
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2531a4ba-6abc-447c-add8-67edc3c483ab/3dc1647c-44d8-35fa-93c5-3c0a9aebdacb.roa
File: 3dc1647c-44d8-35fa-93c5-3c0a9aebdacb.roa (raw, json)
Hash identifier: rJXYANEsCltCoW43h8UV6kh6ZVRtetk1csPZYKxfY9Y=
Subject key identifier: A4:61:B5:6D:77:C1:3A:2A:D6:54:EB:9B:C4:D6:25:B0:7F:AE:E5:BB
Certificate issuer: /CN=2531a4ba-6abc-447c-add8-67edc3c483ab
Certificate serial: 010D0C9F4328584CDB020E4632D0FDE272913318
Authority key identifier: 9E:3A:9F:74:F9:6C:64:ED:63:9F:AC:81:F2:E4:37:43:2E:F6:3B:0A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2531a4ba-6abc-447c-add8-67edc3c483ab.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2531a4ba-6abc-447c-add8-67edc3c483ab/3dc1647c-44d8-35fa-93c5-3c0a9aebdacb.roa
Signing time: Sat 14 Feb 2026 02:00:32 +0000
ROA not before: Sat 14 Feb 2026 02:00:32 +0000
ROA not after: Fri 15 May 2026 01:00:32 +0000
asID: 395585
IP address blocks: 23.171.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2531a4ba-6abc-447c-add8-67edc3c483ab/2531a4ba-6abc-447c-add8-67edc3c483ab.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2531a4ba-6abc-447c-add8-67edc3c483ab/2531a4ba-6abc-447c-add8-67edc3c483ab.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2531a4ba-6abc-447c-add8-67edc3c483ab.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:db:02:0e:46:32:d0:fd:e2:72:91:33:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2531a4ba-6abc-447c-add8-67edc3c483ab
Validity
Not Before: Feb 14 02:00:32 2026 GMT
Not After : May 15 01:00:32 2026 GMT
Subject: CN=acb30949-3ff7-4261-9471-651afa52a792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d4:4b:ad:93:a9:ea:64:0a:a0:d4:b2:5f:00:
0d:22:4e:c5:c0:55:79:b6:10:86:3e:ed:25:4c:a6:
0a:a4:0b:48:3a:62:66:47:ec:25:b5:5c:6c:53:a5:
5f:f6:3b:92:b3:30:72:d2:9d:4e:7b:1c:a0:fa:a3:
e7:86:6d:a4:e4:44:66:43:cd:2d:6c:ca:a6:5f:65:
d0:6b:56:64:d7:e3:96:6f:ca:6d:31:32:36:04:33:
18:a2:4b:1e:c3:dc:90:10:19:71:ae:ca:07:2b:b1:
c9:cd:c7:57:49:95:e1:8a:40:ec:d2:be:61:da:b9:
1f:0e:51:e2:fc:dc:65:4d:94:d9:90:dd:a7:18:c4:
0c:7d:7c:d5:55:12:37:54:f6:24:19:ee:dd:23:ec:
7b:37:e1:94:34:60:48:18:24:e0:4a:89:aa:95:5c:
aa:e9:5e:49:ed:3a:be:4c:4d:be:bc:70:01:f8:89:
11:82:69:1e:64:fc:af:28:de:a9:83:39:58:8f:32:
ba:cb:57:21:0f:a6:35:7f:91:9d:59:42:b5:02:4b:
92:da:a1:86:c0:31:d4:cf:86:08:d9:f3:91:1d:0a:
d3:a3:de:cd:4e:e6:c3:7d:26:14:70:0c:74:e7:09:
30:72:2d:70:f6:43:31:2a:a6:b6:ed:f6:81:6a:ca:
c0:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:61:B5:6D:77:C1:3A:2A:D6:54:EB:9B:C4:D6:25:B0:7F:AE:E5:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2531a4ba-6abc-447c-add8-67edc3c483ab/3dc1647c-44d8-35fa-93c5-3c0a9aebdacb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2531a4ba-6abc-447c-add8-67edc3c483ab/2531a4ba-6abc-447c-add8-67edc3c483ab.crl
X509v3 Authority Key Identifier:
keyid:9E:3A:9F:74:F9:6C:64:ED:63:9F:AC:81:F2:E4:37:43:2E:F6:3B:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2531a4ba-6abc-447c-add8-67edc3c483ab.cer
sbgp-ipAddrBlock: critical
IPv4:
23.171.0.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:af:36:41:a4:47:3c:a5:9b:4d:f6:ef:48:4d:58:05:2f:33:
46:cb:3f:0d:7f:60:86:97:a5:ef:2d:b5:2e:5e:82:d0:a7:31:
e2:e5:04:54:2e:42:64:03:8f:08:92:45:0f:65:0d:b1:e5:19:
fe:6c:26:d2:68:dc:2a:53:b0:92:fb:d7:80:a6:0c:fc:4d:66:
bd:a1:f6:85:17:62:98:36:d4:ce:12:4a:98:2b:68:0e:03:00:
c0:3b:24:d2:a7:7b:45:28:82:62:84:e4:af:a3:80:a2:ad:4c:
6c:b0:c4:4c:50:52:85:31:2c:96:84:5f:b1:eb:77:d6:48:79:
e6:b5:c4:23:35:b0:4b:c5:56:44:b0:43:d0:03:d8:92:c8:9f:
92:9c:15:38:fb:b5:61:5e:98:02:0b:9c:17:37:7a:73:e9:e1:
86:5f:af:2d:4a:b9:99:27:98:33:d0:e9:42:b3:2b:96:33:ea:
76:33:65:cf:d4:1c:cc:f8:ab:b7:b9:d0:e2:ca:6e:e6:99:92:
e5:42:72:c3:79:fc:a6:0a:7d:2b:50:bb:39:25:89:ac:8d:d5:
12:da:d4:9a:5c:4d:03:c2:ea:40:70:0e:d7:58:e5:28:21:5c:
c3:28:64:66:0a:bd:33:0b:20:70:7c:1a:3d:0d:b2:ee:95:1f:
86:f4:80:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:51:21 2026 by rpki-client