
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0/2cb70ec2-551b-3681-9732-03ef4a228430.roa
File: 2cb70ec2-551b-3681-9732-03ef4a228430.roa (raw, json)
Hash identifier: zaScGt0RDsiLcg1c0ipVX9aYQfnlBCJgXV4jKkFRwzw=
Subject key identifier: EE:D1:04:1C:67:13:32:2F:D4:74:7B:2D:98:C4:30:51:7F:D3:E3:B7
Certificate issuer: /CN=816b4d34-3880-4b72-b786-365fbdec8ba0
Certificate serial: 010D0C9F4328584D4A8FB0E819D8DA049B1B7600
Authority key identifier: 9F:28:B5:EB:07:38:72:8A:FF:F9:24:FC:0C:51:16:18:58:D5:40:12
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0/2cb70ec2-551b-3681-9732-03ef4a228430.roa
Signing time: Thu 26 Mar 2026 01:00:32 +0000
ROA not before: Thu 26 Mar 2026 01:00:32 +0000
ROA not after: Wed 24 Jun 2026 01:00:32 +0000
asID: 19740
IP address blocks: 23.173.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0/816b4d34-3880-4b72-b786-365fbdec8ba0.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0/816b4d34-3880-4b72-b786-365fbdec8ba0.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:4a:8f:b0:e8:19:d8:da:04:9b:1b:76:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=816b4d34-3880-4b72-b786-365fbdec8ba0
Validity
Not Before: Mar 26 01:00:32 2026 GMT
Not After : Jun 24 01:00:32 2026 GMT
Subject: CN=3dcef56a-7ff1-452b-97ea-559edd7e7acb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b1:1d:34:8c:4d:b7:0e:82:a8:e7:90:07:bc:
07:57:e2:f5:f2:a8:c2:6a:f8:4a:74:e4:91:a8:46:
9c:98:c7:90:37:34:34:54:7b:35:ce:e7:f0:7e:6d:
e8:a4:05:fd:8c:41:bf:30:1e:24:cf:1f:de:ff:5c:
71:b3:ea:27:12:8e:cf:a4:a2:45:6f:85:92:e0:71:
b1:7e:ce:bf:d2:1e:d8:f3:48:7c:ab:3f:0d:17:44:
63:c8:47:b6:f9:c0:66:fb:56:e4:00:92:47:cc:1f:
b6:25:dd:c1:68:89:fe:71:d0:95:40:57:0e:34:0a:
2c:36:66:4c:bf:a1:ff:a7:c7:69:b3:c3:d0:1b:92:
6a:b6:c1:36:20:ac:50:34:1b:e8:cb:5e:18:00:fc:
81:af:fa:56:43:c4:d2:8d:f2:42:61:aa:01:98:62:
f8:40:48:2b:50:57:fe:b6:d9:b1:9e:95:91:33:fe:
c2:3d:ef:f2:88:99:65:ac:ce:a4:ae:b0:d0:1f:25:
ff:8e:54:3c:f6:db:f7:a9:ae:6f:b4:07:87:9e:08:
70:da:0d:7c:7f:fe:dc:be:69:1d:de:da:56:76:e4:
4a:e6:d6:1d:26:a6:ff:00:a6:43:18:9c:c1:ab:0c:
e3:22:5f:6c:c2:48:76:f8:30:5d:40:14:37:08:bc:
5d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:D1:04:1C:67:13:32:2F:D4:74:7B:2D:98:C4:30:51:7F:D3:E3:B7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0/2cb70ec2-551b-3681-9732-03ef4a228430.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0/816b4d34-3880-4b72-b786-365fbdec8ba0.crl
X509v3 Authority Key Identifier:
keyid:9F:28:B5:EB:07:38:72:8A:FF:F9:24:FC:0C:51:16:18:58:D5:40:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/816b4d34-3880-4b72-b786-365fbdec8ba0.cer
sbgp-ipAddrBlock: critical
IPv4:
23.173.113.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:36:3b:18:a6:cc:da:5d:99:34:77:b0:b9:7c:4b:c4:7d:40:
1d:41:f1:1d:1a:78:d8:d0:71:7b:d2:8d:25:d9:7c:10:da:1a:
24:16:9a:46:f2:ec:cc:37:65:24:b2:2c:42:80:68:67:ae:7e:
48:0a:a2:cf:02:7c:29:61:ec:10:94:fe:d1:ed:ad:0a:08:86:
00:f7:64:95:a3:07:36:4b:9e:97:c1:f0:dd:c2:7e:17:0f:06:
d3:36:c3:32:e8:77:70:1b:9d:1e:96:96:19:0f:31:8f:ad:70:
cc:9d:41:8e:68:da:53:17:4b:fb:47:7a:b6:83:7f:e7:23:0d:
8f:19:cd:7c:34:68:96:ec:d6:07:61:11:5a:7d:fb:14:60:d8:
bf:e2:83:07:86:05:88:cc:27:6b:94:91:22:d2:d1:02:fc:cf:
b5:4e:82:70:a7:45:88:e3:96:26:f7:11:dd:18:70:50:05:b9:
87:b8:5a:47:f9:02:e5:c4:44:8d:5d:f0:a3:2a:ff:67:c4:6f:
ca:c2:f8:09:a0:43:91:6a:36:f4:52:7f:b2:45:50:6c:e2:a6:
ca:e6:90:d7:85:a3:dc:f0:dc:5e:c6:ed:a0:24:f1:64:8f:c7:
11:c7:d6:2b:2d:37:75:a7:ed:05:09:c4:1f:4e:bd:79:82:b9:
57:47:16:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:49:48 2026 by rpki-client