
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/957cea5b-f9fd-4bbf-ae7f-7b11c690b624/2411b844-923f-3fc3-b7ea-3b446b9cd500.roa
File: 2411b844-923f-3fc3-b7ea-3b446b9cd500.roa (raw, json)
Hash identifier: +7axdOLYZjzv0Txh3wnaDO8H7PBsFz4R9QpMLh1huGo=
Subject key identifier: B2:DA:43:25:54:C3:FE:B6:64:04:E4:55:B5:D8:CE:29:B4:5E:59:D2
Certificate issuer: /CN=957cea5b-f9fd-4bbf-ae7f-7b11c690b624
Certificate serial: 010D0C9F4328584CFF4CCE498E96A58197736380
Authority key identifier: 6E:F4:EB:38:A3:36:70:E5:F4:1D:04:52:10:1F:E3:EC:B5:94:B1:6B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/957cea5b-f9fd-4bbf-ae7f-7b11c690b624.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/957cea5b-f9fd-4bbf-ae7f-7b11c690b624/2411b844-923f-3fc3-b7ea-3b446b9cd500.roa
Signing time: Fri 27 Feb 2026 02:00:31 +0000
ROA not before: Fri 27 Feb 2026 02:00:31 +0000
ROA not after: Thu 28 May 2026 01:00:31 +0000
asID: 22665
IP address blocks: 23.190.200.0/24 maxlen: 24
2602:fb6c::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/957cea5b-f9fd-4bbf-ae7f-7b11c690b624/957cea5b-f9fd-4bbf-ae7f-7b11c690b624.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/957cea5b-f9fd-4bbf-ae7f-7b11c690b624/957cea5b-f9fd-4bbf-ae7f-7b11c690b624.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/957cea5b-f9fd-4bbf-ae7f-7b11c690b624.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 03:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ff:4c:ce:49:8e:96:a5:81:97:73:63:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=957cea5b-f9fd-4bbf-ae7f-7b11c690b624
Validity
Not Before: Feb 27 02:00:31 2026 GMT
Not After : May 28 01:00:31 2026 GMT
Subject: CN=f2a87cef-8e2b-45b7-b91b-e811707248a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5b:5e:f6:ec:af:46:aa:bc:e1:c9:9f:fa:1b:
c9:9c:0b:5f:e0:91:8a:a4:93:96:e9:09:ce:cc:c0:
ea:b1:7f:c8:3a:a5:42:bc:47:a6:01:3c:28:e7:6e:
9c:10:00:f3:bb:77:40:ff:82:c4:be:2d:f9:08:ba:
28:67:21:48:46:55:08:9b:93:f4:e4:aa:fa:b9:c6:
d9:79:82:ca:aa:00:cb:c1:06:12:e2:46:06:37:d3:
b4:a9:07:5c:44:b1:84:e7:8b:4f:e5:33:e6:ba:f3:
a3:f4:3a:4f:0e:62:2f:5b:9e:ab:2d:47:96:16:37:
52:d6:c8:ea:43:ea:26:3f:9e:3c:74:1a:40:4a:54:
37:b9:c0:34:b5:47:ef:c5:88:7e:80:f8:2c:39:28:
c1:fe:67:30:f7:8b:ad:3e:8b:d7:7c:3d:88:30:44:
15:54:cf:7d:a0:41:63:09:af:39:fd:40:4a:13:93:
29:35:43:7f:10:db:10:bd:7d:b8:83:4f:7b:f6:4d:
01:00:17:a0:7d:f7:68:fd:ca:5a:45:df:35:8c:4c:
e3:c4:96:3c:d3:db:97:bc:e4:aa:72:3a:bf:be:2e:
47:d2:62:3e:e0:81:5a:0c:ef:f0:1e:8f:df:1c:3d:
85:83:e2:cc:50:da:3f:ac:c5:31:38:07:90:51:86:
09:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:DA:43:25:54:C3:FE:B6:64:04:E4:55:B5:D8:CE:29:B4:5E:59:D2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/957cea5b-f9fd-4bbf-ae7f-7b11c690b624/2411b844-923f-3fc3-b7ea-3b446b9cd500.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/957cea5b-f9fd-4bbf-ae7f-7b11c690b624/957cea5b-f9fd-4bbf-ae7f-7b11c690b624.crl
X509v3 Authority Key Identifier:
keyid:6E:F4:EB:38:A3:36:70:E5:F4:1D:04:52:10:1F:E3:EC:B5:94:B1:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/957cea5b-f9fd-4bbf-ae7f-7b11c690b624.cer
sbgp-ipAddrBlock: critical
IPv4:
23.190.200.0/24
IPv6:
2602:fb6c::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:a8:9f:ec:d3:b7:b5:b5:1e:48:df:0f:cd:1f:94:9c:7a:c6:
ae:33:5b:f2:9c:5e:d0:98:69:78:24:55:8d:78:e9:45:65:14:
c8:fa:14:71:65:84:37:e8:54:65:d0:ce:18:d1:6d:07:ba:9b:
81:f8:a2:c3:4a:d4:75:b4:63:96:a6:90:c7:ff:73:ec:5b:d1:
81:ac:11:55:69:ef:2f:63:98:ce:27:2c:d2:c4:c4:d9:92:f9:
92:52:96:7a:bf:b9:60:90:58:38:ec:8b:0f:aa:66:ec:18:58:
94:b9:cc:15:e5:f8:a9:e4:de:0f:0a:a6:ed:08:8b:15:b2:0a:
85:46:cd:3c:32:a6:3f:0a:0b:64:4f:9c:d1:d1:ac:cc:12:c3:
9a:6a:05:ea:01:3b:38:88:38:10:4e:3a:5e:bd:67:ae:6d:93:
5c:52:89:6f:1e:a9:12:5d:ca:81:6c:2e:98:14:74:3e:b9:2d:
92:2d:ad:79:74:18:cb:19:da:56:c4:de:bd:d5:f5:da:d4:47:
ff:c8:b0:7d:9d:2d:d5:14:27:93:8d:c9:bd:b9:62:df:e7:8b:
0f:f7:b4:7c:80:6b:5c:e9:07:a6:5c:59:01:60:02:cd:79:ec:
57:7c:60:cf:49:d0:29:6f:7c:17:b3:a0:c8:64:64:19:3c:76:
c7:0a:6a:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:30:26 2026 by rpki-client