
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/743065a1-7855-4be2-941a-23bce4898410/41a20fa4-6783-3fc5-a585-b5d19d51ab5b.roa
File: 41a20fa4-6783-3fc5-a585-b5d19d51ab5b.roa (raw, json)
Hash identifier: 1CB67f1uWhS7QbYz8hqDSAkp8le4Jy0nyfvXgAfu/R4=
Subject key identifier: AD:4F:49:E8:34:D2:CC:CA:9A:78:58:B8:AD:B1:92:D0:50:50:5C:C2
Certificate issuer: /CN=743065a1-7855-4be2-941a-23bce4898410
Certificate serial: 010D0C9F4328584CED278EFCA233120CC699F8C0
Authority key identifier: 1D:E0:AD:EE:8D:77:87:A8:E1:04:5F:81:3B:C9:D9:7C:58:5B:11:1C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/743065a1-7855-4be2-941a-23bce4898410.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/743065a1-7855-4be2-941a-23bce4898410/41a20fa4-6783-3fc5-a585-b5d19d51ab5b.roa
Signing time: Fri 20 Feb 2026 14:00:41 +0000
ROA not before: Fri 20 Feb 2026 14:00:41 +0000
ROA not after: Thu 21 May 2026 13:00:41 +0000
asID: 209242
IP address blocks: 23.145.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/743065a1-7855-4be2-941a-23bce4898410/743065a1-7855-4be2-941a-23bce4898410.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/743065a1-7855-4be2-941a-23bce4898410/743065a1-7855-4be2-941a-23bce4898410.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/743065a1-7855-4be2-941a-23bce4898410.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ed:27:8e:fc:a2:33:12:0c:c6:99:f8:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=743065a1-7855-4be2-941a-23bce4898410
Validity
Not Before: Feb 20 14:00:41 2026 GMT
Not After : May 21 13:00:41 2026 GMT
Subject: CN=8f08da2b-1404-402b-baa9-4ecd154b4eb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b3:f4:12:f4:9a:46:3b:cb:6d:f0:f7:62:2b:
c0:53:b3:8f:b7:36:80:7f:cb:47:8e:fc:f4:85:64:
ba:4f:0f:e1:f2:2b:23:78:da:6e:f7:b3:c8:54:01:
42:71:98:73:17:61:fa:6d:4a:af:dd:98:6c:ac:05:
f6:80:b1:83:77:9a:6f:40:64:4f:d5:a6:ec:55:f5:
91:2e:e1:06:30:97:3e:b5:7f:58:41:1d:46:44:fe:
23:a9:51:5d:73:18:ca:9b:63:4b:5e:7f:69:d5:ee:
80:0b:6a:9f:a9:7d:7a:8f:23:eb:c4:b1:fc:15:17:
50:41:85:4a:c6:14:cd:40:55:b1:d5:38:5c:84:76:
40:a3:9b:07:73:fa:55:e2:c4:15:64:ea:0b:32:ab:
25:ba:f2:8f:5c:84:ae:c6:d1:e9:30:c4:bb:f7:d3:
57:ce:86:5f:8c:1b:89:d1:6c:71:92:1a:47:db:f5:
03:e8:6e:f1:4a:20:57:72:cb:cf:76:ca:05:f1:27:
95:da:75:18:ee:5b:26:64:9f:94:86:0b:73:34:bb:
51:a3:3d:af:ad:e3:b3:6c:8d:48:a4:a5:29:84:19:
87:ef:3c:6a:e1:fe:de:c2:46:e5:af:26:e5:d2:5b:
85:8f:35:7a:ad:6f:72:22:68:81:0d:26:57:95:2d:
82:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:4F:49:E8:34:D2:CC:CA:9A:78:58:B8:AD:B1:92:D0:50:50:5C:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/743065a1-7855-4be2-941a-23bce4898410/41a20fa4-6783-3fc5-a585-b5d19d51ab5b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/743065a1-7855-4be2-941a-23bce4898410/743065a1-7855-4be2-941a-23bce4898410.crl
X509v3 Authority Key Identifier:
keyid:1D:E0:AD:EE:8D:77:87:A8:E1:04:5F:81:3B:C9:D9:7C:58:5B:11:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/743065a1-7855-4be2-941a-23bce4898410.cer
sbgp-ipAddrBlock: critical
IPv4:
23.145.152.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:55:d8:52:88:5d:33:54:a1:38:f5:31:ca:d0:ac:4f:5e:64:
18:2a:b3:e3:fa:39:50:12:86:7d:43:d0:22:29:c8:8b:db:39:
e6:55:e1:df:7a:07:21:ac:41:2b:03:74:a8:30:62:67:4d:6f:
89:35:75:1f:f7:b4:99:f8:a2:0b:59:28:47:1c:f9:fe:55:82:
05:89:63:77:2f:ae:f8:a0:e4:f1:81:77:c0:bf:4d:50:5d:30:
7c:76:14:be:0a:02:b0:db:c7:23:ca:94:a4:68:db:02:a4:a4:
4d:e4:fe:43:48:77:c8:b9:18:43:f6:54:89:04:63:95:f2:59:
a6:9a:fc:c0:cc:5c:11:8b:88:39:c8:20:f5:4d:64:61:83:78:
31:b6:de:ef:c9:e8:a4:5e:89:ab:24:d3:d8:26:85:30:b6:2b:
31:65:5d:6f:f7:63:b7:4a:20:63:15:cc:93:75:28:9c:cf:10:
d7:d2:93:93:07:ec:84:3d:84:f3:79:91:83:48:dc:24:b3:46:
5d:ba:ca:0a:1c:e5:f4:5e:75:16:24:82:56:1f:0b:86:bb:55:
6e:86:bc:ad:2c:99:12:90:ec:a5:be:78:a3:b4:d4:bb:38:31:
e6:57:76:42:b6:5c:1a:5b:2f:57:7b:1f:52:0a:8d:04:1a:c6:
77:78:52:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:48:03 2026 by rpki-client