
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a120b5d4-da56-49b1-8ae1-7987a6afde99/c7fb0120-8473-316e-81b4-70f9121c05f9.roa
File: c7fb0120-8473-316e-81b4-70f9121c05f9.roa (raw, json)
Hash identifier: csgCr2j+nkp+tMVixFVwlUEpImhaCvewIhw+N3qz6lY=
Subject key identifier: C1:78:08:AF:7C:83:1F:EF:52:BF:B0:87:E6:2F:E2:E8:C1:28:99:AC
Certificate issuer: /CN=a120b5d4-da56-49b1-8ae1-7987a6afde99
Certificate serial: 010D0C9F4328584CAE5737BB4FE5B8740A63B320
Authority key identifier: C0:D7:33:E0:5D:4C:05:6E:3A:7E:94:33:2D:C4:6B:E8:01:48:68:8A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a120b5d4-da56-49b1-8ae1-7987a6afde99.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a120b5d4-da56-49b1-8ae1-7987a6afde99/c7fb0120-8473-316e-81b4-70f9121c05f9.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 394989
IP address blocks: 23.151.192.0/24 maxlen: 24
23.151.193.0/24 maxlen: 24
2602:febb::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a120b5d4-da56-49b1-8ae1-7987a6afde99/a120b5d4-da56-49b1-8ae1-7987a6afde99.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a120b5d4-da56-49b1-8ae1-7987a6afde99/a120b5d4-da56-49b1-8ae1-7987a6afde99.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a120b5d4-da56-49b1-8ae1-7987a6afde99.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:57:37:bb:4f:e5:b8:74:0a:63:b3:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a120b5d4-da56-49b1-8ae1-7987a6afde99
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=6e9eafa3-bb08-4fba-ac2e-256737ff0854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b5:23:01:67:38:ef:9c:72:bc:dc:ec:96:63:
52:42:8a:14:4b:ec:b2:89:7e:c0:41:9d:64:70:04:
86:64:87:a8:d0:07:ce:03:10:f9:af:e3:81:c3:6d:
75:4a:f9:2c:46:df:23:e8:01:84:52:ff:f4:3d:a3:
16:ee:b2:c8:75:5e:4f:51:08:cc:ff:3d:3f:e5:3e:
eb:30:84:1c:9e:0e:fa:61:78:9d:ef:ed:87:20:a3:
da:e5:4a:7f:1a:a1:39:7f:88:1a:da:62:67:91:73:
91:15:b2:2b:d5:be:51:43:de:79:ca:7b:e1:bd:9b:
7e:03:66:f0:c1:9f:8c:d5:81:cc:c3:2d:23:ed:67:
d7:7c:48:e0:70:d2:04:2a:b6:e8:b3:87:9c:f3:c2:
10:a0:00:8d:a8:5a:3f:25:e4:75:49:ed:da:0b:79:
3e:c9:cb:d0:78:f0:1d:0e:64:48:9c:b1:3a:7d:e8:
f9:cd:00:9b:5d:e7:4c:ca:46:e2:a6:fe:da:20:4a:
3e:6c:cc:55:f0:2d:4f:ad:57:77:4d:be:48:5e:3e:
75:f3:6f:af:04:39:7d:a3:1a:68:07:02:c0:9c:b7:
7f:22:0b:38:11:67:82:98:7b:d9:11:70:5c:b0:47:
eb:f9:a5:fd:8c:31:23:79:5b:c3:cc:a0:7b:f6:e7:
a7:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:78:08:AF:7C:83:1F:EF:52:BF:B0:87:E6:2F:E2:E8:C1:28:99:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a120b5d4-da56-49b1-8ae1-7987a6afde99/c7fb0120-8473-316e-81b4-70f9121c05f9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a120b5d4-da56-49b1-8ae1-7987a6afde99/a120b5d4-da56-49b1-8ae1-7987a6afde99.crl
X509v3 Authority Key Identifier:
keyid:C0:D7:33:E0:5D:4C:05:6E:3A:7E:94:33:2D:C4:6B:E8:01:48:68:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a120b5d4-da56-49b1-8ae1-7987a6afde99.cer
sbgp-ipAddrBlock: critical
IPv4:
23.151.192.0/23
IPv6:
2602:febb::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ad:72:14:fe:a3:ea:98:95:9f:e3:c9:b7:f2:84:20:f3:f4:7d:
eb:54:21:cd:6e:d2:46:2f:e1:d9:bd:42:73:2b:fc:23:86:98:
c2:dd:74:23:16:bf:8d:ed:23:18:c8:4c:50:0a:a2:ce:12:e2:
12:1e:05:66:53:5d:0e:d7:40:bd:49:97:33:eb:46:ca:d3:cf:
24:ad:28:3d:4e:e0:76:d0:0a:3f:00:5b:2d:35:ce:a9:84:07:
85:fa:0b:3f:84:58:c3:ab:5a:de:45:63:6e:7e:01:e8:04:16:
c6:92:cd:9c:24:f6:fa:ee:6e:6f:b2:82:73:fd:ef:36:50:e1:
cb:99:17:2a:d3:f3:44:34:4f:a0:89:e5:6c:b8:4d:fc:f0:c5:
d5:18:cc:17:bd:8c:d0:8e:91:9f:bc:fe:82:5f:f6:c8:a6:2a:
15:18:04:1e:4f:b3:cb:9e:d0:b2:b5:da:bb:67:26:48:80:f0:
ee:19:f3:09:11:02:25:8e:fa:aa:3d:9b:14:dd:9d:4d:89:1c:
33:88:c7:f2:b3:0d:c8:7f:57:18:dc:a0:ee:bc:c0:d7:ab:ed:
ed:f2:f5:59:3d:67:d1:d0:62:4c:61:a9:50:50:a1:b2:9c:fc:
7a:e3:06:5f:d9:a8:78:62:29:26:6b:26:bb:1d:a4:05:ba:3d:
c1:66:77:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:31:32 2026 by rpki-client