
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/ec60c276-fb3e-30ee-84a6-acfeb6a16bd1.roa
File: ec60c276-fb3e-30ee-84a6-acfeb6a16bd1.roa (raw, json)
Hash identifier: MzrNXjYl3Ec/qzZHcdqPs6euSVA+3gRJiBVXCjGsH5E=
Subject key identifier: 12:5C:C1:5D:D5:92:27:8F:3B:CC:8E:3A:7E:1E:7F:72:7B:EA:CF:3F
Certificate issuer: /CN=1a767fb3-0911-435a-a3a4-189b82622157
Certificate serial: 010D0C9F4328584D59EA749E12345C43D566E000
Authority key identifier: 31:97:7C:7C:A4:EC:D4:79:62:19:2C:6B:0C:04:24:AF:34:D5:74:A1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/ec60c276-fb3e-30ee-84a6-acfeb6a16bd1.roa
Signing time: Tue 31 Mar 2026 13:00:30 +0000
ROA not before: Tue 31 Mar 2026 13:00:30 +0000
ROA not after: Mon 29 Jun 2026 13:00:30 +0000
asID: 400919
IP address blocks: 23.169.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/1a767fb3-0911-435a-a3a4-189b82622157.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/1a767fb3-0911-435a-a3a4-189b82622157.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:59:ea:74:9e:12:34:5c:43:d5:66:e0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a767fb3-0911-435a-a3a4-189b82622157
Validity
Not Before: Mar 31 13:00:30 2026 GMT
Not After : Jun 29 13:00:30 2026 GMT
Subject: CN=3942bc90-1d57-4447-8def-1e2f707686cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:cd:b5:6e:41:10:f8:62:7f:d5:04:da:e5:22:
3e:d1:97:48:57:b1:bb:bd:07:11:42:d2:31:34:a0:
d5:bd:42:37:a3:29:c0:f3:3d:4b:db:cc:bc:d1:0d:
0d:fb:9f:15:82:ba:5a:a7:fc:12:41:ed:d8:6d:f1:
ce:f1:ec:20:b2:17:b9:d4:97:57:81:95:eb:70:ee:
b5:0a:3d:55:f4:c9:c3:d9:a4:4d:5a:e2:31:67:db:
da:ba:5a:ef:0d:eb:00:25:49:10:4e:c7:b0:99:af:
10:18:78:8f:22:04:22:9f:33:3c:28:1a:fe:56:d0:
af:c2:29:60:96:ea:d6:e3:68:89:78:84:a8:1f:ed:
dc:67:93:d2:d7:6a:ae:20:73:d8:7e:94:13:1c:a9:
8a:4d:36:a3:7b:5b:1b:bf:8c:ab:d0:9c:da:54:06:
b4:28:df:b8:fa:d8:65:43:c4:93:31:81:2c:e3:a0:
a4:d3:44:7a:11:af:cb:56:89:68:1c:2b:68:5b:3f:
08:5f:c3:98:bd:38:f2:71:f6:05:8b:bb:40:bb:44:
9d:9e:48:b3:d6:4e:48:5e:06:a3:3d:76:15:89:62:
41:8c:22:c2:99:02:06:2d:e1:25:40:5f:7c:c2:f3:
8f:c9:86:b7:5a:3d:eb:de:26:0e:2d:1f:b6:7c:5d:
15:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:5C:C1:5D:D5:92:27:8F:3B:CC:8E:3A:7E:1E:7F:72:7B:EA:CF:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/ec60c276-fb3e-30ee-84a6-acfeb6a16bd1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/1a767fb3-0911-435a-a3a4-189b82622157.crl
X509v3 Authority Key Identifier:
keyid:31:97:7C:7C:A4:EC:D4:79:62:19:2C:6B:0C:04:24:AF:34:D5:74:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157.cer
sbgp-ipAddrBlock: critical
IPv4:
23.169.200.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:8d:b6:2e:ae:d8:68:aa:8e:35:c7:22:c4:67:a8:e2:a6:31:
c4:db:59:35:ef:b5:f8:37:5d:d5:42:08:85:3e:f7:a6:cc:ec:
f4:de:c9:09:35:64:75:87:c5:4f:3b:bf:fb:18:40:1d:b7:d8:
da:5e:5f:e2:05:d9:59:42:00:fa:59:04:78:28:b5:10:21:c0:
20:ee:f6:48:70:9a:b4:87:16:0e:77:7c:80:3b:eb:0d:f5:26:
8e:85:d1:78:a4:f9:8c:38:ab:3a:70:65:a3:42:14:d9:d8:a8:
6c:2a:9c:44:98:bd:f9:dd:08:a1:9b:c8:86:e4:c6:3b:a4:e3:
77:e1:f4:5c:92:e0:97:c5:eb:ff:f9:9a:17:b9:70:84:d0:5c:
35:d2:4e:c0:33:f5:d0:c7:73:54:bc:61:47:9d:07:c5:9e:bb:
e4:4b:64:4d:55:d6:45:94:40:77:25:4a:39:7b:59:a4:31:1f:
0a:e9:d7:13:0d:38:15:af:b2:5e:16:bc:be:d7:3e:b0:fc:d5:
3e:00:58:c0:83:16:3c:32:c2:d5:20:b5:a1:42:d5:58:39:96:
99:9d:2d:df:80:e7:f6:5b:2e:39:48:c7:88:ee:7d:28:e5:ad:
60:d2:b7:56:a4:8b:39:a4:bd:e7:0d:37:17:1c:55:29:75:75:
b7:7a:29:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:37:15 2026 by rpki-client