
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f521759-b880-4a7d-be8b-3ce70e4aba83/7d789fe7-d176-37a2-ba55-fe1a9a434262.roa
File: 7d789fe7-d176-37a2-ba55-fe1a9a434262.roa (raw, json)
Hash identifier: KTmnD+TEzMhgabP7rJu5198uHeAIhoFPw1LKTTXErqA=
Subject key identifier: 7C:83:BD:AD:95:AC:FD:AE:4E:E9:ED:45:92:35:EC:E7:A5:B6:7B:BE
Certificate issuer: /CN=0f521759-b880-4a7d-be8b-3ce70e4aba83
Certificate serial: 010D0C9F4328584D83CAAD8969442591A3A83E60
Authority key identifier: 07:C2:8B:51:71:01:77:8F:B1:D5:C0:66:6F:21:6A:D7:24:B0:E5:54
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f521759-b880-4a7d-be8b-3ce70e4aba83.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f521759-b880-4a7d-be8b-3ce70e4aba83/7d789fe7-d176-37a2-ba55-fe1a9a434262.roa
Signing time: Wed 15 Apr 2026 13:00:30 +0000
ROA not before: Wed 15 Apr 2026 13:00:30 +0000
ROA not after: Tue 14 Jul 2026 13:00:30 +0000
asID: 398065
IP address blocks: 23.145.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f521759-b880-4a7d-be8b-3ce70e4aba83/0f521759-b880-4a7d-be8b-3ce70e4aba83.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f521759-b880-4a7d-be8b-3ce70e4aba83/0f521759-b880-4a7d-be8b-3ce70e4aba83.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f521759-b880-4a7d-be8b-3ce70e4aba83.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:83:ca:ad:89:69:44:25:91:a3:a8:3e:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f521759-b880-4a7d-be8b-3ce70e4aba83
Validity
Not Before: Apr 15 13:00:30 2026 GMT
Not After : Jul 14 13:00:30 2026 GMT
Subject: CN=3ccbbe81-cc0c-4092-8a7f-55827712c9c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:13:06:48:97:bb:c2:3a:a9:f3:ca:34:c1:72:
60:ea:5b:b8:dd:d6:3e:fd:f7:05:75:0f:cf:e7:a0:
48:e6:e5:74:23:72:80:c0:95:5a:b1:92:06:4e:95:
3d:ab:7d:20:72:1e:06:e8:93:98:2e:3b:3c:cb:00:
37:81:ec:66:b1:a6:ad:d5:db:95:d5:2b:67:4f:ae:
d6:67:14:30:32:11:9a:3e:da:f4:e4:14:24:a5:36:
7a:37:2b:6a:9a:82:d5:86:68:81:b3:8c:a5:ef:c5:
27:c0:cd:1d:eb:a1:0b:f2:18:42:15:82:1c:0b:2c:
3a:e8:4c:31:56:cf:e7:69:c7:06:ed:33:ad:dd:c7:
47:52:a2:c2:f3:f9:85:a8:9e:1d:06:35:d5:ff:39:
b8:60:a2:bf:63:f0:30:d7:18:cb:4c:35:18:a1:d5:
f5:31:9a:2d:b1:b7:b0:36:a5:16:59:ac:12:29:26:
cf:e2:58:02:19:cf:1e:3c:69:bf:83:72:a4:6f:14:
08:9b:59:81:e7:c0:b3:cb:54:32:05:12:6a:b8:d5:
ce:bb:9b:6c:57:25:5b:85:8c:a5:64:45:31:6a:17:
6a:2d:ec:25:bd:f8:16:6e:b1:4b:2d:c9:4a:31:79:
b3:c9:86:6a:fb:a6:6e:47:61:42:f9:96:92:b0:b7:
26:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:83:BD:AD:95:AC:FD:AE:4E:E9:ED:45:92:35:EC:E7:A5:B6:7B:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f521759-b880-4a7d-be8b-3ce70e4aba83/7d789fe7-d176-37a2-ba55-fe1a9a434262.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f521759-b880-4a7d-be8b-3ce70e4aba83/0f521759-b880-4a7d-be8b-3ce70e4aba83.crl
X509v3 Authority Key Identifier:
keyid:07:C2:8B:51:71:01:77:8F:B1:D5:C0:66:6F:21:6A:D7:24:B0:E5:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0f521759-b880-4a7d-be8b-3ce70e4aba83.cer
sbgp-ipAddrBlock: critical
IPv4:
23.145.176.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:e9:2b:b3:a4:53:92:01:85:4c:2f:b0:8e:53:73:91:a0:e9:
be:74:e3:dd:51:30:38:64:7c:5d:2c:4f:31:12:7c:70:0b:e0:
2f:c8:bc:55:d8:b9:25:50:ad:fc:e6:9d:cc:34:92:82:a5:a8:
71:6c:a8:fa:94:a8:86:85:50:22:fb:f4:66:f4:4d:60:87:51:
9f:96:12:4b:fb:c8:07:d1:01:87:97:af:93:20:cf:8d:4a:36:
06:61:21:37:c9:bc:8f:cc:9b:7e:78:9f:4f:42:6e:41:e8:46:
2a:d1:e8:a8:95:c7:36:bc:e3:56:4a:46:01:19:8b:c1:a3:ac:
7a:57:9e:34:f0:61:33:e5:24:9d:bb:4d:eb:a9:91:96:d0:1e:
16:7c:b0:6f:15:b8:63:72:01:01:20:f9:5d:c8:49:87:78:a6:
90:8c:ee:3e:d5:96:ff:95:fd:1b:cd:39:ae:55:b7:c9:cf:be:
5d:91:39:ae:6a:cc:96:f3:14:00:c8:86:d0:91:19:c2:e9:67:
bc:7f:7d:4c:4c:a2:38:8e:3e:c8:f8:d8:df:cd:57:1b:9d:c4:
8c:b1:80:da:70:bd:3a:38:30:00:0b:67:10:47:1c:37:f9:15:
de:b4:83:45:3a:00:fb:4f:83:06:ae:a0:98:3f:35:9b:b2:38:
9b:42:9e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:56:15 2026 by rpki-client