
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e951a87-195b-48e6-8452-38c35bb02255/a096cadc-4c71-333b-93b8-3623bde2c855.roa
File: a096cadc-4c71-333b-93b8-3623bde2c855.roa (raw, json)
Hash identifier: +jirafXxwrLKfHd5kbZHzg5ziW3dKxBkT9Q+ktC//h8=
Subject key identifier: 6F:C7:C9:98:70:EE:49:37:C0:EE:68:FA:37:D6:33:83:1D:3F:F5:4B
Certificate issuer: /CN=8e951a87-195b-48e6-8452-38c35bb02255
Certificate serial: 010D0C9F4328584F4974A0F57244AE786B981E80
Authority key identifier: F1:EE:61:19:10:74:3C:B4:64:93:38:29:7A:2F:5E:C9:67:EA:B9:A9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e951a87-195b-48e6-8452-38c35bb02255.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e951a87-195b-48e6-8452-38c35bb02255/a096cadc-4c71-333b-93b8-3623bde2c855.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 17080
IP address blocks: 23.167.176.0/24 maxlen: 24
2602:fcf3::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e951a87-195b-48e6-8452-38c35bb02255/8e951a87-195b-48e6-8452-38c35bb02255.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e951a87-195b-48e6-8452-38c35bb02255/8e951a87-195b-48e6-8452-38c35bb02255.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e951a87-195b-48e6-8452-38c35bb02255.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 11 Oct 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:74:a0:f5:72:44:ae:78:6b:98:1e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e951a87-195b-48e6-8452-38c35bb02255
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=e5316298-5ea3-48af-b209-e7927ca9f822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:9c:cc:0e:f4:e2:14:07:f5:1a:32:b7:21:20:
62:83:5d:1b:8e:64:69:e1:2f:c1:1f:13:85:ae:6e:
9b:3e:89:a1:d0:da:98:e8:12:09:9f:0e:8d:11:d3:
0b:d6:68:24:4c:05:88:62:9f:d9:bf:dd:d6:1a:17:
d9:8a:e5:00:cf:6b:f8:b8:0f:83:3e:e6:45:65:3b:
c7:c2:49:95:fe:8a:cb:ff:d3:95:84:54:ff:7d:e2:
0a:e7:f9:2c:ee:75:d1:ce:0d:cc:27:12:cb:75:35:
17:9c:39:48:2c:53:41:9e:02:ec:10:d7:15:d0:59:
cb:47:d8:72:88:a3:46:23:da:79:3d:95:bd:82:a8:
e0:77:c1:81:af:31:44:f9:10:01:9c:cd:a1:e6:1f:
96:78:6b:71:23:98:e1:83:fe:18:07:63:ee:d7:43:
77:4b:71:6e:eb:0c:f7:13:57:2e:8c:bb:b1:4b:e1:
19:c9:a8:b0:c2:2b:6a:00:59:6b:04:42:43:c3:32:
13:c7:bb:05:9e:40:c8:9f:e9:02:9e:95:a6:52:64:
26:49:ec:f0:f3:39:ca:36:73:38:c6:ce:af:c5:11:
74:87:60:23:77:85:bf:90:87:39:54:12:04:56:8c:
1b:8c:63:6c:a4:7a:cb:eb:8a:70:28:a4:55:16:d1:
03:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:C7:C9:98:70:EE:49:37:C0:EE:68:FA:37:D6:33:83:1D:3F:F5:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e951a87-195b-48e6-8452-38c35bb02255/a096cadc-4c71-333b-93b8-3623bde2c855.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e951a87-195b-48e6-8452-38c35bb02255/8e951a87-195b-48e6-8452-38c35bb02255.crl
X509v3 Authority Key Identifier:
keyid:F1:EE:61:19:10:74:3C:B4:64:93:38:29:7A:2F:5E:C9:67:EA:B9:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e951a87-195b-48e6-8452-38c35bb02255.cer
sbgp-ipAddrBlock: critical
IPv4:
23.167.176.0/24
IPv6:
2602:fcf3::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:34:1e:1f:e9:49:74:b4:04:fc:6d:20:bb:dd:f4:46:c9:51:
98:20:46:70:d7:f7:79:86:ce:99:7f:19:ff:b6:16:3e:55:1d:
20:f9:a0:25:9d:c9:05:ad:de:4e:fd:94:54:f0:a4:e6:3b:6a:
82:94:a2:82:1c:fb:a6:bc:c5:f3:9b:84:7b:23:d9:cc:21:77:
cb:38:49:da:ac:5c:57:60:4c:4b:c5:1c:ef:2c:60:f1:74:9f:
b7:9b:c0:4a:60:24:0d:7c:cc:59:60:2b:4f:46:b7:12:50:1a:
dc:e2:ee:b0:1f:e2:82:fd:7d:d9:ae:25:e0:66:77:2d:e3:3d:
64:22:e1:81:79:d0:14:83:e0:33:bc:29:14:e2:6c:2b:e2:45:
3f:4d:00:3e:f9:61:ee:2d:c7:e8:3a:53:aa:6f:87:0b:f7:7a:
d8:8d:89:96:7b:ac:0c:9b:d7:d2:ed:9b:06:3d:a6:21:ee:c0:
5c:5b:b2:79:6f:cb:43:1b:63:95:69:99:ba:14:94:42:46:3d:
3a:e7:95:4c:4b:21:f0:d0:7d:8a:01:93:bd:64:56:43:75:4e:
18:7f:1d:3d:a1:d2:35:51:fb:b7:b7:f5:d5:1f:d8:a4:ac:ab:
87:e2:d2:e3:ca:32:20:0d:1c:36:65:42:66:a5:a3:48:73:fe:
f1:7e:6b:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 06:25:48 2026 by rpki-client