
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/4504c39c-22d1-3edb-b2aa-7cf0cf6c6a22.roa
File: 4504c39c-22d1-3edb-b2aa-7cf0cf6c6a22.roa (raw, json)
Hash identifier: NUMo/ug97Nya4au/sduf8JDVRC3GQPGODyopsnMmEks=
Subject key identifier: 13:B7:E0:80:80:C5:8C:5D:46:C0:D1:83:17:16:F8:B2:23:0D:5F:3F
Certificate issuer: /CN=5c19a246-d9fa-481a-a4d7-010af8c132b3
Certificate serial: 010D0C9F4328584CBAE7372E9FDC18106D10BE00
Authority key identifier: 18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/4504c39c-22d1-3edb-b2aa-7cf0cf6c6a22.roa
Signing time: Mon 02 Feb 2026 14:00:40 +0000
ROA not before: Mon 02 Feb 2026 14:00:40 +0000
ROA not after: Sun 03 May 2026 13:00:40 +0000
asID: 26548
IP address blocks: 23.156.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ba:e7:37:2e:9f:dc:18:10:6d:10:be:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c19a246-d9fa-481a-a4d7-010af8c132b3
Validity
Not Before: Feb 2 14:00:40 2026 GMT
Not After : May 3 13:00:40 2026 GMT
Subject: CN=a8f5de77-9d30-47dd-86ea-d16faed7c3ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:09:1b:c8:e6:df:fb:2c:b1:8c:c6:e5:06:3c:
78:47:04:23:2a:ae:f2:ee:3e:18:b0:e1:db:99:4d:
e4:66:16:fd:aa:10:ee:d6:53:7d:9a:d8:a0:f9:30:
54:7a:5b:78:e1:65:d7:00:13:c6:1f:27:72:f5:4e:
79:f2:c8:c7:e4:10:35:1a:0f:90:b1:90:7c:d6:6a:
04:8d:77:10:94:5b:d1:0c:3a:6b:44:f1:0b:9a:23:
40:4a:83:52:50:e6:fd:71:47:05:aa:c5:1d:e5:13:
d1:40:cf:55:76:b1:b4:e2:b5:b2:6f:ce:c7:f0:b1:
7d:a8:3c:10:82:4c:50:91:82:27:81:e0:94:25:7b:
8d:75:e7:18:9a:7c:5d:0a:d8:55:c4:95:69:5b:c5:
ad:89:11:bd:66:44:f9:7e:9c:7e:f7:97:c8:c4:db:
12:97:c7:35:14:1b:08:7f:80:19:9f:60:4f:fe:4c:
03:83:13:45:57:47:88:bb:53:ab:41:4c:fd:42:20:
8a:8c:8d:da:ac:4f:01:63:f0:ba:6a:0c:a0:ac:89:
51:ea:b1:66:d4:84:c6:d2:78:2b:b8:22:e6:09:0f:
05:6b:0c:ee:58:9a:6a:de:79:2a:a3:88:4e:8b:69:
66:bb:bc:0b:db:bb:61:c8:09:28:a6:08:d7:d3:be:
fa:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:B7:E0:80:80:C5:8C:5D:46:C0:D1:83:17:16:F8:B2:23:0D:5F:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/4504c39c-22d1-3edb-b2aa-7cf0cf6c6a22.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl
X509v3 Authority Key Identifier:
keyid:18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer
sbgp-ipAddrBlock: critical
IPv4:
23.156.136.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:6c:3a:16:c5:5d:c3:a0:a8:56:f1:6f:de:50:f5:28:52:73:
ea:db:e2:06:fe:85:68:50:0d:9b:34:4a:b9:74:ae:97:56:9c:
1f:d2:b5:bd:42:32:30:8c:59:eb:24:73:61:d7:a3:73:08:cb:
ea:1f:07:b7:20:3a:47:87:98:dd:03:13:7f:9c:e1:0d:9c:1d:
c4:49:02:b8:7e:ae:e2:15:11:0e:a1:a6:f4:92:e9:3b:7b:f1:
f2:da:47:46:a1:f5:1a:fe:d7:41:86:9c:44:91:80:1e:4e:17:
1b:1a:8e:2c:7d:ab:d7:04:4f:fd:74:33:e8:92:13:4f:46:1a:
5f:4e:40:53:13:10:4e:4d:e1:b2:7b:e4:d6:71:14:46:1d:2a:
1e:f0:60:0c:bb:47:e0:67:b1:a3:f2:a3:0f:8b:4d:e6:ae:df:
64:e9:85:40:85:8a:69:d5:e5:2d:2d:d7:74:7d:51:a4:a7:fb:
b5:c5:dc:f3:37:16:bc:50:87:d0:78:b2:66:71:96:ef:46:ba:
79:5a:4f:01:67:f5:97:d6:41:cc:1e:cb:71:8d:e9:50:c6:a3:
86:42:ac:bd:df:87:b5:a8:af:9a:cb:2b:ef:04:a2:39:5f:e7:
bf:c0:68:6b:12:dd:66:39:b0:55:db:21:bc:2c:24:bb:14:3d:
57:f7:eb:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:24:53 2026 by rpki-client