
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/91916ab8-35b1-3ae4-b4a6-2bd8dc15fbc6.roa
File: 91916ab8-35b1-3ae4-b4a6-2bd8dc15fbc6.roa (raw, json)
Hash identifier: gAOoUfXRxflvMH3x3j445Vb5MXfTCIQtbGTjc+I/lsg=
Subject key identifier: 3B:CE:29:20:0A:31:F4:11:43:F8:F7:31:6A:2E:9C:9D:2D:D1:D3:BE
Certificate issuer: /CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5
Certificate serial: 010D0C9F4328584CAA273241E8BA3C205A31CA40
Authority key identifier: 84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/91916ab8-35b1-3ae4-b4a6-2bd8dc15fbc6.roa
Signing time: Tue 27 Jan 2026 14:00:36 +0000
ROA not before: Tue 27 Jan 2026 14:00:36 +0000
ROA not after: Mon 27 Apr 2026 13:00:36 +0000
asID: 400072
IP address blocks: 23.236.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Feb 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:aa:27:32:41:e8:ba:3c:20:5a:31:ca:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5edf021-0298-4a81-97d5-1c85a2eb45f5
Validity
Not Before: Jan 27 14:00:36 2026 GMT
Not After : Apr 27 13:00:36 2026 GMT
Subject: CN=0b572de0-1cf9-46b9-ad54-5576ceb4007a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:1c:21:63:0e:5b:0f:f1:13:35:c8:c7:85:69:
45:64:e9:87:ae:43:71:7c:79:f3:9f:87:1b:14:fe:
3c:8c:ed:01:58:ad:62:28:12:e6:36:8f:82:11:98:
01:fc:ce:51:19:5c:58:92:2b:b6:38:aa:88:d7:ba:
70:66:b8:5e:a2:27:5e:e4:65:c5:7b:48:73:bc:f3:
d5:1e:09:20:10:91:99:ef:a7:82:b5:8d:da:34:d5:
9b:1c:39:29:d3:03:8f:5c:b0:cc:9f:9b:0b:b1:61:
f4:53:91:89:0d:bb:d8:9d:20:43:2a:c1:95:e5:d4:
cb:7d:55:65:36:69:33:db:ab:16:f2:41:9c:42:05:
09:9a:be:bd:67:b8:db:5d:67:18:47:44:bd:89:07:
78:38:76:2a:32:1f:4f:1f:ee:75:f8:f8:00:c5:fd:
cf:fc:eb:71:75:1b:2a:67:a4:de:7b:b5:f0:b9:54:
58:d2:76:f2:f1:2c:e0:06:4e:5b:e7:aa:84:15:9e:
c4:f1:d2:4a:cb:5f:c8:07:b8:30:de:56:0d:2d:b8:
86:5a:4f:1f:7c:f8:c4:c9:d0:80:fa:22:2c:40:34:
f1:d1:32:81:35:e8:2e:6b:c7:81:20:6f:cb:eb:ad:
18:b8:93:68:f8:60:5c:77:4b:06:ed:4a:a4:ca:c8:
7d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:CE:29:20:0A:31:F4:11:43:F8:F7:31:6A:2E:9C:9D:2D:D1:D3:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/91916ab8-35b1-3ae4-b4a6-2bd8dc15fbc6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5/b5edf021-0298-4a81-97d5-1c85a2eb45f5.crl
X509v3 Authority Key Identifier:
keyid:84:09:0C:42:A0:D9:9F:EA:DA:A8:FD:C3:6D:33:A5:F8:8B:E2:20:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b5edf021-0298-4a81-97d5-1c85a2eb45f5.cer
sbgp-ipAddrBlock: critical
IPv4:
23.236.250.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:81:48:72:c0:6d:b3:f4:59:0e:89:23:11:b2:26:52:17:51:
db:b9:a3:9e:b5:e5:05:d8:53:2e:c0:29:e8:78:d0:84:8c:ba:
c2:16:a3:1a:22:ea:84:44:1e:70:6f:d8:e2:6f:3b:66:d5:a8:
21:e6:15:8e:1d:02:98:d5:ce:df:ec:9b:36:00:72:fe:8c:75:
a8:68:e4:98:78:57:62:0c:ef:24:69:bc:62:1b:fd:ea:29:1c:
dd:f7:1e:02:ee:85:88:8f:51:0f:4b:5d:8b:b4:06:ce:e2:61:
74:75:91:69:76:c8:53:eb:a7:fb:7a:ef:b4:61:9f:59:76:cc:
49:3b:1f:57:4f:47:04:0f:54:f7:cd:46:38:c6:f0:3e:1a:0f:
22:08:38:83:74:76:7a:60:ab:71:11:73:b1:84:e8:f1:b2:03:
8b:74:f3:d0:2b:53:66:76:a2:49:99:eb:34:15:38:50:9c:fb:
e9:2e:53:cf:ad:8c:ed:55:35:6b:c2:35:37:21:c4:7b:db:32:
d2:a4:ab:ea:eb:0e:78:1e:46:48:0d:6c:c5:3f:5d:ff:90:44:
f5:5c:cb:5e:37:37:2a:21:6c:d0:92:30:04:79:4f:6d:a6:59:
d4:6a:19:77:08:84:c3:ca:a9:b3:bb:ee:13:30:b6:cf:fc:2f:
6e:c1:b5:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 20:54:52 2026 by rpki-client