
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1bd0891d-6973-4c6e-a3f9-2c0866e229a1/db99c048-07db-367d-a8d7-c60896aca161.roa
File: db99c048-07db-367d-a8d7-c60896aca161.roa (raw, json)
Hash identifier: 1eOD6Vgvpo4yfllaTHfiMm6zlaXtufNIrjEniyQoOLI=
Subject key identifier: C8:0D:40:83:79:A0:3E:38:27:FE:6E:40:81:FB:FA:8E:87:45:DA:D8
Certificate issuer: /CN=1bd0891d-6973-4c6e-a3f9-2c0866e229a1
Certificate serial: 010D0C9F4328584D2BDA040EF4EB620F557E8800
Authority key identifier: 35:09:98:B4:82:D7:06:45:56:5F:77:A3:0B:70:A1:93:AC:66:7B:55
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1bd0891d-6973-4c6e-a3f9-2c0866e229a1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1bd0891d-6973-4c6e-a3f9-2c0866e229a1/db99c048-07db-367d-a8d7-c60896aca161.roa
Signing time: Sun 15 Mar 2026 01:00:32 +0000
ROA not before: Sun 15 Mar 2026 01:00:32 +0000
ROA not after: Sat 13 Jun 2026 01:00:32 +0000
asID: 979
IP address blocks: 23.141.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1bd0891d-6973-4c6e-a3f9-2c0866e229a1/1bd0891d-6973-4c6e-a3f9-2c0866e229a1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1bd0891d-6973-4c6e-a3f9-2c0866e229a1/1bd0891d-6973-4c6e-a3f9-2c0866e229a1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1bd0891d-6973-4c6e-a3f9-2c0866e229a1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 20 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:2b:da:04:0e:f4:eb:62:0f:55:7e:88:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bd0891d-6973-4c6e-a3f9-2c0866e229a1
Validity
Not Before: Mar 15 01:00:32 2026 GMT
Not After : Jun 13 01:00:32 2026 GMT
Subject: CN=999f9203-21a7-489d-94b3-f59090348e9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ac:13:00:df:73:e9:fc:62:cb:0a:a7:f4:f8:
a7:1c:b9:6e:16:4b:c7:18:e4:02:bb:ef:83:6a:5c:
f9:8e:ad:38:fe:4f:1d:22:76:e7:0f:b7:8c:cf:1d:
35:24:92:83:64:76:12:8d:51:db:32:db:ac:e1:e5:
57:bb:fc:b7:91:6d:c6:40:b7:ea:c3:5d:4f:e2:41:
a5:e9:ba:2a:5e:f6:61:e2:ba:b1:e1:e7:f0:71:0e:
00:22:2c:00:a8:46:e3:a8:4a:42:5d:99:04:96:8e:
f6:e1:59:80:16:00:77:86:5b:f5:14:52:96:5e:b7:
5d:ff:b2:0c:f9:26:6c:74:e0:de:22:c8:c0:1d:16:
77:af:79:cd:fe:9b:d6:32:6f:e2:0e:92:85:5c:8f:
e1:4b:31:10:c2:48:11:69:21:0b:1d:2a:77:7d:92:
3b:d3:a7:b6:c2:2a:23:4f:df:46:2d:f1:3f:30:93:
5c:3f:96:88:8e:b1:e7:57:6c:52:5f:c8:70:cd:56:
9a:7e:1f:6e:5d:d8:1a:6b:05:33:a5:18:ee:b0:52:
0e:71:d8:ee:94:3e:9a:07:c9:77:85:b3:c3:36:37:
34:4f:d9:8a:3c:36:f4:e7:1e:1a:7e:df:be:13:29:
c6:54:9d:e7:aa:2f:09:69:aa:7b:6f:ee:2c:55:3e:
a5:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:0D:40:83:79:A0:3E:38:27:FE:6E:40:81:FB:FA:8E:87:45:DA:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1bd0891d-6973-4c6e-a3f9-2c0866e229a1/db99c048-07db-367d-a8d7-c60896aca161.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1bd0891d-6973-4c6e-a3f9-2c0866e229a1/1bd0891d-6973-4c6e-a3f9-2c0866e229a1.crl
X509v3 Authority Key Identifier:
keyid:35:09:98:B4:82:D7:06:45:56:5F:77:A3:0B:70:A1:93:AC:66:7B:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1bd0891d-6973-4c6e-a3f9-2c0866e229a1.cer
sbgp-ipAddrBlock: critical
IPv4:
23.141.172.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:bc:8c:cc:34:6a:fd:06:c2:e2:4f:7d:c2:90:2a:84:3f:ad:
22:bf:95:ea:cd:2b:da:1b:0e:3c:70:d7:84:da:d1:a8:1a:02:
be:da:45:7e:61:66:d2:00:0d:ca:a3:14:9a:18:ac:b5:c5:e9:
66:5a:4f:18:ed:86:2a:e6:81:bc:bb:7e:1a:b7:77:14:fd:90:
cd:18:4e:7e:6f:67:49:59:ba:91:5b:d2:e9:a0:08:d4:37:5e:
23:47:9a:f6:2c:51:ed:0a:f2:f1:c9:c2:68:6e:90:4d:c2:cf:
36:22:b4:aa:4e:04:42:3a:ca:04:61:9f:49:94:08:37:ec:15:
8c:3f:c4:42:97:ec:b3:ed:39:ce:69:e9:44:c2:d7:bc:53:12:
56:57:fa:eb:2f:f8:56:f0:f7:2c:37:c0:7f:20:10:aa:84:1f:
11:94:6b:64:1f:cf:53:66:68:75:30:12:35:cc:11:db:a2:bb:
d4:c8:e7:8d:3d:2d:d5:a9:92:da:d6:a5:f2:f9:ae:a2:1a:7e:
44:ef:93:b5:0e:e1:48:6e:19:f6:21:a5:3f:2f:95:d4:94:d9:
0c:6b:d8:f9:a9:89:ac:be:d7:10:3e:f7:e1:c0:29:46:11:55:
f4:c0:ed:e3:9c:97:c4:2a:5f:e3:63:71:6e:ee:72:5e:a7:ea:
54:6d:27:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 18 14:22:32 2026 by rpki-client