
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ce39acc6-db31-32d0-945b-2ee2d526dfe8.roa
File: ce39acc6-db31-32d0-945b-2ee2d526dfe8.roa (raw, json)
Hash identifier: yWgXduFiHc7pYco8mBf0igsDNugrWsG0NBXgdldW/Q4=
Subject key identifier: F5:DC:DA:D9:79:94:F2:94:F5:EB:78:81:43:27:58:0B:EE:4A:02:C2
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584BBE403216AA0F62DC4A541750
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ce39acc6-db31-32d0-945b-2ee2d526dfe8.roa
Signing time: Tue 04 Nov 2025 02:00:31 +0000
ROA not before: Tue 04 Nov 2025 02:00:31 +0000
ROA not after: Mon 02 Feb 2026 02:00:31 +0000
asID: 134729
IP address blocks: 23.26.176.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:be:40:32:16:aa:0f:62:dc:4a:54:17:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Nov 4 02:00:31 2025 GMT
Not After : Feb 2 02:00:31 2026 GMT
Subject: CN=be67b448-f0a9-43c9-9afb-d9a63f79fd83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:09:66:7c:83:58:7f:d4:78:29:b7:b1:5f:94:
f6:b1:a0:57:1f:6a:18:e7:6f:28:02:75:53:83:bc:
af:02:e5:15:00:93:ff:ff:aa:ab:d5:17:42:02:1b:
b6:65:5a:fc:a1:aa:8f:96:60:cb:9e:46:6c:38:ec:
ab:83:93:8c:ae:25:be:f0:de:ac:5c:0e:80:fe:14:
78:4e:83:77:f1:b1:96:76:c2:e8:95:9f:66:80:8b:
e0:15:d1:1e:f0:2b:bc:12:29:aa:09:54:6d:25:d3:
68:66:30:c6:73:d3:22:86:8e:fb:e6:74:ae:7c:de:
ae:06:ad:d5:eb:2c:59:c9:0f:ef:cf:45:87:3d:68:
ff:90:ae:e1:56:3e:a5:76:ed:88:b8:64:1c:61:91:
34:a4:3b:14:f4:28:6f:fa:ad:3c:9c:c6:c5:55:fc:
9e:1e:c2:8e:fe:f7:13:54:8b:d0:d3:cf:87:4e:ef:
a5:b3:a1:84:e6:1e:ac:43:9f:29:91:49:31:5b:e0:
4f:58:42:b5:3d:e0:53:89:0f:0b:26:85:d4:ee:4d:
9e:41:c5:0d:8b:59:9d:f8:39:7c:11:ba:b0:0e:3c:
0c:c1:9a:33:37:4b:29:5a:8d:2b:44:26:cf:f2:a9:
56:a4:97:21:ea:89:fa:84:9b:c3:a6:c2:32:ac:47:
db:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:DC:DA:D9:79:94:F2:94:F5:EB:78:81:43:27:58:0B:EE:4A:02:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/ce39acc6-db31-32d0-945b-2ee2d526dfe8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.176.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:c9:66:ae:ab:37:b6:be:f6:ac:9f:fc:63:d7:fb:6f:95:f4:
8b:4c:72:d9:78:51:ba:50:3c:39:3d:aa:14:41:62:d5:71:13:
ff:a8:0f:5a:ee:64:67:27:15:11:dc:bb:14:7e:73:6c:9f:50:
2d:49:d9:af:2e:34:22:ba:52:c0:46:96:9c:25:e5:ed:5a:c8:
e3:31:6d:d1:a2:d5:0f:13:fc:f1:cb:b0:bb:fb:be:0d:1d:80:
08:fa:c1:a3:a6:b4:52:84:df:67:7f:00:d2:15:a7:da:86:68:
45:c7:c2:1a:b1:be:b6:b1:78:f1:58:47:4a:04:2a:a9:c6:61:
f3:73:1a:06:9d:c6:d2:d8:40:2c:35:5c:59:c9:04:03:d3:11:
85:9b:00:96:77:5b:b4:b5:0f:f8:fb:49:89:aa:6d:15:18:45:
63:9d:4f:c0:94:71:93:09:f2:92:39:b8:6f:5e:2a:da:62:56:
80:15:3d:e8:0d:cc:b1:79:24:21:47:d6:65:8b:c2:b1:6a:57:
42:60:a0:34:46:59:ca:a1:d7:fe:eb:db:ea:14:18:48:67:59:
16:c6:c2:8f:e1:c8:e3:47:31:37:07:b1:aa:0a:b1:36:10:57:
35:7d:f9:ce:9b:d3:d5:1c:42:d8:0e:b3:59:17:8e:66:dd:5a:
01:35:89:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:04:53 2025 by rpki-client