
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07/5cc65789-e006-3aa4-ab5b-31603ba48809.roa
File: 5cc65789-e006-3aa4-ab5b-31603ba48809.roa (raw, json)
Hash identifier: Pj2JtvPK9sLNP2CVx9NSRhQLyf4HNQp1tiTKWPlIqUY=
Subject key identifier: EC:8B:F9:D6:0C:0B:6B:0E:50:F6:E8:7D:ED:30:58:A0:7D:6E:FF:C0
Certificate issuer: /CN=af7885f2-5b14-4ded-b2dd-7befe215db07
Certificate serial: 010D0C9F4328584D5E1A6934C972BBDFD4AEB140
Authority key identifier: BD:34:91:4A:B0:1B:60:12:AA:CE:A1:2D:C1:64:C9:BC:BE:E5:61:B0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07/5cc65789-e006-3aa4-ab5b-31603ba48809.roa
Signing time: Thu 02 Apr 2026 01:00:23 +0000
ROA not before: Thu 02 Apr 2026 01:00:23 +0000
ROA not after: Wed 01 Jul 2026 01:00:23 +0000
asID: 20067
IP address blocks: 23.148.8.0/24 maxlen: 24
2602:811:c000::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07/af7885f2-5b14-4ded-b2dd-7befe215db07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07/af7885f2-5b14-4ded-b2dd-7befe215db07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:5e:1a:69:34:c9:72:bb:df:d4:ae:b1:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af7885f2-5b14-4ded-b2dd-7befe215db07
Validity
Not Before: Apr 2 01:00:23 2026 GMT
Not After : Jul 1 01:00:23 2026 GMT
Subject: CN=4c9930c0-2693-4260-ac28-6f7163489619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:bf:32:f4:c2:c8:a4:bb:de:76:1c:6b:92:65:
4d:14:bb:d2:12:c8:0f:fa:43:0a:46:3d:e6:95:4a:
f5:d4:3d:70:de:13:ba:02:7e:db:dd:e6:01:b7:e9:
f3:c6:8e:32:c2:03:c2:56:68:53:a6:76:57:26:8e:
46:f3:41:99:78:be:0a:e1:55:b5:ad:e4:cd:5b:ab:
ea:b3:0c:4c:d4:60:ee:ab:ab:80:01:1d:80:ef:18:
f6:b1:0d:93:c5:ed:47:f0:5e:f9:fc:72:9d:31:35:
85:23:e1:43:fc:26:9d:db:09:92:e5:3a:68:87:08:
b4:e1:1c:96:13:06:71:cf:f8:3b:fa:ec:a7:69:16:
91:8e:1d:65:2f:f2:a3:8d:e0:b0:3d:6d:22:b9:7e:
aa:9b:0f:5d:6d:16:f6:6a:2c:10:e5:73:cc:3a:33:
eb:10:b3:ac:9e:bd:a3:06:58:e7:a7:bf:6f:e9:0f:
be:c6:5a:7a:0d:64:5b:75:ab:89:f3:ac:e7:06:72:
69:60:a8:86:53:22:a2:88:30:f6:68:25:fc:73:b8:
ae:24:12:34:00:e6:e6:34:0b:ae:69:b3:e9:b3:ae:
41:b6:2a:a5:99:14:ca:90:eb:50:55:94:4f:84:48:
d6:13:56:52:5c:21:d3:46:9d:a5:4f:48:22:cd:ce:
d8:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:8B:F9:D6:0C:0B:6B:0E:50:F6:E8:7D:ED:30:58:A0:7D:6E:FF:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07/5cc65789-e006-3aa4-ab5b-31603ba48809.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07/af7885f2-5b14-4ded-b2dd-7befe215db07.crl
X509v3 Authority Key Identifier:
keyid:BD:34:91:4A:B0:1B:60:12:AA:CE:A1:2D:C1:64:C9:BC:BE:E5:61:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/af7885f2-5b14-4ded-b2dd-7befe215db07.cer
sbgp-ipAddrBlock: critical
IPv4:
23.148.8.0/24
IPv6:
2602:811:c000::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:82:9d:99:30:24:d4:65:f4:60:63:46:c7:f6:c4:5f:b4:8b:
1d:3a:d9:08:d7:1a:1d:21:15:b0:5e:4b:8b:3c:69:4d:f5:4a:
28:b4:7e:ee:02:cc:3f:05:d0:b5:ba:2e:fd:b4:78:25:93:62:
8a:a4:30:a0:0d:77:63:11:13:4f:e5:fa:ed:02:a4:76:0f:ab:
fd:26:4f:74:b7:5d:b5:60:5f:de:82:79:54:07:a8:ac:0c:21:
e9:bf:14:10:a0:1c:58:4e:51:1f:2e:9c:b4:96:50:1e:12:f3:
26:13:02:d3:f9:98:e7:33:55:9f:c1:40:e3:b1:b0:8f:3e:06:
f5:1e:a6:fb:52:c1:cb:de:f3:c0:95:a2:e2:43:99:3a:25:32:
f3:50:27:da:65:10:7e:99:08:32:45:da:d4:98:2b:dd:c1:9b:
c7:e5:f5:aa:95:a1:b5:56:05:46:7c:ea:18:a4:f9:dd:b7:9c:
9d:79:8c:b0:7a:47:be:16:99:ef:0e:6a:1a:58:d8:56:03:74:
44:2f:4a:a7:9c:da:b4:80:50:d3:0b:af:3c:42:4d:b4:6d:25:
0b:75:0c:1c:c5:49:6b:d8:8f:0b:64:a1:4e:0a:d9:a2:51:fa:
d2:73:40:67:0f:58:e6:ec:3c:59:25:a2:2a:10:da:d2:05:14:
a0:7f:55:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:48:07 2026 by rpki-client