
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/957cea5b-f9fd-4bbf-ae7f-7b11c690b624/2411b844-923f-3fc3-b7ea-3b446b9cd500.roa
File: 2411b844-923f-3fc3-b7ea-3b446b9cd500.roa (raw, json)
Hash identifier: uQ2P7/1axEpTJCzwBf8go3BNtAX03cmWegqdHylO/+o=
Subject key identifier: 96:56:D0:58:61:95:4A:35:A1:82:9A:36:49:85:23:31:E8:D2:94:78
Certificate issuer: /CN=957cea5b-f9fd-4bbf-ae7f-7b11c690b624
Certificate serial: 010D0C9F4328584DDFEB20A8C8DE32DC2B16E300
Authority key identifier: 6E:F4:EB:38:A3:36:70:E5:F4:1D:04:52:10:1F:E3:EC:B5:94:B1:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/957cea5b-f9fd-4bbf-ae7f-7b11c690b624.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/957cea5b-f9fd-4bbf-ae7f-7b11c690b624/2411b844-923f-3fc3-b7ea-3b446b9cd500.roa
Signing time: Mon 18 May 2026 13:00:31 +0000
ROA not before: Mon 18 May 2026 13:00:31 +0000
ROA not after: Sun 16 Aug 2026 13:00:31 +0000
asID: 22665
IP address blocks: 23.190.200.0/24 maxlen: 24
2602:fb6c::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/957cea5b-f9fd-4bbf-ae7f-7b11c690b624/957cea5b-f9fd-4bbf-ae7f-7b11c690b624.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/957cea5b-f9fd-4bbf-ae7f-7b11c690b624/957cea5b-f9fd-4bbf-ae7f-7b11c690b624.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/957cea5b-f9fd-4bbf-ae7f-7b11c690b624.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 16 Jun 2026 03:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:df:eb:20:a8:c8:de:32:dc:2b:16:e3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=957cea5b-f9fd-4bbf-ae7f-7b11c690b624
Validity
Not Before: May 18 13:00:31 2026 GMT
Not After : Aug 16 13:00:31 2026 GMT
Subject: CN=b7b182df-02a3-4f6f-8cca-05245f574287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:07:fe:a9:68:b2:fd:89:fd:09:10:7b:ab:7a:
f7:4c:5c:5e:b2:b2:7e:09:a9:40:70:42:c7:27:b4:
c5:4a:3d:62:40:98:ca:55:7b:35:8c:d0:a5:9b:e1:
7f:14:6c:8f:1c:fc:5e:76:41:02:51:86:12:79:af:
8b:47:ab:e0:ce:2d:23:97:bf:be:b2:7e:75:b9:9a:
e8:22:23:fe:43:23:38:10:5e:cb:83:08:59:32:cd:
d2:58:b0:62:4b:73:b4:17:e4:11:4a:54:56:03:85:
c6:bc:e7:35:28:34:a0:cd:f6:ab:72:1f:6e:9c:d2:
15:87:fa:d0:30:cc:06:43:88:f8:d0:77:c4:79:59:
36:14:29:2e:b0:43:5d:7a:8b:83:6c:9b:66:28:67:
d4:61:d3:53:01:1e:4c:49:12:3b:60:df:1f:4a:f0:
fe:bc:53:d1:8d:93:69:24:a0:3c:a6:16:cd:07:71:
fd:77:cf:d3:e4:4c:61:2e:c4:1b:82:16:b8:93:5b:
1d:ba:c2:5b:1d:f3:71:c3:bc:86:1f:7c:25:ad:1f:
d3:cc:8f:ef:e0:19:d2:e7:81:d8:ad:68:b6:ac:53:
6b:bd:d0:69:5b:ad:a5:9b:81:3a:a0:45:e8:c0:41:
0a:b7:cf:33:ed:2d:a9:e9:a1:55:f3:31:1c:47:cf:
eb:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:56:D0:58:61:95:4A:35:A1:82:9A:36:49:85:23:31:E8:D2:94:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/957cea5b-f9fd-4bbf-ae7f-7b11c690b624/2411b844-923f-3fc3-b7ea-3b446b9cd500.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/957cea5b-f9fd-4bbf-ae7f-7b11c690b624/957cea5b-f9fd-4bbf-ae7f-7b11c690b624.crl
X509v3 Authority Key Identifier:
keyid:6E:F4:EB:38:A3:36:70:E5:F4:1D:04:52:10:1F:E3:EC:B5:94:B1:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/957cea5b-f9fd-4bbf-ae7f-7b11c690b624.cer
sbgp-ipAddrBlock: critical
IPv4:
23.190.200.0/24
IPv6:
2602:fb6c::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:6b:b3:b3:8d:cd:71:21:7d:94:cf:97:b4:46:26:9b:0c:a1:
82:c7:50:ca:5b:5e:a8:78:1e:82:49:37:51:86:8d:6c:13:96:
e4:aa:ca:74:fd:ce:9f:0f:c8:04:67:e7:77:ed:ec:9e:b9:a5:
67:34:8a:08:d2:7d:4a:71:ec:36:11:d4:71:6d:55:45:c4:0b:
ac:52:7e:7b:79:ee:e9:82:20:cb:93:e5:02:bf:7c:75:47:5a:
97:84:77:c7:cf:82:b7:46:ea:71:e0:cd:b9:5f:9c:56:e6:7f:
af:25:3e:64:f2:43:14:00:c9:20:d2:d2:eb:d5:66:c5:3f:f2:
fe:2e:9e:10:69:c5:b8:1f:ec:a6:f1:1b:70:ef:e9:49:cb:33:
a7:72:4a:d8:54:e1:f3:68:40:25:3d:e7:fa:14:b8:b9:bf:d8:
40:35:f9:13:e5:f8:25:87:95:70:8c:7d:17:fc:c2:69:d0:d3:
8b:e0:12:e5:20:28:d5:44:62:da:f4:95:41:bb:1f:c7:8a:3f:
63:7f:52:0b:04:ac:68:88:6a:01:c9:57:e4:88:f9:5b:ce:32:
a6:67:90:92:f8:6d:d3:c1:13:a0:3f:5b:db:69:21:2a:01:e4:
81:79:2b:a3:1e:ec:d2:8f:36:d2:6d:e5:7a:89:48:ef:85:87:
23:56:8d:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:51:01 2026 by rpki-client