
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cf993acd-2189-350f-94b6-2372e26e4f44.roa
File: cf993acd-2189-350f-94b6-2372e26e4f44.roa (raw, json)
Hash identifier: AXvWVNsRj093PcIo/abDqvEVtzW7ZTrTdb4COXiBAzI=
Subject key identifier: 77:DE:EE:28:99:39:74:14:62:9A:67:12:EC:72:AD:CC:6C:AC:B3:9C
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584F7A2CB82E8D73372FD444D980
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cf993acd-2189-350f-94b6-2372e26e4f44.roa
Signing time: Mon 12 Oct 2026 11:54:10 +0000
ROA not before: Mon 12 Oct 2026 11:54:10 +0000
ROA not after: Sun 10 Jan 2027 12:54:10 +0000
asID: 32787
IP address blocks: 23.40.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 24 Oct 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:7a:2c:b8:2e:8d:73:37:2f:d4:44:d9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Oct 12 11:54:10 2026 GMT
Not After : Jan 10 12:54:10 2027 GMT
Subject: CN=abc24d3d-a88c-4b11-8b8b-a0ed09734d40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d0:7f:48:d6:ee:ef:26:5d:c9:71:fc:29:79:
25:93:26:85:33:79:9b:22:f0:f8:66:bf:35:2b:bd:
07:d8:73:6b:b1:80:1b:f0:ef:1e:66:ea:60:e9:00:
d7:96:f3:3c:e1:21:da:f0:56:27:7b:6d:29:de:2f:
80:8e:34:9f:9c:d6:16:e2:d2:fd:96:29:90:3a:85:
15:4a:20:71:58:e1:77:86:df:fd:73:98:1b:f1:79:
a0:50:1b:12:0a:62:2f:91:78:d7:92:fe:0c:1c:9c:
71:51:67:f5:dc:f4:ac:27:d3:4e:79:ed:32:a3:89:
b1:5f:c0:05:d3:03:d7:5c:36:7c:79:f5:cb:92:3d:
58:21:68:c3:28:03:1b:3f:7a:01:6f:b0:29:33:00:
2b:17:7b:88:fb:ad:d0:9e:36:6b:d3:5a:9b:ca:a7:
ef:21:9b:6c:f8:f2:a6:86:b8:4e:8f:78:24:43:e0:
78:e0:30:33:81:a3:9b:a1:82:08:70:71:a8:7c:6d:
a3:b5:76:0f:41:c5:6a:1d:08:00:9c:8e:b0:a4:79:
66:f2:a7:38:b4:50:17:9e:2d:eb:8c:4e:c2:4b:a4:
dd:7a:de:c3:6d:15:2e:f3:dc:c0:b0:14:21:ab:98:
9d:fa:9a:ac:b4:d2:df:91:da:07:21:1b:b7:c1:ed:
f1:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:DE:EE:28:99:39:74:14:62:9A:67:12:EC:72:AD:CC:6C:AC:B3:9C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cf993acd-2189-350f-94b6-2372e26e4f44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv4:
23.40.106.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:37:f8:1c:fc:e7:ba:73:e6:8a:6f:a5:49:3f:5c:5d:1a:81:
e2:60:ad:a5:0d:81:a5:e9:58:15:9d:f7:17:56:4d:8a:5d:cd:
96:d9:95:00:65:52:6d:f8:08:e8:4d:75:6a:2c:ee:85:88:e6:
dc:c2:34:af:d9:32:66:a8:70:5e:1d:ed:fe:33:0c:4b:24:08:
3e:53:c1:a1:75:52:f3:28:97:ba:c9:4f:a3:84:3b:1e:af:2f:
04:b9:30:e4:e4:02:e9:53:7d:5a:2d:72:4e:27:32:83:89:2e:
57:81:f3:1c:82:02:11:f4:d0:93:af:a5:43:fb:59:63:55:ef:
95:16:67:5a:64:6f:ea:1d:3e:6e:f2:74:15:7c:43:2f:53:e6:
76:35:2b:1b:0c:11:ce:01:1f:4a:06:67:5c:bc:82:b4:29:4b:
1a:3e:b4:c9:60:cc:ec:14:37:66:20:d4:5a:47:04:99:15:25:
15:05:70:b8:27:ab:a2:ae:0f:21:5a:dc:cf:f7:97:44:bc:32:
f6:9a:aa:86:54:6f:5c:3e:a7:77:99:37:bc:13:75:c5:0e:8a:
59:17:6f:78:01:64:1f:53:e2:f3:f1:33:47:bb:95:64:51:51:
c7:c7:f2:da:06:66:5e:07:77:f5:95:63:1a:f8:1f:fd:6f:2d:
4b:30:24:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 14:10:56 2026 by rpki-client