:52:2b:9f:3c:b2:b8:21:d5:91:10:4b:3c:d7:f3:8d:ca:9d:
c2:5d:65:d3:a9:b3:fb:11:d8:cc:27:04:46:10:e5:7d:6b:c2:
61:5a:a4:3a:d1:e4:8b:63:bc:4f:3f:a9:7f:64:0b:1b:6d:f8:
72:2d:a4:f6:79:78:35:e8:00:41:4c:f1:41:fb:7d:1a:96:c8:
87:4c:53:2a:30:c8:74:eb:40:8a:4e:52:e6:72:0d:6d:58:87:
cd:ef:30:c2:55:6c:18:b2:79:ea:07:2b:62:1e:c9:6f:57:1e:
6b:0f:fd:57:83:8f:fa:36:f3:d2:a4:5c:15:4b:eb:ec:7e:91:
e7:5a:43:d1:da:cb:ad:d6:af:4b:8e:57:16:cf:80:47:9b:22:
9a:a1:7e:db:95:54:e2:84:9e:70:74:e5:0b:9d:66:9d:9a:95:
3d:4e:2c:99:2f:46:df:9c:dd:27:46:fa:b3:80:ee:88:01:1c:
55:95:01:f1:fb:28:5b:d0:16:a7:3e:d2:95:dd:d7:9b:8c:6f:
c1:1d:7d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 06:52:18 2026 by rpki-client