
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/84facd9b-9eda-4887-bc69-899a3c3aec64/c02a1e25-54bb-3f2b-8c3d-48ffeaea1011.roa
File: c02a1e25-54bb-3f2b-8c3d-48ffeaea1011.roa (raw, json)
Hash identifier: MC5ylv265jPj0PCV6UQUxv7IHnSKPhvpuBOkFks3zS0=
Subject key identifier: B5:41:A6:E5:C0:0E:BD:3C:AB:DF:73:52:3E:D0:F3:0D:D3:62:BD:07
Certificate issuer: /CN=84facd9b-9eda-4887-bc69-899a3c3aec64
Certificate serial: 010D0C9F4328584D7A05347935E9CFC3A7484EC8
Authority key identifier: C8:97:EA:9D:92:66:CD:A8:E9:0E:91:63:B1:00:70:5F:89:81:E6:8C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/84facd9b-9eda-4887-bc69-899a3c3aec64.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/84facd9b-9eda-4887-bc69-899a3c3aec64/c02a1e25-54bb-3f2b-8c3d-48ffeaea1011.roa
Signing time: Sun 12 Apr 2026 01:00:24 +0000
ROA not before: Sun 12 Apr 2026 01:00:24 +0000
ROA not after: Sat 11 Jul 2026 01:00:24 +0000
asID: 63183
IP address blocks: 23.190.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/84facd9b-9eda-4887-bc69-899a3c3aec64/84facd9b-9eda-4887-bc69-899a3c3aec64.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/84facd9b-9eda-4887-bc69-899a3c3aec64/84facd9b-9eda-4887-bc69-899a3c3aec64.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/84facd9b-9eda-4887-bc69-899a3c3aec64.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:7a:05:34:79:35:e9:cf:c3:a7:48:4e:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84facd9b-9eda-4887-bc69-899a3c3aec64
Validity
Not Before: Apr 12 01:00:24 2026 GMT
Not After : Jul 11 01:00:24 2026 GMT
Subject: CN=1a8bc8d4-7a51-4b47-987a-a3004acd285b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:af:2d:17:64:b7:fb:a7:e7:b5:21:6d:cc:ad:
5f:47:85:13:de:a9:c2:b4:6d:b9:a7:ec:89:79:a2:
f2:ae:f9:4e:37:dd:ad:2a:45:0f:7a:52:62:e2:70:
94:23:4b:dc:2f:33:91:71:fe:82:9a:bf:16:4b:3e:
4c:b4:5c:89:50:7e:6e:24:6c:24:73:99:58:0b:55:
77:2d:4b:b2:8b:0d:fd:db:a1:b1:13:30:ca:31:e4:
fd:72:f0:19:0a:09:e7:a7:bf:26:6f:7d:cd:93:77:
14:c8:eb:b1:ac:aa:be:4d:91:9e:e3:3e:fe:9a:05:
1a:2c:c8:5b:74:15:0d:32:24:1b:7e:98:7c:ee:6d:
00:a6:71:72:71:9c:ce:3d:4e:4d:36:0b:d0:d8:f1:
32:0c:47:0f:86:75:35:c2:6e:9b:e8:9c:2c:29:c1:
6a:1f:6e:ca:7f:46:71:4a:ec:07:60:de:09:2a:6f:
40:68:48:31:08:6a:18:4b:0d:f0:a1:07:c4:b9:68:
aa:89:0b:d4:a3:16:e1:d3:6c:8e:f3:b6:bd:aa:08:
3b:f5:47:53:b9:c7:50:86:20:32:e6:85:25:49:e0:
a5:c3:1e:7a:9e:a8:39:56:7d:4c:65:eb:2a:31:13:
d4:e1:97:4b:3f:ca:68:f4:f4:54:c4:48:e2:8e:c2:
c4:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:41:A6:E5:C0:0E:BD:3C:AB:DF:73:52:3E:D0:F3:0D:D3:62:BD:07
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/84facd9b-9eda-4887-bc69-899a3c3aec64/c02a1e25-54bb-3f2b-8c3d-48ffeaea1011.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/84facd9b-9eda-4887-bc69-899a3c3aec64/84facd9b-9eda-4887-bc69-899a3c3aec64.crl
X509v3 Authority Key Identifier:
keyid:C8:97:EA:9D:92:66:CD:A8:E9:0E:91:63:B1:00:70:5F:89:81:E6:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/84facd9b-9eda-4887-bc69-899a3c3aec64.cer
sbgp-ipAddrBlock: critical
IPv4:
23.190.88.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:56:03:4f:7a:fd:8d:7c:24:b3:68:fd:6f:c4:23:4d:37:f2:
40:95:f9:bb:74:ad:41:df:40:cb:7a:00:3a:5e:4a:b2:94:ec:
c5:36:d9:f2:d0:b2:52:ae:50:96:29:1d:65:bb:23:6e:01:a3:
16:02:04:33:03:84:8a:d2:4e:d3:45:c9:e2:e5:0b:7c:15:02:
61:01:8e:54:dd:e3:47:1f:70:34:06:f6:90:c3:60:9e:de:c6:
e6:c5:a9:03:e6:92:9d:c4:ac:e4:f2:c4:22:69:bf:a6:61:dd:
a6:d0:2f:73:25:9c:54:cb:86:05:ad:50:be:df:cc:de:24:04:
ff:f3:ea:b5:28:a8:22:8d:84:54:fe:c7:ee:c5:79:72:b0:0e:
ba:33:f6:68:d2:df:fa:f2:44:78:98:3d:22:e9:32:2a:61:d0:
e2:53:7d:6f:3b:ad:46:55:ce:2f:3b:42:c3:2e:0e:8c:65:9c:
18:dd:ff:78:0b:1b:86:45:91:c5:ad:2f:94:86:a2:e4:fd:ef:
d9:6c:f3:07:de:37:f2:86:7f:6b:8d:5d:3b:94:61:f9:10:54:
c2:33:8b:b4:6c:83:86:9b:93:0f:a4:cc:8a:f3:ea:25:ea:0a:
82:58:75:05:e8:7f:4a:7c:07:f5:f9:98:e6:f4:85:24:7e:ee:
b2:94:16:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:06:37 2026 by rpki-client