
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/23d4344d-e6b1-4a9e-8560-f54da402f39b/2c9499a6-75ea-3ff6-9241-321833caa089.roa
File: 2c9499a6-75ea-3ff6-9241-321833caa089.roa (raw, json)
Hash identifier: QpmHPLBVIch762Wno2w5vXeD3Fw7AYroMwswW/B8Llc=
Subject key identifier: 0F:50:5A:38:C7:CE:F4:DA:1C:D1:A3:13:D7:AA:53:9A:6F:1C:61:03
Certificate issuer: /CN=23d4344d-e6b1-4a9e-8560-f54da402f39b
Certificate serial: 010D0C9F4328584E3CF9C3DC41A69AA5CF811B00
Authority key identifier: F5:67:2F:5B:C2:A6:F0:87:F1:01:1F:8F:83:B3:06:B9:06:06:63:72
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/23d4344d-e6b1-4a9e-8560-f54da402f39b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/23d4344d-e6b1-4a9e-8560-f54da402f39b/2c9499a6-75ea-3ff6-9241-321833caa089.roa
Signing time: Sat 20 Jun 2026 21:00:12 +0000
ROA not before: Sat 20 Jun 2026 21:00:12 +0000
ROA not after: Fri 18 Sep 2026 21:00:12 +0000
asID: 152179
IP address blocks: 23.147.4.0/24 maxlen: 24
2602:f52e::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/23d4344d-e6b1-4a9e-8560-f54da402f39b/23d4344d-e6b1-4a9e-8560-f54da402f39b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/23d4344d-e6b1-4a9e-8560-f54da402f39b/23d4344d-e6b1-4a9e-8560-f54da402f39b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/23d4344d-e6b1-4a9e-8560-f54da402f39b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 22 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:3c:f9:c3:dc:41:a6:9a:a5:cf:81:1b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23d4344d-e6b1-4a9e-8560-f54da402f39b
Validity
Not Before: Jun 20 21:00:12 2026 GMT
Not After : Sep 18 21:00:12 2026 GMT
Subject: CN=0a2c7ad2-e0ce-4d5f-800d-e27f675126d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3a:34:ec:bc:65:42:55:ba:2c:8b:7e:01:3e:
6e:d7:2b:fb:8e:3d:bc:24:24:aa:ea:68:e4:ce:7e:
e1:9f:6b:be:96:58:6e:82:13:fa:78:a5:62:04:8c:
ac:ab:55:0c:67:dc:2c:4c:a3:5a:19:6c:51:9f:44:
0d:64:73:2d:25:fd:51:0d:dd:d4:91:af:3f:a6:c0:
00:f4:c1:42:20:e6:16:3d:82:7e:05:3f:77:6c:fc:
da:14:d9:de:c8:d7:c6:60:59:1b:98:73:84:f2:d7:
86:c5:9e:a4:a1:9d:03:b5:4d:d8:db:31:e2:50:ac:
cf:dc:bd:f7:d0:3f:96:10:74:bc:13:09:70:d0:49:
80:83:0d:13:c0:a0:3c:26:ef:be:c9:c9:81:4e:a6:
42:07:14:b1:b0:cc:7e:38:1f:50:e7:25:e2:21:9f:
8d:85:97:fc:98:2b:6b:6b:d4:b8:e4:fd:9e:7f:49:
70:d5:e6:89:81:92:a1:83:95:af:c0:b1:3e:fd:a5:
eb:b2:21:95:13:20:05:ea:ec:92:c4:1b:9a:46:ca:
9f:7e:f1:96:71:84:9a:18:93:f7:5d:72:f9:92:67:
34:90:95:33:58:9f:52:10:42:e4:5a:bb:c7:a2:fe:
38:d6:50:95:45:dc:03:3b:1a:31:40:8d:19:7e:6d:
a8:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:50:5A:38:C7:CE:F4:DA:1C:D1:A3:13:D7:AA:53:9A:6F:1C:61:03
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/23d4344d-e6b1-4a9e-8560-f54da402f39b/2c9499a6-75ea-3ff6-9241-321833caa089.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/23d4344d-e6b1-4a9e-8560-f54da402f39b/23d4344d-e6b1-4a9e-8560-f54da402f39b.crl
X509v3 Authority Key Identifier:
keyid:F5:67:2F:5B:C2:A6:F0:87:F1:01:1F:8F:83:B3:06:B9:06:06:63:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/23d4344d-e6b1-4a9e-8560-f54da402f39b.cer
sbgp-ipAddrBlock: critical
IPv4:
23.147.4.0/24
IPv6:
2602:f52e::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:5a:ae:79:6f:52:4d:e0:c3:34:71:93:2a:9e:c9:03:66:ed:
aa:90:a5:a3:d0:78:c4:1c:71:68:ec:75:87:14:9b:93:ee:4b:
fa:82:4c:ae:95:40:71:7f:a7:67:55:c7:43:f4:46:12:d7:2a:
59:22:be:2a:ad:c8:8e:d5:2a:eb:00:99:d8:c5:9c:e8:22:3d:
d6:b4:25:15:60:4c:c4:7a:ab:4d:41:8e:1f:bf:19:95:61:03:
f3:3c:fe:62:93:dd:e3:d8:d7:59:c6:ad:89:16:14:86:c4:dc:
92:ae:d2:a6:43:68:2b:fa:9e:dd:a1:5c:19:17:a0:e8:8a:ea:
f8:10:b4:bc:70:ee:c8:75:01:13:d5:c8:ae:d4:96:50:b7:95:
45:9b:64:ee:82:63:b1:2c:d5:e7:99:d8:51:e6:f5:e3:f7:c3:
e2:14:73:2f:b4:61:21:b6:a5:21:69:ef:f6:28:9f:f9:b4:39:
fe:53:f0:f4:ff:94:6b:29:27:43:5a:1f:8c:67:a1:a3:67:5f:
14:b7:52:28:17:68:8d:b7:ae:41:cd:6e:5d:82:42:bd:f7:5e:
3f:38:c5:14:a5:a3:1b:75:5f:4d:6c:51:30:e0:ad:40:69:9c:
7c:26:1e:b0:e7:fd:6b:d5:34:04:97:f1:2f:a3:84:74:34:ec:
3f:90:81:f5
-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE48+cPcQaaapc+BGwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjNkNDM0NGQtZTZiMS00YTllLTg1NjAtZjU0ZGE0MDJm
MzliMB4XDTI2MDYyMDIxMDAxMloXDTI2MDkxODIxMDAxMlowLzEtMCsGA1UEAxMk
MGEyYzdhZDItZTBjZS00ZDVmLTgwMGQtZTI3ZjY3NTEyNmQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzo07LxlQlW6LIt+AT5u1yv7jj28JCSq6mjk
zn7hn2u+llhughP6eKViBIysq1UMZ9wsTKNaGWxRn0QNZHMtJf1RDd3Uka8/psAA
9MFCIOYWPYJ+BT93bPzaFNneyNfGYFkbmHOE8teGxZ6koZ0DtU3Y2zHiUKzP3L33
0D+WEHS8Ewlw0EmAgw0TwKA8Ju++ycmBTqZCBxSxsMx+OB9Q5yXiIZ+NhZf8mCtr
a9S45P2ef0lw1eaJgZKhg5WvwLE+/aXrsiGVEyAF6uySxBuaRsqffvGWcYSaGJP3
XXL5kmc0kJUzWJ9SEELkWrvHov441lCVRdwDOxoxQI0Zfm2oiQIDAQABo4IDZTCC
A2EwHQYDVR0OBBYEFA9QWjjHzvTaHNGjE9eqU5pvHGEDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8yM2Q0
MzQ0ZC1lNmIxLTRhOWUtODU2MC1mNTRkYTQwMmYzOWIvMmM5NDk5YTYtNzVlYS0z
ZmY2LTkyNDEtMzIxODMzY2FhMDg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMjNkNDM0NGQtZTZiMS00YTllLTg1
NjAtZjU0ZGE0MDJmMzliLzIzZDQzNDRkLWU2YjEtNGE5ZS04NTYwLWY1NGRhNDAy
ZjM5Yi5jcmwwHwYDVR0jBBgwFoAU9WcvW8Km8IfxAR+Pg7MGuQYGY3IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi8yM2Q0MzQ0ZC1lNmIxLTRhOWUtODU2MC1mNTRk
YTQwMmYzOWIuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF5MEMA4E
AgACMAgDBgAmAvUuADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA2Wq55b1JN4MM0cZMqnskDZu2qkKWj0HjE
HHFo7HWHFJuT7kv6gkyulUBxf6dnVcdD9EYS1ypZIr4qrciO1SrrAJnYxZzoIj3W
tCUVYEzEeqtNQY4fvxmVYQPzPP5ik93j2NdZxq2JFhSGxNySrtKmQ2gr+p7doVwZ
F6Doiur4ELS8cO7IdQET1ciu1JZQt5VFm2TugmOxLNXnmdhR5vXj98PiFHMvtGEh
tqUhae/2KJ/5tDn+U/D0/5RrKSdDWh+MZ6GjZ18Ut1IoF2iNt65BzW5dgkK9914/
OMUUpaMbdV9NbFEw4K1AaZx8Jh6w5/1r1TQEl/Evo4R0NOw/kIH1
-----END CERTIFICATE-----
Generated at Tue Jul 21 01:28:56 2026 by rpki-client