
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfbfe00a-3fd7-40c7-b3be-10f9b6968836/8d55acfe-e0e6-33f0-a962-8c056b4c29eb.roa
File: 8d55acfe-e0e6-33f0-a962-8c056b4c29eb.roa (raw, json)
Hash identifier: +9KcDKEK7x5fM77zIIE5025hUag9wF4Af9vbS4D8epk=
Subject key identifier: 3F:A0:47:02:DF:0D:02:AA:DA:38:F4:A1:96:3A:E2:E4:65:FF:64:C3
Certificate issuer: /CN=dfbfe00a-3fd7-40c7-b3be-10f9b6968836
Certificate serial: 010D0C9F4328584CE4C7874B92FE771AE2A3E900
Authority key identifier: 6A:F4:80:FA:0B:58:28:C8:C6:2D:5E:09:A5:B0:4D:2F:BE:C0:50:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfbfe00a-3fd7-40c7-b3be-10f9b6968836.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfbfe00a-3fd7-40c7-b3be-10f9b6968836/8d55acfe-e0e6-33f0-a962-8c056b4c29eb.roa
Signing time: Tue 17 Feb 2026 14:00:41 +0000
ROA not before: Tue 17 Feb 2026 14:00:41 +0000
ROA not after: Mon 18 May 2026 13:00:41 +0000
asID: 20417
IP address blocks: 23.128.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfbfe00a-3fd7-40c7-b3be-10f9b6968836/dfbfe00a-3fd7-40c7-b3be-10f9b6968836.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfbfe00a-3fd7-40c7-b3be-10f9b6968836/dfbfe00a-3fd7-40c7-b3be-10f9b6968836.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfbfe00a-3fd7-40c7-b3be-10f9b6968836.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:e4:c7:87:4b:92:fe:77:1a:e2:a3:e9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfbfe00a-3fd7-40c7-b3be-10f9b6968836
Validity
Not Before: Feb 17 14:00:41 2026 GMT
Not After : May 18 13:00:41 2026 GMT
Subject: CN=931260ea-acc1-4f4b-8ec6-ae18fb28af27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1d:45:3f:2c:eb:e5:3b:dc:04:a1:c0:36:6d:
d4:7a:ae:0f:c2:08:d6:55:10:89:f0:ad:f4:00:d1:
d1:07:68:36:ad:cc:22:90:94:da:28:aa:1a:87:e7:
8d:c4:f9:29:8b:12:dc:06:d5:e0:73:09:92:9d:71:
d1:fc:dd:70:74:1b:78:20:9a:2c:e6:3a:c5:d5:72:
ad:f7:13:bd:ef:4d:42:59:84:64:9a:6a:11:37:49:
f1:a1:d0:c7:dc:35:ce:cf:09:9d:01:b1:49:6c:9a:
c8:1f:c5:00:28:cb:e7:d1:6a:e2:74:f0:5b:60:ce:
3d:40:2c:4c:0e:15:69:c5:88:49:b4:19:3b:bb:a5:
6a:28:0f:f6:8b:1b:72:50:5d:a5:1a:3b:76:1b:c2:
27:0e:f7:99:7b:50:26:3b:0f:0a:e0:ae:e1:60:97:
b3:50:db:b9:7a:32:a1:2b:44:1f:b2:74:22:7d:02:
0c:aa:e8:f0:44:41:11:1a:0b:09:09:14:b3:e9:19:
4a:d6:b8:6c:4f:25:e7:ca:24:f7:36:02:fb:14:92:
32:4e:e5:8c:ff:69:e5:c0:f7:36:af:05:23:9d:ca:
1b:3f:55:d8:11:35:aa:94:78:cf:54:61:1a:71:15:
b1:6f:20:62:0b:86:37:6a:b0:8c:a3:5a:2f:bf:cc:
0d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:A0:47:02:DF:0D:02:AA:DA:38:F4:A1:96:3A:E2:E4:65:FF:64:C3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfbfe00a-3fd7-40c7-b3be-10f9b6968836/8d55acfe-e0e6-33f0-a962-8c056b4c29eb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfbfe00a-3fd7-40c7-b3be-10f9b6968836/dfbfe00a-3fd7-40c7-b3be-10f9b6968836.crl
X509v3 Authority Key Identifier:
keyid:6A:F4:80:FA:0B:58:28:C8:C6:2D:5E:09:A5:B0:4D:2F:BE:C0:50:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dfbfe00a-3fd7-40c7-b3be-10f9b6968836.cer
sbgp-ipAddrBlock: critical
IPv4:
23.128.28.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:ea:5b:1f:e8:a9:a6:46:ce:12:7b:3a:16:5d:81:1d:f9:6a:
6f:ff:af:0d:5d:ae:48:85:10:22:fc:b0:91:92:1b:b0:41:30:
75:1a:35:6e:90:0f:ea:38:c5:e3:68:55:5d:36:dc:1a:76:c9:
3c:60:7d:89:47:e2:97:02:b5:82:78:e8:07:a1:fa:27:ff:27:
bd:49:71:fa:fb:40:a1:69:06:05:1e:30:e0:46:18:bb:f6:41:
56:ab:0f:87:da:68:9e:0b:db:9c:d9:c8:55:a0:14:70:03:44:
bd:43:5f:c2:e6:1d:1b:33:31:5c:c3:36:02:05:11:ee:cd:7a:
0c:c2:6c:b9:87:ca:1c:3b:62:00:d2:0c:22:a6:86:ee:82:d8:
a6:ef:9a:e7:a7:26:c4:bb:dc:f7:45:ea:33:1b:6e:d9:5e:b4:
a9:ca:d3:f4:d9:1c:de:c9:66:61:c5:2c:43:d2:b8:5d:f3:4b:
25:35:2f:c4:e7:aa:f3:57:99:a0:e5:e5:07:60:28:5c:97:b7:
6f:48:78:1e:1f:42:59:2f:04:cf:01:8b:21:17:7b:82:58:26:
2e:30:54:10:52:07:12:03:e3:aa:ea:7b:f3:44:79:c8:5e:ad:
63:1b:46:d4:6a:47:b2:f5:33:87:ae:0b:09:ed:40:d0:5d:e7:
c0:b0:b8:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:58:52 2026 by rpki-client