
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/09bbeeef-5a22-312d-92f5-117f24a81240.roa
File: 09bbeeef-5a22-312d-92f5-117f24a81240.roa (raw, json)
Hash identifier: h66Z1V/2VU0S1mVnrg++SnYBAjcDtWubJOHPPWf/WVo=
Subject key identifier: DE:47:60:0B:0F:FB:DD:9C:D6:DC:78:E3:94:73:5B:A6:C3:74:BC:34
Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial: 010D0C9F4328584F6DBD6AD2B6CD44CE81915D40
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/09bbeeef-5a22-312d-92f5-117f24a81240.roa
Signing time: Thu 08 Oct 2026 01:00:11 +0000
ROA not before: Thu 08 Oct 2026 01:00:11 +0000
ROA not after: Wed 06 Jan 2027 02:00:11 +0000
asID: 395954
IP address blocks: 23.83.96.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 15 Oct 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:6d:bd:6a:d2:b6:cd:44:ce:81:91:5d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Validity
Not Before: Oct 8 01:00:11 2026 GMT
Not After : Jan 6 02:00:11 2027 GMT
Subject: CN=b46c3749-6036-4793-a8f4-6778fd857950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:cd:df:ae:de:88:55:ca:41:ce:c3:ec:85:7d:
f6:51:75:91:58:26:ef:f1:dd:bd:9a:27:f1:7a:1d:
bd:25:a8:39:ea:1b:4b:a0:b8:a2:21:e7:94:1a:fa:
c0:5a:e6:eb:7b:7b:e2:48:01:32:86:b4:0c:19:ec:
04:b4:d4:fc:16:4a:c2:f3:69:21:d1:52:5b:bb:c5:
1e:95:d6:9a:de:c9:a4:39:06:53:54:b6:51:e8:a5:
e2:7d:ff:fd:30:7e:d1:4d:35:6f:08:ab:dd:67:30:
8c:16:64:a6:3e:67:86:67:ee:c3:14:b3:cb:d5:ac:
e1:5c:86:19:d4:72:3c:42:4c:12:11:24:91:99:33:
d1:41:05:2b:fd:4c:73:ca:5d:d8:60:21:58:52:ff:
eb:00:0f:b2:a4:4a:70:16:5f:0d:9e:b6:d2:21:4a:
0f:1d:db:f9:a3:95:a0:bb:b1:69:28:b8:95:53:8d:
f7:9a:23:a6:45:e7:74:10:48:d3:1d:fa:87:f2:d3:
80:bc:1b:ba:f3:56:86:6e:05:06:a7:3c:8f:ad:ae:
67:06:59:8b:87:27:fe:82:04:43:13:f7:ea:eb:98:
22:7b:fe:7a:bb:98:5c:dd:eb:6e:ab:ed:e6:54:ff:
c9:bd:28:c6:db:10:2f:36:76:e5:7d:87:d9:51:55:
10:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:47:60:0B:0F:FB:DD:9C:D6:DC:78:E3:94:73:5B:A6:C3:74:BC:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/09bbeeef-5a22-312d-92f5-117f24a81240.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
X509v3 Authority Key Identifier:
keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
sbgp-ipAddrBlock: critical
IPv4:
23.83.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:23:a5:c4:42:65:c9:28:02:c0:61:24:87:c2:f6:78:86:3b:
11:a8:1b:51:84:c1:61:08:88:01:a5:87:91:b5:19:b6:3f:a1:
7a:df:93:ee:e5:05:e2:42:34:a9:4f:2c:33:03:e5:e0:44:18:
35:9a:d6:59:f6:44:45:b3:2f:d2:ca:75:7a:61:78:56:f2:9b:
9a:19:f4:0f:72:c6:5c:81:4a:fc:f9:57:6f:32:86:e2:4c:00:
28:fb:10:05:1d:21:0f:42:33:e8:30:75:33:f4:9f:5e:49:e5:
59:0f:29:f3:69:f6:f1:d3:f9:78:bb:0c:b0:13:6d:ee:88:08:
4e:35:bc:15:bd:6c:0a:e9:6e:27:42:96:8a:0e:50:96:9f:31:
51:c7:f9:22:f3:c5:fe:f3:28:23:09:30:ba:f1:51:bf:44:0e:
26:ab:fe:80:b3:af:68:7a:53:82:fb:05:ad:5d:8a:3c:47:86:
86:79:61:3e:88:e1:37:48:43:c3:88:e3:94:f8:3a:34:b4:42:
71:3c:a2:c5:c3:4a:1f:32:f3:b1:ac:a6:fd:a2:b6:16:90:99:
c3:6d:f9:a0:3d:08:06:b9:c0:d1:d6:a1:fe:76:05:98:c4:41:
d6:f5:79:d5:25:4a:e4:7c:c7:f6:2f:e7:0f:02:ba:12:55:bc:
49:0b:bb:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 13:08:42 2026 by rpki-client