
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/398117f0-030c-4fca-8a7f-c35017830f8f/32e42aa1-45c8-38cc-9105-1608a069ffb7.roa
File: 32e42aa1-45c8-38cc-9105-1608a069ffb7.roa (raw, json)
Hash identifier: TnQCHAvj+nTpBQhTBx68WRygEgHQ5DsD9m0xHrxnQ6A=
Subject key identifier: BC:34:47:37:FD:DD:9F:D3:8F:1A:38:50:F6:92:03:B3:73:C4:6E:1E
Certificate issuer: /CN=398117f0-030c-4fca-8a7f-c35017830f8f
Certificate serial: 010D0C9F4328584F7BB314870F2155EAEBC07080
Authority key identifier: D3:3A:96:9F:E5:37:84:BA:35:73:D8:1D:76:AD:EF:9E:96:5D:E1:C2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/398117f0-030c-4fca-8a7f-c35017830f8f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/398117f0-030c-4fca-8a7f-c35017830f8f/32e42aa1-45c8-38cc-9105-1608a069ffb7.roa
Signing time: Tue 13 Oct 2026 01:00:14 +0000
ROA not before: Tue 13 Oct 2026 01:00:14 +0000
ROA not after: Mon 11 Jan 2027 02:00:14 +0000
asID: 26286
IP address blocks: 23.137.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/398117f0-030c-4fca-8a7f-c35017830f8f/398117f0-030c-4fca-8a7f-c35017830f8f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/398117f0-030c-4fca-8a7f-c35017830f8f/398117f0-030c-4fca-8a7f-c35017830f8f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/398117f0-030c-4fca-8a7f-c35017830f8f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 28 Oct 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:7b:b3:14:87:0f:21:55:ea:eb:c0:70:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=398117f0-030c-4fca-8a7f-c35017830f8f
Validity
Not Before: Oct 13 01:00:14 2026 GMT
Not After : Jan 11 02:00:14 2027 GMT
Subject: CN=e894b7ad-6284-49d1-b096-5e860015afe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2c:b4:e7:f7:d8:78:36:40:c5:33:34:d8:31:
2a:a0:4f:e7:d8:25:69:05:7f:d1:59:30:c9:9b:6e:
d1:ae:16:d3:5d:6b:10:73:02:f5:af:2a:96:2d:01:
b9:f0:f4:4e:8d:a3:6a:9f:7b:04:bf:d8:2a:b0:d3:
65:a5:a3:6b:ff:07:86:39:9a:42:b4:e7:dc:37:e8:
6d:fb:d4:00:21:e5:fe:10:28:0c:7e:6a:d0:3e:0a:
e7:4f:eb:60:2b:49:ad:0f:ee:e1:21:4c:d0:da:14:
35:12:d0:6f:bd:d2:fb:3b:99:80:9d:d8:a0:92:5c:
95:c4:12:50:39:74:47:7b:5f:31:3a:0a:2c:7f:c4:
88:3d:47:b5:ed:28:a3:d7:2c:4c:8d:6d:dc:49:59:
f6:11:07:d5:a2:6f:18:ed:69:6a:bc:c8:70:3c:85:
28:4e:5d:ff:89:4d:2e:58:d9:2e:b2:58:b7:e7:da:
69:ec:09:0f:df:5d:1e:a2:ca:5b:4b:d7:30:23:a4:
d1:32:0d:58:0d:fe:9a:1b:a8:77:d5:2d:5b:7a:df:
30:99:39:b9:7e:a0:57:2e:ee:2c:fa:27:77:3e:85:
4c:cb:61:21:8f:66:48:5c:2a:d9:de:87:82:f6:2f:
f2:96:f6:3f:a0:e0:61:27:66:d8:fa:95:3c:a8:39:
80:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:34:47:37:FD:DD:9F:D3:8F:1A:38:50:F6:92:03:B3:73:C4:6E:1E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/398117f0-030c-4fca-8a7f-c35017830f8f/32e42aa1-45c8-38cc-9105-1608a069ffb7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/398117f0-030c-4fca-8a7f-c35017830f8f/398117f0-030c-4fca-8a7f-c35017830f8f.crl
X509v3 Authority Key Identifier:
keyid:D3:3A:96:9F:E5:37:84:BA:35:73:D8:1D:76:AD:EF:9E:96:5D:E1:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/398117f0-030c-4fca-8a7f-c35017830f8f.cer
sbgp-ipAddrBlock: critical
IPv4:
23.137.132.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:68:b5:74:ad:ba:b7:b3:7b:9a:39:11:e4:d1:96:13:35:69:
e6:69:32:bd:f7:f8:c4:b3:02:d7:2f:d3:68:ef:71:53:fa:54:
cd:6d:b8:36:b3:31:b7:2c:a8:8a:86:1a:b9:c6:11:1d:a0:e3:
cf:bd:46:7c:38:77:af:0e:b0:39:3e:b4:a2:62:e5:61:d7:61:
28:f1:2e:74:50:3c:e3:93:3a:2e:2b:19:eb:e3:12:41:8f:e9:
bd:fc:89:e1:b4:a6:86:b3:a4:c6:d2:9e:36:45:c9:8b:9c:60:
57:82:e1:ca:50:5b:cf:1b:a8:1c:ca:62:8a:ca:d7:0f:a3:d4:
8d:d0:b5:b9:67:28:cb:54:0f:2d:0b:6d:da:87:fd:cb:1b:3c:
48:42:e7:88:02:e1:16:fe:fa:ee:a2:3b:63:79:2a:c5:e4:65:
7a:75:da:96:c7:d0:6b:08:2a:26:0b:66:0b:ec:26:69:ac:59:
20:bd:84:de:28:35:68:12:2d:0d:bb:54:69:cb:f3:c8:cb:0c:
80:5d:ff:2d:d7:78:32:f6:69:7a:d6:b2:9c:87:61:6c:54:2e:
9b:9b:af:69:4f:2c:b8:11:29:69:a3:5c:c1:0b:4f:6e:c0:91:
29:45:76:cb:da:10:0f:a3:ff:63:13:1e:b7:c5:ba:2a:78:f8:
bc:39:c9:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:05:37 2026 by rpki-client