
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfb32325-5962-452d-81bb-2eb68992a5df/d8691a01-818a-3ee6-8c72-fa036d95527b.roa
File: d8691a01-818a-3ee6-8c72-fa036d95527b.roa (raw, json)
Hash identifier: 9Ry2iGR9lcbKbCfD9OrgKNkvf1pIHewMqTcLSxwAtDg=
Subject key identifier: 13:AA:7C:F5:D3:13:AB:B8:4D:DD:AB:7F:F9:D0:3D:4D:66:CB:32:0F
Certificate issuer: /CN=bfb32325-5962-452d-81bb-2eb68992a5df
Certificate serial: 010D0C9F4328584CFF4CD4F75CF7A4B65359CF80
Authority key identifier: 8C:1D:C1:63:FA:85:9E:01:60:50:F0:C0:86:FF:F2:F4:3E:3B:24:B2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfb32325-5962-452d-81bb-2eb68992a5df.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfb32325-5962-452d-81bb-2eb68992a5df/d8691a01-818a-3ee6-8c72-fa036d95527b.roa
Signing time: Fri 27 Feb 2026 02:00:31 +0000
ROA not before: Fri 27 Feb 2026 02:00:31 +0000
ROA not after: Thu 28 May 2026 01:00:31 +0000
asID: 398076
IP address blocks: 23.150.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfb32325-5962-452d-81bb-2eb68992a5df/bfb32325-5962-452d-81bb-2eb68992a5df.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfb32325-5962-452d-81bb-2eb68992a5df/bfb32325-5962-452d-81bb-2eb68992a5df.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfb32325-5962-452d-81bb-2eb68992a5df.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ff:4c:d4:f7:5c:f7:a4:b6:53:59:cf:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfb32325-5962-452d-81bb-2eb68992a5df
Validity
Not Before: Feb 27 02:00:31 2026 GMT
Not After : May 28 01:00:31 2026 GMT
Subject: CN=3633d869-c796-4d2d-af07-86b9e012d54d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:08:49:ab:89:8d:44:6a:71:50:85:2b:18:28:
96:ff:0f:a2:83:45:de:17:45:27:b5:30:19:3c:9c:
9a:2b:89:b7:69:24:b7:61:9c:7f:ac:bc:3c:13:93:
93:8f:bd:ab:39:26:c5:9f:31:57:87:75:74:d6:17:
b2:16:63:f0:4b:96:82:23:bf:ac:de:ca:01:73:89:
b6:f9:51:c9:98:c5:53:b9:16:8b:16:9f:4d:4e:2a:
7f:f8:6b:96:92:52:f0:b0:9f:22:df:e3:66:72:8e:
89:e3:70:99:7e:b5:99:5d:af:d8:59:e2:59:c5:10:
91:d7:5a:c9:4a:21:40:84:43:82:74:9f:2c:23:5b:
a6:05:fd:c0:3e:be:47:d8:42:bb:f8:c8:63:72:6a:
88:1d:c2:b6:2b:5e:59:2b:23:1e:4d:d7:ca:31:8b:
3b:76:bc:d3:08:d7:84:c5:18:71:3a:8c:64:7f:d5:
33:bc:9d:40:8d:4d:1b:c2:0a:9f:42:7a:e0:df:8b:
4d:80:fa:59:08:fc:98:53:74:e0:51:c7:9b:78:b2:
a0:3f:2c:7e:5e:84:a6:85:87:e8:3c:a9:d2:8b:11:
cb:39:4e:7e:6b:42:d2:d5:d5:cc:64:99:ea:f8:ae:
8f:ae:75:91:c6:ab:f0:5c:de:d8:a5:1b:ca:31:2e:
f2:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:AA:7C:F5:D3:13:AB:B8:4D:DD:AB:7F:F9:D0:3D:4D:66:CB:32:0F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfb32325-5962-452d-81bb-2eb68992a5df/d8691a01-818a-3ee6-8c72-fa036d95527b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfb32325-5962-452d-81bb-2eb68992a5df/bfb32325-5962-452d-81bb-2eb68992a5df.crl
X509v3 Authority Key Identifier:
keyid:8C:1D:C1:63:FA:85:9E:01:60:50:F0:C0:86:FF:F2:F4:3E:3B:24:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfb32325-5962-452d-81bb-2eb68992a5df.cer
sbgp-ipAddrBlock: critical
IPv4:
23.150.244.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:d3:29:f7:06:de:02:f7:60:cf:b1:60:0b:da:d9:08:82:39:
fa:78:5a:d9:29:91:c2:de:4c:01:1e:97:22:24:7b:c2:af:5c:
ed:3d:b9:66:10:6a:ef:27:9c:ea:83:55:eb:8d:00:ea:dc:ce:
62:71:45:7f:67:f3:e3:08:bb:f1:38:b5:74:aa:da:84:7f:58:
c4:8f:04:42:ee:8a:1d:ca:c2:ca:db:e2:dd:7e:04:48:f1:13:
fa:70:df:b2:41:88:91:ec:0f:bb:6a:b2:5c:7c:9e:ea:de:86:
a9:84:7f:f2:4d:1a:4c:dc:86:72:02:53:c1:13:7e:c9:62:57:
1e:01:71:d3:65:ac:31:09:b1:69:7d:b6:21:14:06:fe:2c:41:
ad:8f:3b:98:29:f6:b7:6e:85:e5:61:e1:78:32:65:11:e5:51:
a9:a9:b0:87:f3:de:a5:36:08:98:65:1d:e9:ed:c1:ab:5b:b2:
07:dc:22:0b:d0:3f:54:95:96:04:e8:de:64:b5:54:cd:42:9b:
64:90:7a:b0:72:8d:cf:8b:75:cc:6b:05:c4:ed:36:2a:56:52:
b0:25:52:1d:74:0c:c6:2f:3a:70:94:c2:41:ad:8b:99:be:b0:
09:13:2d:e4:ed:18:7a:d5:01:69:96:c9:23:50:b1:dd:f5:d4:
45:ad:16:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:36:55 2026 by rpki-client