
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/c53cb806-27f4-343a-9db8-41d80aa3f46b.roa
File: c53cb806-27f4-343a-9db8-41d80aa3f46b.roa (raw, json)
Hash identifier: erwf3IcOMzTU5L+rpN7+9MpelOC3HvkqQ8PdoULc8H8=
Subject key identifier: 47:40:33:4B:46:ED:AA:9F:56:67:8F:3F:EC:2A:89:D2:93:34:AF:1E
Certificate issuer: /CN=09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c
Certificate serial: 010D0C9F4328584E4559F362C7962DE088065800
Authority key identifier: C4:52:EF:29:27:F2:EC:5A:51:3C:C1:72:D6:73:BD:1E:39:05:95:26
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/c53cb806-27f4-343a-9db8-41d80aa3f46b.roa
Signing time: Tue 23 Jun 2026 21:00:12 +0000
ROA not before: Tue 23 Jun 2026 21:00:12 +0000
ROA not after: Mon 21 Sep 2026 21:00:12 +0000
asID: 399989
IP address blocks: 23.143.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Jul 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:45:59:f3:62:c7:96:2d:e0:88:06:58:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c
Validity
Not Before: Jun 23 21:00:12 2026 GMT
Not After : Sep 21 21:00:12 2026 GMT
Subject: CN=96310ce3-3631-43e5-884f-f52f235bb149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b7:d6:72:8e:f8:2a:46:aa:5f:7b:c3:8d:a8:
3b:65:c3:3f:2e:3a:1f:41:8a:9c:bb:d4:1b:20:0f:
f1:a0:7d:8b:39:86:72:bf:fb:82:c1:60:b1:3b:cc:
ac:64:2b:be:4f:07:8b:3c:b8:89:1f:b1:79:d4:b5:
7e:21:e0:6b:ad:4f:3d:07:eb:95:e5:29:6f:2e:bd:
fd:78:20:e6:dc:51:dd:09:4f:20:61:b7:4a:3b:e5:
90:b9:2f:c5:c4:bf:e4:0f:39:9d:11:7d:38:b2:a7:
63:1e:3c:3c:02:3f:d7:87:5b:b9:5a:f2:28:c9:26:
69:e7:27:39:a6:74:a8:de:cc:2b:5e:cb:3c:7e:84:
61:75:c6:ff:e4:d9:b7:62:3d:2f:72:53:dc:e9:28:
5e:15:24:f3:84:3f:f6:f9:21:f5:7e:b4:8c:d6:3b:
4a:27:fc:1c:ac:5b:d8:dc:a4:87:62:d2:8d:86:66:
7a:18:e1:9e:a4:3a:53:18:d0:0f:b6:66:cb:9e:d2:
41:e2:70:bb:3c:31:22:2f:01:8d:02:4e:96:87:1e:
e8:3a:ed:f2:2c:3a:d0:13:0f:88:40:59:20:a1:0d:
5d:77:3a:79:3d:74:0e:2e:6d:9e:47:53:3f:03:c8:
44:02:b9:c4:7d:50:72:5e:25:49:77:c5:f2:3f:2a:
6a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:40:33:4B:46:ED:AA:9F:56:67:8F:3F:EC:2A:89:D2:93:34:AF:1E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/c53cb806-27f4-343a-9db8-41d80aa3f46b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.crl
X509v3 Authority Key Identifier:
keyid:C4:52:EF:29:27:F2:EC:5A:51:3C:C1:72:D6:73:BD:1E:39:05:95:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.cer
sbgp-ipAddrBlock: critical
IPv4:
23.143.104.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:ab:1c:9c:4f:e8:bd:56:87:76:59:5f:15:2d:2d:ff:70:27:
bd:73:a0:20:bd:28:0b:7d:6d:be:28:03:0e:4a:14:ad:46:dd:
a4:10:c4:34:c3:c4:94:d2:9b:72:be:1a:75:01:0e:19:97:09:
5a:d4:6e:5d:5b:95:90:62:8b:fc:f5:b6:1c:6b:06:4c:94:c5:
83:b9:27:81:e3:36:54:0b:07:76:8f:8f:9c:dd:3c:66:43:63:
db:c0:3d:1a:b9:46:64:4e:40:6f:81:03:da:65:05:bf:d5:98:
b8:c0:58:a3:f6:00:f6:3f:d8:3a:2c:04:5d:94:0a:59:8e:c0:
38:0c:f5:2d:51:5c:df:84:d4:c5:46:b5:62:f4:c5:72:ad:cd:
ad:5e:b9:3a:7e:19:70:03:a2:f1:73:ca:9c:a1:f0:49:79:ea:
ee:a1:2a:91:ff:1f:1b:16:c7:e2:3f:81:a1:fc:80:20:45:99:
8d:87:86:e6:14:eb:f0:c6:58:4f:e8:f9:87:5e:cc:52:cc:77:
b1:91:ca:f7:fc:c2:51:71:3d:1a:60:b4:d1:82:ea:e6:4d:db:
8f:f9:1c:7b:c5:fe:56:40:d6:29:c7:3c:c5:f4:c7:1a:51:d9:
8e:cf:14:38:26:e9:2a:54:a3:08:1b:e5:bc:32:82:6a:44:de:
dd:e5:6b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:29:19 2026 by rpki-client