
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/917f6233-a0b4-4398-980d-f443910c2d2e/e58c3c0b-5966-3138-bbde-accd99524427.roa
File: e58c3c0b-5966-3138-bbde-accd99524427.roa (raw, json)
Hash identifier: jf77zxqWUdtCMEDw/KF7DFe4jlamEOSfYi9lm0RLLSg=
Subject key identifier: F0:D9:1A:4C:E9:1C:F2:0C:19:AD:1D:98:67:BC:50:5C:60:E9:9A:A8
Certificate issuer: /CN=917f6233-a0b4-4398-980d-f443910c2d2e
Certificate serial: 010D0C9F4328584F2ABD0AFEE99E91F386F4D380
Authority key identifier: 0D:5F:05:D2:AF:C1:9E:BC:96:90:B6:FB:6A:DF:B1:9C:13:53:29:C6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/917f6233-a0b4-4398-980d-f443910c2d2e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/917f6233-a0b4-4398-980d-f443910c2d2e/e58c3c0b-5966-3138-bbde-accd99524427.roa
Signing time: Mon 14 Sep 2026 01:00:12 +0000
ROA not before: Mon 14 Sep 2026 01:00:12 +0000
ROA not after: Sun 13 Dec 2026 02:00:12 +0000
asID: 174
IP address blocks: 23.144.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/917f6233-a0b4-4398-980d-f443910c2d2e/917f6233-a0b4-4398-980d-f443910c2d2e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/917f6233-a0b4-4398-980d-f443910c2d2e/917f6233-a0b4-4398-980d-f443910c2d2e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/917f6233-a0b4-4398-980d-f443910c2d2e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 20 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:2a:bd:0a:fe:e9:9e:91:f3:86:f4:d3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=917f6233-a0b4-4398-980d-f443910c2d2e
Validity
Not Before: Sep 14 01:00:12 2026 GMT
Not After : Dec 13 02:00:12 2026 GMT
Subject: CN=631b35fe-f022-4136-84b7-2f55e93b1591
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ba:8a:32:14:6c:38:a4:be:eb:25:1d:0e:84:
24:66:e3:96:4a:6e:40:9f:b4:81:28:2d:0c:78:83:
de:80:b2:36:5c:89:30:f8:0c:b1:8f:4a:b2:3b:6c:
2f:9d:b9:ab:15:20:27:8d:64:1d:c7:b4:30:36:25:
44:b4:c1:20:d2:32:3e:ff:3a:59:aa:20:5a:d6:55:
fe:4f:64:e1:a1:10:27:05:90:04:60:f3:40:9b:f8:
d7:30:50:46:4e:ef:5b:1d:cc:1d:eb:6f:d5:c4:33:
41:44:21:ad:b0:d2:34:87:c3:76:56:03:b8:04:99:
10:f1:e8:0c:34:15:1d:88:7d:ae:34:37:00:3e:85:
22:82:73:61:59:eb:e9:85:35:66:8d:72:c9:dc:d3:
c5:8d:65:31:ee:28:f3:30:70:c3:ca:79:6e:6d:21:
77:d7:5e:ea:cc:bf:5c:c8:3c:a4:26:59:30:84:9e:
7d:fb:95:7b:6f:28:91:cd:d1:8c:c3:f3:09:c3:92:
d4:a5:0f:db:f7:4a:24:86:88:50:fc:95:52:9c:a9:
1d:30:8f:8f:dc:f3:7c:4d:fe:08:98:b3:53:08:a2:
b5:e9:75:ab:8d:25:89:00:59:77:d4:aa:1c:fa:82:
89:d8:6a:ae:60:5e:05:86:77:a5:db:b0:bc:3c:86:
6c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:D9:1A:4C:E9:1C:F2:0C:19:AD:1D:98:67:BC:50:5C:60:E9:9A:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/917f6233-a0b4-4398-980d-f443910c2d2e/e58c3c0b-5966-3138-bbde-accd99524427.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/917f6233-a0b4-4398-980d-f443910c2d2e/917f6233-a0b4-4398-980d-f443910c2d2e.crl
X509v3 Authority Key Identifier:
keyid:0D:5F:05:D2:AF:C1:9E:BC:96:90:B6:FB:6A:DF:B1:9C:13:53:29:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/917f6233-a0b4-4398-980d-f443910c2d2e.cer
sbgp-ipAddrBlock: critical
IPv4:
23.144.4.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:d4:8f:e0:23:30:68:5d:40:d0:8f:ef:2b:4b:42:1f:28:d5:
78:6e:bf:48:8c:b1:a2:fc:54:04:01:93:00:dc:6d:63:58:1e:
2c:34:aa:31:39:ca:13:ad:70:d0:9d:06:c8:8d:5e:7d:90:1b:
84:37:1b:b2:c8:23:6e:04:94:10:3b:32:ed:58:7b:bc:de:3e:
36:50:c6:64:24:b1:3d:e4:c1:43:d5:41:9f:56:39:85:dc:a6:
d5:e3:90:9b:b5:a8:4e:f1:69:ac:b4:15:6f:86:7f:1a:68:da:
ca:2b:21:b3:fa:eb:48:83:e9:81:77:0f:8b:c9:90:a7:61:d5:
70:3f:8f:1d:41:62:20:56:a0:3f:16:51:74:31:b0:d9:e9:c5:
bb:49:2d:cb:b4:7e:1e:21:f8:a5:d9:5e:4c:17:81:90:d5:07:
da:63:e0:c3:56:57:d0:39:25:11:07:ea:6f:8c:f5:d0:31:4d:
64:ae:6d:e6:f3:c3:d6:23:a0:5c:ef:c7:40:35:e3:84:67:04:
55:72:88:ea:a7:a9:b9:77:99:62:d2:37:8d:8f:66:28:d6:b1:
83:92:0a:ad:8f:8b:11:54:87:de:59:77:4f:70:35:c8:06:8b:
6f:9e:f1:c1:e5:72:53:3d:30:0c:fd:6f:5b:d9:6a:58:ea:8c:
5c:aa:4d:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 14:31:13 2026 by rpki-client