
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/10e63d97-2f16-4c66-8928-7a89ff99c05c/f29c577b-2e1c-3f43-ad6c-d57202618454.roa
File: f29c577b-2e1c-3f43-ad6c-d57202618454.roa (raw, json)
Hash identifier: JDJiT1uXQtmxDtZnzL0X+w/x2tw3YitRySf3uwE0vbE=
Subject key identifier: 61:47:13:FC:11:FA:CD:DD:3A:8D:16:C8:5D:A6:1E:8C:C0:BB:E8:31
Certificate issuer: /CN=10e63d97-2f16-4c66-8928-7a89ff99c05c
Certificate serial: 010D0C9F4328584F82ADADCE4C4D502A02B16E00
Authority key identifier: 21:61:2B:B1:AD:D4:34:A7:40:4E:12:B2:49:63:1A:50:07:25:61:28
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/10e63d97-2f16-4c66-8928-7a89ff99c05c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/10e63d97-2f16-4c66-8928-7a89ff99c05c/f29c577b-2e1c-3f43-ad6c-d57202618454.roa
Signing time: Thu 15 Oct 2026 13:00:13 +0000
ROA not before: Thu 15 Oct 2026 13:00:13 +0000
ROA not after: Wed 13 Jan 2027 14:00:13 +0000
asID: 396108
IP address blocks: 23.140.164.0/24 maxlen: 24
2602:f65e:aa::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/10e63d97-2f16-4c66-8928-7a89ff99c05c/10e63d97-2f16-4c66-8928-7a89ff99c05c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/10e63d97-2f16-4c66-8928-7a89ff99c05c/10e63d97-2f16-4c66-8928-7a89ff99c05c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/10e63d97-2f16-4c66-8928-7a89ff99c05c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 29 Oct 2026 03:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:82:ad:ad:ce:4c:4d:50:2a:02:b1:6e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10e63d97-2f16-4c66-8928-7a89ff99c05c
Validity
Not Before: Oct 15 13:00:13 2026 GMT
Not After : Jan 13 14:00:13 2027 GMT
Subject: CN=0a99224f-4ef1-4c38-b5c5-47658014a7f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fc:96:58:7e:94:ad:86:bb:ab:45:c9:7b:f1:
b9:05:29:a1:43:67:ac:77:a6:2d:89:7a:b7:46:61:
39:86:2d:64:19:7d:15:8a:a0:dc:20:5e:20:d5:80:
19:74:d1:87:4e:93:66:56:dc:88:6e:a8:01:8c:1a:
a0:f1:cd:de:49:40:22:94:b2:26:a0:9b:47:60:99:
62:2e:54:d2:c6:ea:f1:e6:39:0c:4b:9c:bb:6b:0c:
46:fc:a8:2a:e5:b2:35:ce:26:3e:4a:15:16:8f:27:
9f:40:e6:7f:1e:46:56:66:e1:af:07:40:8c:5f:db:
5f:aa:14:9a:8a:95:38:66:60:11:35:37:ce:18:98:
fb:93:2b:6f:40:bb:a2:a1:03:bf:8a:69:16:28:f5:
c1:a0:94:ea:29:e6:5d:07:e9:43:c0:dd:f8:3c:d6:
56:28:0f:e7:f3:2a:41:cd:8b:e8:2e:0b:94:26:a3:
f7:9b:6c:df:d9:37:68:cc:ee:1c:f1:fb:96:2c:dd:
5c:d5:53:21:4e:25:67:74:43:f7:03:ad:49:19:13:
fa:5d:21:2d:a0:11:fc:2a:7b:66:f5:de:2d:f1:5d:
37:66:48:3d:0f:48:d1:08:61:1c:3a:48:1c:56:a6:
34:16:d2:8a:6e:b7:f8:67:6f:53:aa:35:00:e1:aa:
48:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:47:13:FC:11:FA:CD:DD:3A:8D:16:C8:5D:A6:1E:8C:C0:BB:E8:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/10e63d97-2f16-4c66-8928-7a89ff99c05c/f29c577b-2e1c-3f43-ad6c-d57202618454.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/10e63d97-2f16-4c66-8928-7a89ff99c05c/10e63d97-2f16-4c66-8928-7a89ff99c05c.crl
X509v3 Authority Key Identifier:
keyid:21:61:2B:B1:AD:D4:34:A7:40:4E:12:B2:49:63:1A:50:07:25:61:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/10e63d97-2f16-4c66-8928-7a89ff99c05c.cer
sbgp-ipAddrBlock: critical
IPv4:
23.140.164.0/24
IPv6:
2602:f65e:aa::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bc:d6:5a:68:42:87:6d:69:56:53:37:db:b3:9b:e7:47:67:2f:
78:77:12:ee:11:8e:31:a5:26:6d:ff:b5:69:5f:ab:ff:75:59:
43:f7:25:3f:83:cf:18:92:44:99:80:ed:c7:dd:be:8e:fa:f8:
ff:a8:1d:e5:c7:57:cf:ac:08:86:3f:c6:97:da:41:50:df:e7:
61:76:a5:82:3c:3d:d3:ee:86:7e:1d:c0:a0:79:a4:1c:10:c4:
a8:7b:aa:0a:99:8b:91:da:05:34:47:49:60:d9:86:ea:c0:8a:
7f:cf:0d:3c:4b:1d:c3:40:80:2e:f4:27:38:f0:b7:50:31:65:
3b:79:2f:d3:17:a1:c1:cf:fc:e1:95:f0:1d:51:da:3e:a4:d3:
84:6e:d7:c3:97:eb:e6:cb:92:c5:2a:ea:03:a4:58:a9:68:65:
ff:c7:9f:9a:6f:d6:92:ab:b2:8f:da:0a:24:2a:29:7e:04:fb:
a7:5d:5d:13:5b:75:3a:4f:1f:54:bf:43:b5:cf:a2:5d:33:08:
70:ff:c7:49:eb:28:5a:77:01:9e:33:3c:77:5e:e1:15:1e:8d:
d0:45:f8:14:02:90:4e:fe:4c:47:9f:c5:31:2d:ac:f1:aa:ab:
2a:c1:ce:7c:3b:13:42:c4:14:69:a8:70:5a:cc:ec:20:70:19:
f5:45:b9:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 05:04:39 2026 by rpki-client