
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5157764b-7b30-4f19-a9ca-30a5dfefa332/834feef8-08c6-3ac0-9304-82e2ffd86bf7.roa
File: 834feef8-08c6-3ac0-9304-82e2ffd86bf7.roa (raw, json)
Hash identifier: ilM4pvB+7LtEgLWxbQlj+hYojnhmwWvrecvSfqrjqn4=
Subject key identifier: 4B:01:BD:C5:D1:CF:49:C3:CB:D8:6B:53:DA:FC:2C:EF:0D:D6:05:63
Certificate issuer: /CN=5157764b-7b30-4f19-a9ca-30a5dfefa332
Certificate serial: 010D0C9F4328584D80FFDD34BE2F7F71389AAF80
Authority key identifier: BD:78:DF:BF:1B:39:18:A5:6F:C7:79:A8:1D:F4:E1:99:EA:21:55:7A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5157764b-7b30-4f19-a9ca-30a5dfefa332.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5157764b-7b30-4f19-a9ca-30a5dfefa332/834feef8-08c6-3ac0-9304-82e2ffd86bf7.roa
Signing time: Tue 14 Apr 2026 13:00:30 +0000
ROA not before: Tue 14 Apr 2026 13:00:30 +0000
ROA not after: Mon 13 Jul 2026 13:00:30 +0000
asID: 13737
IP address blocks: 23.136.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5157764b-7b30-4f19-a9ca-30a5dfefa332/5157764b-7b30-4f19-a9ca-30a5dfefa332.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5157764b-7b30-4f19-a9ca-30a5dfefa332/5157764b-7b30-4f19-a9ca-30a5dfefa332.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5157764b-7b30-4f19-a9ca-30a5dfefa332.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:80:ff:dd:34:be:2f:7f:71:38:9a:af:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5157764b-7b30-4f19-a9ca-30a5dfefa332
Validity
Not Before: Apr 14 13:00:30 2026 GMT
Not After : Jul 13 13:00:30 2026 GMT
Subject: CN=71bdd390-e1a8-4b35-bfbc-b46502f6028e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:9d:3f:fd:e5:45:5c:a0:16:d2:93:f6:20:0c:
8e:a1:d3:ba:ac:86:f1:de:a5:dc:e4:91:d2:1a:cc:
7e:52:5a:b0:8a:e7:31:74:bf:4c:47:57:12:84:77:
a0:0b:46:53:5a:cc:0a:05:b9:82:2a:48:af:68:ba:
27:18:c9:82:78:ef:14:93:02:d6:e5:eb:dc:5b:5a:
8b:b3:e9:15:85:6a:44:75:fc:77:7b:06:99:c0:87:
74:a1:92:84:9a:cf:1f:75:ae:63:7c:5e:b1:be:56:
3b:e4:15:92:bc:ab:b0:37:90:83:cc:f6:1b:67:45:
73:5e:36:35:a6:cd:47:fa:2b:c1:4e:6a:66:81:07:
22:54:17:0d:b3:ef:82:28:d7:15:50:b0:c7:ea:30:
3b:fc:f0:8e:5e:a2:1d:35:dd:ac:57:0e:3c:02:a6:
ce:a9:08:41:6c:16:0f:c7:be:6d:23:da:06:75:63:
d1:19:9c:1d:9d:8c:85:2a:38:9f:47:c7:69:c6:66:
99:ba:de:52:7e:0d:9b:7a:c6:b3:4f:d3:84:ec:80:
a9:1c:a0:45:de:41:fb:4b:67:a5:4c:d6:52:ff:3e:
9d:1e:3f:90:b7:15:bd:11:73:b3:24:72:15:48:61:
70:f4:13:b1:e2:62:47:bd:7b:4c:cc:3d:f5:fa:70:
39:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:01:BD:C5:D1:CF:49:C3:CB:D8:6B:53:DA:FC:2C:EF:0D:D6:05:63
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5157764b-7b30-4f19-a9ca-30a5dfefa332/834feef8-08c6-3ac0-9304-82e2ffd86bf7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5157764b-7b30-4f19-a9ca-30a5dfefa332/5157764b-7b30-4f19-a9ca-30a5dfefa332.crl
X509v3 Authority Key Identifier:
keyid:BD:78:DF:BF:1B:39:18:A5:6F:C7:79:A8:1D:F4:E1:99:EA:21:55:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5157764b-7b30-4f19-a9ca-30a5dfefa332.cer
sbgp-ipAddrBlock: critical
IPv4:
23.136.68.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a9:31:38:5a:c3:49:51:18:cc:0e:b5:e5:ea:e3:07:a3:cd:9b:
f7:fb:c9:8e:b0:7c:90:f2:7a:63:3d:62:f4:19:1f:a3:98:3a:
3e:94:ad:73:35:48:f5:b8:29:38:78:0b:db:91:58:b8:13:be:
9f:13:c6:9d:47:1a:06:b7:35:3f:12:f0:00:45:29:19:04:2d:
93:ee:92:94:41:c8:ae:05:e4:75:7a:c2:09:10:92:08:a5:94:
c6:24:8a:14:68:99:05:c8:ad:38:50:c1:1a:01:43:0a:5f:82:
e8:43:28:37:01:a9:d9:58:f2:c4:5d:da:eb:cb:29:6c:63:0d:
79:a6:b0:90:1d:eb:e3:a0:5b:70:b6:67:d1:bc:cc:99:19:40:
ab:d1:ab:86:de:bf:e4:f8:bd:32:22:10:97:14:bd:e1:2f:8f:
41:37:1d:56:30:f9:ae:9f:bc:8c:26:dc:b5:e9:84:6e:d4:0d:
41:04:a3:3b:2e:12:22:db:ee:ba:79:98:74:0b:9e:71:a8:26:
94:8e:97:cf:4f:73:92:56:26:9c:b4:4c:d7:ff:62:ed:51:18:
35:57:2a:ec:93:d3:e1:7a:1f:9e:9f:a8:0c:a5:ff:92:af:c3:
e3:6e:81:73:37:f8:f1:c8:e6:6f:f7:68:6e:89:63:0f:63:0b:
da:88:ef:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:03:20 2026 by rpki-client