
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1e1980b8-0671-3d0e-9e0e-25dcfb50e310.roa
File: 1e1980b8-0671-3d0e-9e0e-25dcfb50e310.roa (raw, json)
Hash identifier: 6KnwPRDTncAGqxC5ErPvcLCpCN0Tzfyh1lwt4s2NvrI=
Subject key identifier: 4A:D4:85:94:B3:02:5F:C0:5E:DF:F0:67:04:8D:F2:3B:11:09:A4:45
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584F549D8B0BF16BA7AF12925260
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1e1980b8-0671-3d0e-9e0e-25dcfb50e310.roa
Signing time: Tue 29 Sep 2026 01:00:12 +0000
ROA not before: Tue 29 Sep 2026 01:00:12 +0000
ROA not after: Mon 28 Dec 2026 02:00:12 +0000
asID: 6762
IP address blocks: 23.37.152.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 22 Oct 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:54:9d:8b:0b:f1:6b:a7:af:12:92:52:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Sep 29 01:00:12 2026 GMT
Not After : Dec 28 02:00:12 2026 GMT
Subject: CN=ae742fc1-5c45-4b5e-9c7f-1c81bc81d7ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:eb:c1:5f:fa:73:90:ec:97:72:b7:a1:80:76:
36:64:e4:04:9c:64:24:24:0b:38:e5:1c:61:ae:6f:
bf:0e:21:e1:88:f6:1b:cb:a7:e3:fa:26:7c:be:65:
87:50:da:bc:ae:36:da:94:4c:f0:d3:d8:29:ed:f3:
8c:f8:98:67:94:d1:61:7e:97:39:0f:ff:ef:09:ea:
d2:69:91:54:6b:10:9b:e5:36:f8:d0:b5:ae:a1:20:
09:21:f7:b9:c7:c6:5b:1b:5c:39:ad:be:43:1c:4f:
8f:2f:68:50:ed:80:e4:a2:19:bf:4c:84:5d:df:0a:
97:b3:af:9c:9e:49:d8:f0:b2:78:ea:68:78:0f:20:
55:c4:da:44:f9:ec:05:f5:8c:01:df:2b:58:76:9b:
59:05:c8:45:90:bc:aa:12:73:5c:c7:f3:70:f8:56:
9e:4b:8b:3d:ca:ed:91:a4:0d:ef:e2:d2:25:1a:a6:
2f:41:90:fb:ae:87:9a:f5:1d:a8:12:48:d7:c3:6c:
2e:50:af:11:a1:a8:cf:24:54:29:8e:ee:ed:ce:8c:
a9:bd:df:e5:94:15:7c:8f:d8:f4:9a:ee:49:17:f4:
16:c1:06:05:1c:9a:67:aa:85:c9:52:8e:da:bb:c6:
f5:bd:63:96:52:49:7f:ec:ea:d0:d9:28:17:aa:02:
49:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:D4:85:94:B3:02:5F:C0:5E:DF:F0:67:04:8D:F2:3B:11:09:A4:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/1e1980b8-0671-3d0e-9e0e-25dcfb50e310.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.37.152.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:88:c1:1d:56:ac:6e:21:45:e5:0e:9b:63:8c:2d:0c:9a:74:
91:2c:0e:a0:a5:5d:17:86:b5:c0:7f:95:7d:bf:0e:25:1d:a3:
21:ef:f8:59:8b:12:8a:f6:6f:46:04:9c:04:12:bb:b1:6d:44:
1f:04:7f:a6:34:2c:57:81:93:84:75:35:90:35:dc:57:3f:0e:
4e:59:9e:62:6b:08:41:6c:58:fa:f6:a6:4d:be:15:1b:a8:7d:
e3:f3:4d:9d:c2:81:bd:86:72:88:a1:c1:02:c0:0a:42:14:bd:
ae:86:8a:e8:ce:4f:6e:3a:5f:64:32:41:b8:80:41:69:df:04:
ac:c3:bd:04:43:25:1a:ec:17:95:db:61:9b:17:87:3f:9f:f4:
75:b7:34:a2:f1:9b:c5:da:af:73:93:05:ba:13:da:79:57:61:
76:0b:7f:7d:91:96:8c:98:08:2d:9d:5c:60:3d:fb:7c:3d:05:
2d:41:45:c9:e3:e8:b9:41:b4:60:2e:2d:07:e4:26:97:ae:ec:
a9:4b:3f:32:7f:d5:af:6d:08:06:bb:46:ad:32:20:2b:ff:d5:
55:ab:86:f6:67:62:87:4a:41:24:62:0b:5a:a5:bf:ef:fe:78:
45:b9:1e:3a:84:99:3e:7d:c7:19:ba:e1:56:4a:ec:69:8a:7a:
ba:bc:40:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 10:17:53 2026 by rpki-client