
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/0aab365b-e6a0-3034-99ba-2a587d58c01e.roa
File: 0aab365b-e6a0-3034-99ba-2a587d58c01e.roa (raw, json)
Hash identifier: /PXs7U2A7LNlf6YWnIgUksRK+d2ieItHFAecVhksKF0=
Subject key identifier: CB:B1:D8:4A:E2:CD:AA:81:A0:FB:7B:63:34:88:15:67:11:4A:8B:61
Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial: 010D0C9F4328584D55BA3D929FF279595F0376C0
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/0aab365b-e6a0-3034-99ba-2a587d58c01e.roa
Signing time: Mon 30 Mar 2026 01:00:23 +0000
ROA not before: Mon 30 Mar 2026 01:00:23 +0000
ROA not after: Sun 28 Jun 2026 01:00:23 +0000
asID: 3356
IP address blocks: 4.42.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:55:ba:3d:92:9f:f2:79:59:5f:03:76:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Validity
Not Before: Mar 30 01:00:23 2026 GMT
Not After : Jun 28 01:00:23 2026 GMT
Subject: CN=4dd94feb-239b-4e4c-8685-27d73622e21e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:58:43:63:1a:ba:de:27:63:8d:78:9c:a3:df:
e9:91:9b:85:02:8f:f8:ad:92:c3:23:d8:85:26:a1:
ae:f8:0a:61:e9:25:33:5a:99:29:6d:e0:0c:cc:6d:
2e:9e:90:58:f3:26:46:aa:02:06:b4:d1:85:89:7c:
e6:cb:24:09:bd:d5:d7:61:a8:af:3c:24:90:16:c3:
55:05:18:be:4b:2d:93:49:8e:fc:52:93:2e:d9:d8:
71:d8:b6:e6:0c:c0:14:5d:8e:8d:0d:e8:2e:a7:70:
d6:ea:a8:49:8a:93:a1:d3:1c:6e:97:42:5b:df:c5:
fb:b7:c6:08:fa:11:33:6c:7d:b9:aa:dc:ae:c1:99:
58:09:cb:9e:13:a1:4a:21:cc:59:cb:8a:bd:8f:cf:
43:cd:b3:0d:5f:cf:a8:52:da:54:37:e0:d4:9a:3b:
59:9a:10:4f:de:05:1f:fc:39:9b:ae:5e:07:cb:a9:
6b:ec:fe:6a:8d:32:ae:79:2a:d0:82:1b:2f:f8:73:
7f:2b:62:bc:1b:7f:68:97:a2:e8:08:24:8a:78:f8:
c3:dc:7d:52:50:73:30:69:eb:13:fe:4d:58:57:4b:
10:4b:64:0b:da:57:e2:ad:4e:0c:5f:4c:ee:15:49:
76:14:d1:d8:da:1e:75:6a:dc:68:f9:91:02:7e:88:
3a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:B1:D8:4A:E2:CD:AA:81:A0:FB:7B:63:34:88:15:67:11:4A:8B:61
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/0aab365b-e6a0-3034-99ba-2a587d58c01e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
X509v3 Authority Key Identifier:
keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
sbgp-ipAddrBlock: critical
IPv4:
4.42.228.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:0a:b6:0c:36:5f:39:f5:1e:67:0c:24:88:f0:79:94:b4:8a:
ba:1d:f2:14:94:cc:88:7d:1f:9f:3e:14:a1:c5:8a:72:fc:88:
6b:16:d2:ff:40:e1:12:ac:92:f8:81:71:f9:94:7b:4d:13:fe:
59:6b:ef:f2:d2:2c:c3:63:ce:04:84:1d:d0:7f:d6:38:bb:a9:
2b:a9:00:e5:2a:55:ad:80:3f:fc:78:c7:7c:95:2d:26:ff:c5:
6b:ba:d0:e2:8a:1d:d8:14:bb:e0:83:e6:27:99:74:66:98:20:
86:78:b0:2c:7f:84:6c:06:9a:3f:82:78:c6:e6:84:d8:3c:de:
53:09:54:79:32:6e:de:2c:86:3f:ec:ac:6f:b6:60:51:ea:5a:
86:aa:63:4e:cb:c2:3a:c5:d5:bc:ca:59:11:fc:ff:8f:7d:c7:
6a:8f:da:e4:e9:2b:50:46:23:c9:7d:61:f0:b0:c6:ea:30:e9:
43:72:ec:15:77:b3:62:f5:68:84:c1:2d:31:b2:33:27:13:c9:
7f:f3:97:e4:eb:e8:00:2e:18:d3:c3:fb:e4:db:18:b4:12:95:
1d:0a:b3:35:a6:2b:68:82:cc:3f:2b:e1:b2:c9:e9:76:32:f3:
2d:08:bc:df:22:86:f0:dd:64:c6:af:d3:60:01:30:1f:40:77:
9b:7a:f0:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:24:52 2026 by rpki-client