
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e7f205fa-32db-476e-9815-f418a58479c3/51f23690-2c9e-3571-8cfe-0e89c650c651.roa
File: 51f23690-2c9e-3571-8cfe-0e89c650c651.roa (raw, json)
Hash identifier: tkSPqu/QCce5CbxHUSwj+JC+pdk4xL9Uxw+yVTW91u0=
Subject key identifier: 94:3F:AB:02:30:DC:19:01:DC:9C:4A:2A:58:AF:22:F3:56:5C:CE:41
Certificate issuer: /CN=e7f205fa-32db-476e-9815-f418a58479c3
Certificate serial: 010D0C9F4328584E210EFAFB40D45B6F9501A176
Authority key identifier: 2A:4D:D2:2E:FE:CD:53:2B:93:98:39:B2:5E:B6:95:5E:1D:23:C0:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e7f205fa-32db-476e-9815-f418a58479c3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e7f205fa-32db-476e-9815-f418a58479c3/51f23690-2c9e-3571-8cfe-0e89c650c651.roa
Signing time: Wed 10 Jun 2026 21:00:11 +0000
ROA not before: Wed 10 Jun 2026 21:00:11 +0000
ROA not after: Tue 08 Sep 2026 21:00:11 +0000
asID: 398041
IP address blocks: 23.146.136.0/24 maxlen: 24
2607:20c0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e7f205fa-32db-476e-9815-f418a58479c3/e7f205fa-32db-476e-9815-f418a58479c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e7f205fa-32db-476e-9815-f418a58479c3/e7f205fa-32db-476e-9815-f418a58479c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e7f205fa-32db-476e-9815-f418a58479c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 15 Jun 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:21:0e:fa:fb:40:d4:5b:6f:95:01:a1:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7f205fa-32db-476e-9815-f418a58479c3
Validity
Not Before: Jun 10 21:00:11 2026 GMT
Not After : Sep 8 21:00:11 2026 GMT
Subject: CN=031d6eac-402e-45a7-8fd9-6a8302796db9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a3:72:ab:84:fc:42:76:50:b4:fc:49:29:6e:
3c:e0:a3:8f:aa:a4:a6:4b:24:cc:dc:0f:ee:ec:0e:
d4:8b:1f:84:83:8d:4f:4c:e2:db:2c:89:2b:93:51:
c6:6c:ea:d7:ca:d3:cc:ff:69:61:93:8f:ea:44:f5:
b1:42:c7:f0:a0:93:09:f4:3e:91:67:f8:43:8f:c8:
09:88:40:cb:8c:22:f2:82:f2:5b:67:0c:a8:19:a2:
15:84:b8:f3:60:7e:07:dc:5d:72:90:0f:6a:71:1e:
12:dd:5d:b5:61:13:f7:06:13:ce:7c:69:c1:e9:6f:
cb:57:b8:b2:b8:94:e7:eb:75:60:a7:87:c8:1f:52:
bc:8f:e3:77:b8:e3:38:64:d8:71:64:fb:d4:d1:4b:
83:fa:a3:1d:4c:a2:5e:3e:a2:46:67:d4:0f:98:2d:
7a:c9:17:7f:4f:7d:62:f2:71:0c:a9:ed:e0:a9:81:
20:8f:52:ae:97:fa:af:40:dc:e0:bb:b2:ab:08:1a:
84:b7:dc:e2:45:fa:f1:63:19:6b:57:fa:ee:27:9b:
33:4b:21:14:a5:fd:6d:ce:04:0e:f8:ec:53:2b:e1:
1b:b0:1b:28:5e:d7:8a:e7:67:cc:5f:0c:53:6e:ee:
8a:0d:1c:c6:39:1b:44:21:bf:74:1c:85:4e:89:29:
42:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:3F:AB:02:30:DC:19:01:DC:9C:4A:2A:58:AF:22:F3:56:5C:CE:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e7f205fa-32db-476e-9815-f418a58479c3/51f23690-2c9e-3571-8cfe-0e89c650c651.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e7f205fa-32db-476e-9815-f418a58479c3/e7f205fa-32db-476e-9815-f418a58479c3.crl
X509v3 Authority Key Identifier:
keyid:2A:4D:D2:2E:FE:CD:53:2B:93:98:39:B2:5E:B6:95:5E:1D:23:C0:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e7f205fa-32db-476e-9815-f418a58479c3.cer
sbgp-ipAddrBlock: critical
IPv4:
23.146.136.0/24
IPv6:
2607:20c0::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:63:2b:bb:c0:c4:e7:45:a8:bb:e2:59:0d:6c:00:d4:df:67:
5c:dd:f2:9d:42:f7:27:d3:60:e7:e1:db:47:20:63:7b:4f:49:
86:b1:6b:80:81:6b:a5:04:c2:c0:91:e2:dd:67:33:8f:d1:63:
b9:90:53:8c:f1:36:9b:60:d3:3b:f0:7e:f7:bb:ec:74:1b:ee:
48:3c:b3:a9:93:6d:06:f3:45:67:c8:1f:67:cb:38:ea:f7:50:
13:41:38:60:c4:88:d1:62:52:05:a4:35:66:60:89:8a:27:ec:
98:38:ab:98:06:a9:4d:0e:24:db:0f:aa:a6:1b:86:ac:28:ce:
d1:84:f5:6c:3c:0e:40:95:4c:a2:fa:90:a9:92:e3:98:87:ee:
35:6e:5e:31:ff:59:77:09:6f:e6:8e:18:df:31:83:1a:4e:e7:
ef:ef:83:54:23:53:20:7a:d5:01:e3:20:5d:8c:fa:26:6e:e1:
26:d0:50:ae:70:4b:9b:bb:3f:0f:95:86:53:b9:d0:da:27:d8:
e3:5d:37:69:71:25:f2:c0:d2:8a:c4:26:55:96:b6:8b:1e:b3:
53:89:9f:1e:9d:8a:fe:4b:b4:0a:16:40:bb:83:17:68:1d:aa:
9f:ab:7f:1b:f9:3b:66:52:01:41:c6:e5:40:01:18:d3:e3:f8:
9d:dd:ad:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:22:34 2026 by rpki-client