
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/caeef20a-a900-4970-b7d6-9b8c54fb0052/c2f943f4-97db-375e-a1b7-bb9bf7e268a0.roa
File: c2f943f4-97db-375e-a1b7-bb9bf7e268a0.roa (raw, json)
Hash identifier: isVrGJTAV8g+gui5Wb4RFiVibeTkBNPUcmvPHUFMvPU=
Subject key identifier: C2:EF:F6:74:1B:43:A3:B4:CF:BF:BB:29:1E:E8:54:3E:45:BC:EE:11
Certificate issuer: /CN=caeef20a-a900-4970-b7d6-9b8c54fb0052
Certificate serial: 010D0C9F4328584CF5879DFAE264CCD5F0E6D600
Authority key identifier: A8:35:F2:C3:15:98:64:2C:0F:BD:89:10:8B:E1:62:E3:A4:57:58:16
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/caeef20a-a900-4970-b7d6-9b8c54fb0052.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/caeef20a-a900-4970-b7d6-9b8c54fb0052/c2f943f4-97db-375e-a1b7-bb9bf7e268a0.roa
Signing time: Mon 23 Feb 2026 14:00:41 +0000
ROA not before: Mon 23 Feb 2026 14:00:41 +0000
ROA not after: Sun 24 May 2026 13:00:41 +0000
asID: 14618
IP address blocks: 23.148.128.0/24 maxlen: 24
2602:ff0d::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/caeef20a-a900-4970-b7d6-9b8c54fb0052/caeef20a-a900-4970-b7d6-9b8c54fb0052.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/caeef20a-a900-4970-b7d6-9b8c54fb0052/caeef20a-a900-4970-b7d6-9b8c54fb0052.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/caeef20a-a900-4970-b7d6-9b8c54fb0052.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:f5:87:9d:fa:e2:64:cc:d5:f0:e6:d6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caeef20a-a900-4970-b7d6-9b8c54fb0052
Validity
Not Before: Feb 23 14:00:41 2026 GMT
Not After : May 24 13:00:41 2026 GMT
Subject: CN=994023c6-d5f4-41cc-96fd-139a5e884779
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:74:e6:75:7e:73:ac:d3:41:80:c4:e9:15:3f:
84:12:1d:fd:f8:2f:9e:7f:4a:03:73:4a:4a:16:e1:
a2:fa:f0:28:83:11:87:98:eb:ee:2f:ac:42:ef:2e:
60:fc:e6:f4:41:4f:45:14:b2:1c:6c:64:85:87:ff:
8f:a1:58:90:fb:ab:62:27:58:5c:d2:d1:6b:fc:19:
fa:59:20:fb:ce:9f:63:e5:0b:eb:61:11:66:ce:1b:
ed:c2:a6:51:44:fe:7e:4b:8c:9a:ff:69:ec:a0:e3:
08:32:0e:01:92:a3:5c:d6:bd:b3:f0:af:26:1f:b6:
8f:d9:ad:35:92:ca:79:ef:e2:9a:76:25:6d:8d:15:
fb:71:47:ff:7e:69:b4:e2:e7:3d:93:1c:7c:16:b3:
05:da:ee:1c:8c:8f:0f:af:b4:90:97:8c:1d:2f:e7:
86:fe:48:c4:6c:7c:4b:15:24:b3:d2:53:d7:26:19:
5d:98:1e:e8:a3:3e:09:e7:4b:49:6d:16:23:45:e8:
dc:9c:3e:91:8b:de:f0:a4:58:15:6a:9c:7a:a2:08:
47:30:93:2c:47:8a:47:fe:38:be:08:15:ed:a6:8b:
7e:b9:20:ec:b4:86:e7:81:c1:96:6e:ab:8b:34:8e:
91:cb:55:7f:bd:af:be:16:65:5b:cb:3c:c8:d0:7a:
76:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:EF:F6:74:1B:43:A3:B4:CF:BF:BB:29:1E:E8:54:3E:45:BC:EE:11
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/caeef20a-a900-4970-b7d6-9b8c54fb0052/c2f943f4-97db-375e-a1b7-bb9bf7e268a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/caeef20a-a900-4970-b7d6-9b8c54fb0052/caeef20a-a900-4970-b7d6-9b8c54fb0052.crl
X509v3 Authority Key Identifier:
keyid:A8:35:F2:C3:15:98:64:2C:0F:BD:89:10:8B:E1:62:E3:A4:57:58:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/caeef20a-a900-4970-b7d6-9b8c54fb0052.cer
sbgp-ipAddrBlock: critical
IPv4:
23.148.128.0/24
IPv6:
2602:ff0d::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a2:4d:ed:cc:e2:e1:cd:c2:46:b3:56:bd:06:28:68:16:55:ae:
1b:0e:4c:af:cd:f7:1d:01:e4:33:a7:fd:c5:2d:b0:9e:92:7d:
ae:98:8d:b4:5d:8b:64:33:ab:25:25:e2:48:1d:47:c6:67:53:
ae:e4:1e:3f:b0:4b:f2:5e:5f:2d:73:e5:92:2a:e6:99:ff:79:
41:f7:34:23:74:b1:79:0f:f4:d2:8c:eb:79:28:c6:68:51:b0:
eb:71:ee:45:26:75:e8:da:5f:4b:c8:8b:82:b4:4e:85:e0:6a:
78:23:c3:a5:2c:d9:ee:85:9f:3a:87:63:07:33:99:54:06:46:
cc:07:38:61:84:39:94:e8:a3:cf:4d:dd:42:ad:47:52:a2:13:
0d:eb:09:23:2b:24:c6:d6:8f:87:5e:2c:08:fd:e5:f0:e4:87:
8f:91:0b:0e:06:71:5e:f5:c7:a0:5e:b1:f1:43:b3:93:e7:9d:
0b:7b:41:24:65:f8:5b:fd:45:97:e9:99:48:22:c2:f7:ff:d4:
3c:16:6a:fd:7b:90:a3:81:15:26:fa:67:0b:32:55:1e:3a:13:
d4:ab:82:dd:6d:c3:84:27:98:0c:bb:83:c6:4e:9e:46:b7:43:
2e:2a:bb:92:46:6f:92:06:63:16:90:27:5e:9e:c9:d0:91:dc:
77:5a:7f:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:37:18 2026 by rpki-client