
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74c7f30e-70be-4f8c-bc8f-60b85d1b68f7/b9088027-6641-3388-ab02-b3330242f7fd.roa
File: b9088027-6641-3388-ab02-b3330242f7fd.roa (raw, json)
Hash identifier: gdNklkvWVDu8FamshsHkXIBEiPOGQAcb/zpfoYC0H90=
Subject key identifier: 03:F2:A7:CB:33:E7:80:AD:4D:77:36:C7:EF:CA:96:FC:A0:D7:6F:EF
Certificate issuer: /CN=74c7f30e-70be-4f8c-bc8f-60b85d1b68f7
Certificate serial: 010D0C9F4328584CDF3241C8633CFD78DBD0D780
Authority key identifier: BD:3F:1D:DF:2E:F0:4E:EF:1F:5E:35:46:81:7C:54:13:E1:A5:ED:43
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74c7f30e-70be-4f8c-bc8f-60b85d1b68f7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74c7f30e-70be-4f8c-bc8f-60b85d1b68f7/b9088027-6641-3388-ab02-b3330242f7fd.roa
Signing time: Sun 15 Feb 2026 14:00:41 +0000
ROA not before: Sun 15 Feb 2026 14:00:41 +0000
ROA not after: Sat 16 May 2026 13:00:41 +0000
asID: 209242
IP address blocks: 23.247.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74c7f30e-70be-4f8c-bc8f-60b85d1b68f7/74c7f30e-70be-4f8c-bc8f-60b85d1b68f7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74c7f30e-70be-4f8c-bc8f-60b85d1b68f7/74c7f30e-70be-4f8c-bc8f-60b85d1b68f7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74c7f30e-70be-4f8c-bc8f-60b85d1b68f7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:df:32:41:c8:63:3c:fd:78:db:d0:d7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74c7f30e-70be-4f8c-bc8f-60b85d1b68f7
Validity
Not Before: Feb 15 14:00:41 2026 GMT
Not After : May 16 13:00:41 2026 GMT
Subject: CN=f6bd40f7-37c8-48b6-a994-73f22f61f38a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:70:da:71:fc:85:26:2e:f9:83:10:27:dd:8c:
e6:2a:dd:5d:49:d0:aa:1f:61:61:cd:d3:a9:91:b1:
fa:be:db:29:37:5e:24:a0:57:eb:cf:be:d2:dd:0e:
42:72:92:ce:3f:ea:0d:a2:1c:a2:68:89:3b:4f:d7:
ec:b7:6d:4e:64:19:db:08:67:b3:9d:05:c5:55:33:
90:db:94:0f:53:8c:89:d6:ba:7f:40:43:63:11:ad:
23:43:72:aa:f5:59:38:57:f8:f7:a1:6c:91:96:78:
44:2b:f6:18:ca:52:3d:34:63:30:b2:50:d4:4f:3f:
5c:78:24:f3:f8:8e:9c:10:0b:76:14:1a:40:ee:15:
9a:c0:70:82:4e:57:2c:c0:c0:11:af:d5:04:9c:21:
2a:9e:96:e3:f0:24:3c:57:f9:e0:b1:81:15:cf:00:
7b:83:73:98:e2:34:25:a1:26:ad:c8:aa:69:28:73:
72:3b:f8:73:6d:f7:9f:87:8d:4f:c6:20:15:6e:89:
f5:90:d1:9a:3a:5b:b1:09:45:90:4f:43:9f:4a:b3:
82:76:03:69:93:5d:9f:18:2d:68:f4:05:85:96:b3:
88:9b:89:a7:ca:a0:55:d8:df:bd:21:ca:70:62:7b:
a8:15:51:a8:fd:95:e4:36:29:26:5d:7e:08:80:54:
cf:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:F2:A7:CB:33:E7:80:AD:4D:77:36:C7:EF:CA:96:FC:A0:D7:6F:EF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74c7f30e-70be-4f8c-bc8f-60b85d1b68f7/b9088027-6641-3388-ab02-b3330242f7fd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74c7f30e-70be-4f8c-bc8f-60b85d1b68f7/74c7f30e-70be-4f8c-bc8f-60b85d1b68f7.crl
X509v3 Authority Key Identifier:
keyid:BD:3F:1D:DF:2E:F0:4E:EF:1F:5E:35:46:81:7C:54:13:E1:A5:ED:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/74c7f30e-70be-4f8c-bc8f-60b85d1b68f7.cer
sbgp-ipAddrBlock: critical
IPv4:
23.247.163.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:68:85:2d:b8:12:19:75:ad:72:ce:e3:eb:1d:d5:0f:09:28:
ea:09:0f:72:cd:c8:b3:15:3b:7d:f3:02:ff:3e:fb:fa:f1:da:
63:70:6c:7e:1b:c2:94:48:49:6e:35:b1:b6:06:33:43:0d:30:
e8:e2:02:ac:de:4b:5d:28:6d:2e:cf:10:17:15:89:48:03:c1:
cf:ab:af:de:fa:6f:f0:dc:0e:92:3b:52:fe:1d:e4:c3:85:ca:
d4:d1:95:cb:a9:cf:2b:fd:07:9d:91:ae:ee:bb:77:ba:e8:9f:
7d:d0:bc:81:ac:6e:72:2a:18:4a:03:be:d7:36:9d:40:38:06:
58:c9:a5:86:bf:ee:2c:e0:9e:a6:91:53:4a:81:a2:0a:fa:97:
3f:69:ba:45:1b:53:2a:50:d1:bd:8f:11:49:0f:12:b9:3d:43:
31:22:f2:41:d5:5e:55:0d:2e:6e:e3:75:a8:c2:4c:25:f2:d6:
19:22:7b:a8:72:05:42:c0:98:b4:79:e7:62:54:d7:d0:18:d3:
b4:f5:44:ad:17:37:b0:4f:e7:73:ae:94:bf:58:e9:01:fa:68:
ec:ce:e5:5c:ec:e1:87:9f:68:5e:00:a6:cf:6e:36:f1:89:0e:
ec:ff:0f:1a:30:fc:4b:71:15:10:fe:c5:08:ef:90:b1:38:cd:
e6:6f:4d:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:46:30 2026 by rpki-client