
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/24597156-139e-456b-b7b5-78502f61a0ca/23acbbe6-9adf-3ee2-827c-778ea96eba04.roa
File: 23acbbe6-9adf-3ee2-827c-778ea96eba04.roa (raw, json)
Hash identifier: c4BJ0/tmCFnGMFViTqBdvAJx1ubUGkq/jUy0IyClqhI=
Subject key identifier: B8:6A:07:5A:F4:A2:FD:03:09:19:76:80:18:D9:54:B4:87:4A:14:8F
Certificate issuer: /CN=24597156-139e-456b-b7b5-78502f61a0ca
Certificate serial: 010D0C9F4328584CDB01FF4ADFAC2F8A1A753980
Authority key identifier: E1:2F:81:3A:39:44:92:EA:C1:93:2D:14:88:3B:97:E2:30:23:AD:40
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/24597156-139e-456b-b7b5-78502f61a0ca.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/24597156-139e-456b-b7b5-78502f61a0ca/23acbbe6-9adf-3ee2-827c-778ea96eba04.roa
Signing time: Sat 14 Feb 2026 02:00:32 +0000
ROA not before: Sat 14 Feb 2026 02:00:32 +0000
ROA not after: Fri 15 May 2026 01:00:32 +0000
asID: 1002
IP address blocks: 23.137.56.0/24 maxlen: 24
23.137.57.0/24 maxlen: 24
23.137.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/24597156-139e-456b-b7b5-78502f61a0ca/24597156-139e-456b-b7b5-78502f61a0ca.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/24597156-139e-456b-b7b5-78502f61a0ca/24597156-139e-456b-b7b5-78502f61a0ca.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/24597156-139e-456b-b7b5-78502f61a0ca.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:db:01:ff:4a:df:ac:2f:8a:1a:75:39:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24597156-139e-456b-b7b5-78502f61a0ca
Validity
Not Before: Feb 14 02:00:32 2026 GMT
Not After : May 15 01:00:32 2026 GMT
Subject: CN=67f641cd-84e1-444e-834c-2e0bb75a2d4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:54:42:7a:d4:75:ea:0e:37:71:1a:32:5a:aa:
65:ac:f2:b1:8c:3d:1d:f8:29:fe:c9:bf:f9:47:2a:
40:8e:87:dc:23:29:d3:4c:bc:c4:8b:cb:d6:5f:d2:
5d:ac:c1:84:a5:9f:6d:f0:34:e5:d4:09:28:f2:b1:
4a:53:31:c2:0d:70:18:f2:3a:5b:4c:1d:4a:fb:a4:
8f:1b:a0:c4:b1:b0:63:8c:cb:7f:d3:f3:21:e6:96:
5b:34:aa:5a:08:c2:1f:36:c2:96:c7:27:cf:b8:a1:
89:21:0a:15:d0:c3:c0:c2:ae:59:ae:08:9e:dd:a8:
55:89:6a:24:09:26:b8:dc:6d:77:ef:b0:8c:18:72:
e4:5c:b2:af:63:9f:17:ef:24:c2:20:f1:1f:97:80:
78:eb:28:5c:da:97:bf:d5:c4:a4:3c:cc:7a:68:9b:
d9:67:3a:10:2a:28:a4:96:39:72:4c:55:24:a6:4f:
81:e7:6c:54:69:55:63:6d:dc:6e:98:5b:0e:bd:b1:
5d:c7:87:77:23:80:61:dd:7f:99:6f:16:1a:2a:13:
2d:1f:7e:06:57:e5:1b:d6:8b:f8:62:14:47:1e:fa:
b9:c6:4c:1f:db:06:ef:70:4e:6f:dd:60:49:2d:8b:
a2:34:73:f7:ed:2a:60:00:8c:2b:6b:24:50:ff:ba:
04:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:6A:07:5A:F4:A2:FD:03:09:19:76:80:18:D9:54:B4:87:4A:14:8F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/24597156-139e-456b-b7b5-78502f61a0ca/23acbbe6-9adf-3ee2-827c-778ea96eba04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/24597156-139e-456b-b7b5-78502f61a0ca/24597156-139e-456b-b7b5-78502f61a0ca.crl
X509v3 Authority Key Identifier:
keyid:E1:2F:81:3A:39:44:92:EA:C1:93:2D:14:88:3B:97:E2:30:23:AD:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/24597156-139e-456b-b7b5-78502f61a0ca.cer
sbgp-ipAddrBlock: critical
IPv4:
23.137.56.0-23.137.58.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:87:82:6f:b1:e3:f9:06:3b:b9:20:fd:13:f3:d6:5f:11:1b:
99:03:eb:5d:5f:4a:50:ff:75:bc:92:b5:c7:ff:2a:5a:a7:c3:
43:f2:58:ec:72:81:a1:8f:2b:9d:16:a9:ea:e7:dc:e6:d5:ec:
1a:c5:7e:9a:9b:68:43:3a:0b:1e:56:04:5f:0f:0e:9d:b8:75:
70:02:33:71:c3:8c:36:96:fd:b1:9a:ea:72:6a:f7:8b:2e:c8:
eb:52:ac:2f:e6:4e:35:28:d3:4b:f3:3e:77:44:a4:a4:9c:59:
2a:b4:d1:7d:c3:78:48:ab:bd:fb:50:07:6e:68:33:12:1f:c9:
55:70:c1:04:28:b3:81:08:ae:44:28:55:ed:1f:a3:3c:7d:6d:
2d:1e:7b:31:0a:4c:3f:85:ba:e3:28:2d:b2:b6:26:bd:86:80:
56:53:5a:02:1e:32:a2:aa:1f:7b:c4:d0:0f:aa:37:38:b6:76:
97:e3:5d:79:92:00:f4:92:1d:f9:2c:5d:c2:ad:70:44:a9:a4:
8b:b0:f0:d7:12:2d:d7:af:37:09:06:91:df:da:47:7c:d0:cc:
15:f0:57:48:12:09:dd:ff:89:1d:6b:7e:d4:ee:92:ff:68:62:
63:b5:ad:45:6a:98:fc:70:7c:c3:e3:6e:72:56:ba:a0:3a:d1:
c8:51:6f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:34:13 2026 by rpki-client