
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d49d6e31-9274-4997-a718-4ba13c83041c/35aa566c-1d54-3f84-a686-08058cbecf0f.roa
File: 35aa566c-1d54-3f84-a686-08058cbecf0f.roa (raw, json)
Hash identifier: gQjwDcUMYaE1p6r5pi4CfidaFXCB2HtSF+k/nq9Y4Lk=
Subject key identifier: 8D:6A:23:03:71:42:DF:7B:F4:3D:E5:FC:F8:D2:A0:91:54:39:AA:3C
Certificate issuer: /CN=d49d6e31-9274-4997-a718-4ba13c83041c
Certificate serial: 010D0C9F4328584CF5879795BDACC2C1568FE680
Authority key identifier: 48:00:01:89:2B:1B:3F:0A:CC:70:19:D8:E6:32:2E:B2:F7:A7:D9:E5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d49d6e31-9274-4997-a718-4ba13c83041c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d49d6e31-9274-4997-a718-4ba13c83041c/35aa566c-1d54-3f84-a686-08058cbecf0f.roa
Signing time: Mon 23 Feb 2026 14:00:41 +0000
ROA not before: Mon 23 Feb 2026 14:00:41 +0000
ROA not after: Sun 24 May 2026 13:00:41 +0000
asID: 63023
IP address blocks: 23.157.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d49d6e31-9274-4997-a718-4ba13c83041c/d49d6e31-9274-4997-a718-4ba13c83041c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d49d6e31-9274-4997-a718-4ba13c83041c/d49d6e31-9274-4997-a718-4ba13c83041c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d49d6e31-9274-4997-a718-4ba13c83041c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:f5:87:97:95:bd:ac:c2:c1:56:8f:e6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d49d6e31-9274-4997-a718-4ba13c83041c
Validity
Not Before: Feb 23 14:00:41 2026 GMT
Not After : May 24 13:00:41 2026 GMT
Subject: CN=2cb8d120-f2df-4772-a501-9c454f06b7e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:f3:37:7e:6e:c1:5f:4c:2f:b2:b8:2b:22:77:
26:21:d8:a4:6f:52:af:73:7d:9a:06:45:4b:a2:f8:
18:f0:d7:73:1f:c3:2b:0c:ee:bf:6c:73:29:89:7e:
2f:57:2f:b4:06:01:9b:92:a0:e6:b0:f1:a8:98:8f:
2a:15:4d:b9:6b:db:38:7c:26:10:4c:ef:14:29:6a:
4a:07:33:15:67:c4:2a:a7:a9:06:01:fc:bf:b2:57:
32:85:16:de:87:88:b5:ba:00:f4:24:99:e2:49:e7:
02:79:88:44:76:4f:87:43:40:66:f0:fd:87:28:5d:
ae:f6:68:8f:de:ce:8c:e8:4a:a9:b4:fb:75:40:ca:
a2:0b:43:a6:ef:98:b8:53:82:b0:0d:20:7c:4c:2d:
69:e9:29:90:dd:ac:35:41:3b:64:f2:94:b2:49:05:
db:e5:6b:c6:a3:4d:6c:f1:6f:82:7f:78:22:ab:e7:
65:6b:ba:fe:ad:10:87:63:36:0e:9d:83:62:3c:6b:
aa:c0:56:9a:f6:da:22:f9:01:23:69:d7:07:92:21:
cd:a8:3d:de:93:f4:fe:96:99:ce:40:18:ca:c7:ef:
9f:8f:1d:95:db:9c:79:67:f2:95:28:3e:2c:29:34:
9a:d3:b9:d1:b5:4f:bf:3c:80:a8:41:9f:37:6c:47:
4f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:6A:23:03:71:42:DF:7B:F4:3D:E5:FC:F8:D2:A0:91:54:39:AA:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d49d6e31-9274-4997-a718-4ba13c83041c/35aa566c-1d54-3f84-a686-08058cbecf0f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d49d6e31-9274-4997-a718-4ba13c83041c/d49d6e31-9274-4997-a718-4ba13c83041c.crl
X509v3 Authority Key Identifier:
keyid:48:00:01:89:2B:1B:3F:0A:CC:70:19:D8:E6:32:2E:B2:F7:A7:D9:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d49d6e31-9274-4997-a718-4ba13c83041c.cer
sbgp-ipAddrBlock: critical
IPv4:
23.157.40.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:6b:bd:2b:50:6b:1c:c3:cb:5e:b3:7d:9f:bc:01:82:be:d5:
88:d2:bb:15:4d:7e:e0:10:25:04:9e:a1:c5:fb:74:aa:4e:ae:
89:8d:57:b8:df:ef:d7:50:92:0e:76:a6:03:fe:dd:71:11:f3:
75:47:cd:b4:0b:4b:0f:a9:a5:19:61:49:26:a2:df:b4:47:57:
44:9b:c1:6a:37:58:f7:a2:3c:26:26:98:fb:b5:eb:ad:77:78:
2f:94:1e:5c:65:85:d1:ae:79:fc:42:56:b3:88:bc:3b:3b:21:
1d:7e:98:37:e8:17:24:e8:92:51:e4:0b:4c:23:1c:c0:53:46:
eb:40:69:c3:3d:33:9e:2e:d4:2f:b5:30:cd:a3:ab:c7:0b:d3:
60:a6:de:28:3b:f7:21:2c:2b:cd:db:50:50:5c:d5:69:56:4e:
94:b9:88:45:7c:07:11:a0:7e:6c:cd:b7:7b:57:d1:87:6a:4c:
80:bf:f6:3f:da:67:1a:7c:5d:63:d3:32:54:6e:91:62:99:3b:
81:28:fd:9f:6a:61:60:bf:cf:51:e3:04:49:52:be:76:b5:76:
67:c3:a9:18:06:73:33:0e:9f:1b:43:b1:e4:72:5b:8e:72:12:
13:3c:5c:47:42:c4:e6:a9:a3:1e:5c:f1:a2:40:e7:c4:6c:ca:
93:c3:85:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:35:01 2026 by rpki-client