
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3572e9fa-d098-46d4-a528-9373b3585402/c88482ce-5336-3c12-a513-f86f7726f25a.roa
File: c88482ce-5336-3c12-a513-f86f7726f25a.roa (raw, json)
Hash identifier: ASFb1Fz4+Wd6PQdySyZ7oTc4Fc9ZtMy+uUcObH5yGug=
Subject key identifier: 95:13:E2:D8:A3:17:48:AF:51:B5:AD:0C:5A:69:12:B2:47:1A:B9:84
Certificate issuer: /CN=3572e9fa-d098-46d4-a528-9373b3585402
Certificate serial: 010D0C9F4328584D80FFE4AA0667705E30DB9800
Authority key identifier: B7:27:E5:DF:31:B7:70:E8:F4:1E:DA:8A:6E:34:0B:F3:08:8B:30:CB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3572e9fa-d098-46d4-a528-9373b3585402.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3572e9fa-d098-46d4-a528-9373b3585402/c88482ce-5336-3c12-a513-f86f7726f25a.roa
Signing time: Tue 14 Apr 2026 13:00:30 +0000
ROA not before: Tue 14 Apr 2026 13:00:30 +0000
ROA not after: Mon 13 Jul 2026 13:00:30 +0000
asID: 40139
IP address blocks: 23.186.144.0/24 maxlen: 24
23.186.145.0/24 maxlen: 24
23.186.146.0/24 maxlen: 24
23.186.147.0/24 maxlen: 24
23.186.148.0/24 maxlen: 24
23.186.149.0/24 maxlen: 24
23.186.150.0/24 maxlen: 24
23.186.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3572e9fa-d098-46d4-a528-9373b3585402/3572e9fa-d098-46d4-a528-9373b3585402.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3572e9fa-d098-46d4-a528-9373b3585402/3572e9fa-d098-46d4-a528-9373b3585402.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3572e9fa-d098-46d4-a528-9373b3585402.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 05:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:80:ff:e4:aa:06:67:70:5e:30:db:98:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3572e9fa-d098-46d4-a528-9373b3585402
Validity
Not Before: Apr 14 13:00:30 2026 GMT
Not After : Jul 13 13:00:30 2026 GMT
Subject: CN=3e77dc24-43d5-402c-be0a-68ab16a517e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:bc:24:ac:a2:a2:ee:72:ee:00:03:7b:31:fa:
2c:a8:11:11:f7:bb:86:b6:7f:b9:5a:12:69:b8:3b:
8e:07:e3:35:a8:da:47:fd:89:9a:7b:a9:d3:b7:98:
88:aa:1f:3a:70:16:b5:14:0e:72:40:91:7f:2d:38:
58:ac:a7:5d:dc:16:c5:e9:93:b9:6e:83:9f:98:3d:
54:e4:4e:f1:2b:4d:b7:20:e3:8b:dc:65:e5:4c:a1:
ba:8f:3c:dd:13:d4:63:77:83:38:77:cc:c8:d5:61:
f2:b4:01:02:26:84:9f:04:51:67:19:a4:b6:b5:cf:
97:bd:30:7e:c2:ad:a2:2f:fb:1b:7f:05:b2:e7:af:
00:25:cf:b2:ed:04:fa:2d:a5:97:45:af:ae:dc:11:
48:41:f7:f3:76:a0:a9:08:f5:3f:53:29:9e:64:9e:
37:d5:9f:ae:c7:9a:b1:14:b2:8c:75:99:63:4f:98:
98:6f:73:84:03:cb:82:a8:8d:98:b7:42:9d:54:bb:
9b:97:ec:a6:30:e6:05:20:41:4f:7a:32:db:54:16:
f9:c6:22:94:5f:10:b1:0d:d2:00:0c:85:db:96:c1:
52:e7:ed:33:69:01:13:95:22:76:2a:35:76:1f:0d:
73:a1:81:bf:82:0e:59:cb:95:39:58:9d:42:72:20:
5b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:13:E2:D8:A3:17:48:AF:51:B5:AD:0C:5A:69:12:B2:47:1A:B9:84
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3572e9fa-d098-46d4-a528-9373b3585402/c88482ce-5336-3c12-a513-f86f7726f25a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3572e9fa-d098-46d4-a528-9373b3585402/3572e9fa-d098-46d4-a528-9373b3585402.crl
X509v3 Authority Key Identifier:
keyid:B7:27:E5:DF:31:B7:70:E8:F4:1E:DA:8A:6E:34:0B:F3:08:8B:30:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3572e9fa-d098-46d4-a528-9373b3585402.cer
sbgp-ipAddrBlock: critical
IPv4:
23.186.144.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:63:f0:89:40:c3:68:dd:d9:49:93:77:11:ee:51:41:80:75:
aa:d6:a3:28:0e:d8:d3:8b:6c:8a:00:e2:a0:0c:bf:87:7a:47:
f8:8c:2a:43:1d:03:26:f0:74:d0:28:85:00:c8:27:64:a6:89:
2c:04:0f:a4:6c:28:f1:96:22:a3:ae:8f:3b:f3:db:b2:47:fd:
9b:e8:a4:b7:c0:f5:30:77:be:78:dd:ad:b4:fa:9a:2d:2a:52:
b4:6b:e7:8c:4c:64:be:c5:d3:36:c3:8a:dd:ea:68:e7:17:eb:
eb:43:8a:3c:d3:92:46:b8:ce:91:77:56:7b:b5:b1:08:1b:2f:
cc:24:2c:05:37:f3:b5:50:4a:e9:96:39:3e:22:30:ac:55:e8:
6f:8e:00:f6:c4:40:28:d1:6e:e0:82:43:27:bb:b2:d1:e4:d6:
4c:29:23:63:76:ae:76:d8:18:16:52:16:ba:ba:72:83:be:20:
26:c3:b3:c7:9a:f5:ae:bc:63:3d:fd:86:a7:bd:84:38:d9:91:
94:b8:06:50:49:f5:1c:03:03:4b:79:e2:2e:f8:88:fa:7e:47:
6a:3e:ed:fb:77:4e:66:00:11:f2:db:b1:89:2f:d5:d8:d0:4d:
0d:c6:4f:b0:9b:60:b6:df:56:ff:1d:c5:ea:d8:eb:e4:60:b0:
10:c1:88:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:04:46 2026 by rpki-client