
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3196482-9a63-48b1-828c-a6de96f0caff/86f55d44-ae15-32b3-90fc-b80be13a02a8.roa
File: 86f55d44-ae15-32b3-90fc-b80be13a02a8.roa (raw, json)
Hash identifier: YG5SxMDeoV+7nfoYc64r8GOzB+bH/y7DCmj0+bdqlSI=
Subject key identifier: 74:C8:1E:83:B5:F1:86:16:0D:52:BD:9D:A3:88:10:86:0B:34:DE:F7
Certificate issuer: /CN=d3196482-9a63-48b1-828c-a6de96f0caff
Certificate serial: 010D0C9F4328584CC777399478AAAF2A1EFAAA80
Authority key identifier: 71:AC:DB:CF:DA:22:A4:C9:36:F2:84:28:DD:3B:FD:69:E5:3E:61:F8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3196482-9a63-48b1-828c-a6de96f0caff.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3196482-9a63-48b1-828c-a6de96f0caff/86f55d44-ae15-32b3-90fc-b80be13a02a8.roa
Signing time: Sat 07 Feb 2026 02:00:31 +0000
ROA not before: Sat 07 Feb 2026 02:00:31 +0000
ROA not after: Fri 08 May 2026 01:00:31 +0000
asID: 401639
IP address blocks: 23.140.44.0/24 maxlen: 24
2602:f712::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3196482-9a63-48b1-828c-a6de96f0caff/d3196482-9a63-48b1-828c-a6de96f0caff.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3196482-9a63-48b1-828c-a6de96f0caff/d3196482-9a63-48b1-828c-a6de96f0caff.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3196482-9a63-48b1-828c-a6de96f0caff.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:c7:77:39:94:78:aa:af:2a:1e:fa:aa:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3196482-9a63-48b1-828c-a6de96f0caff
Validity
Not Before: Feb 7 02:00:31 2026 GMT
Not After : May 8 01:00:31 2026 GMT
Subject: CN=99dfaffd-fd85-4abc-9429-b054f2663654
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:49:e3:e0:77:cd:8d:ec:65:d8:10:ed:aa:e3:
90:23:4d:73:2c:1e:9d:5b:55:1e:6b:02:cd:bc:ac:
23:c0:f8:91:81:90:c0:e4:e3:43:7c:93:f8:d2:7b:
40:31:d9:f9:c6:73:95:65:df:15:e1:cb:23:b4:aa:
e8:5f:c7:b2:a0:22:ac:04:c8:27:b3:d3:90:e3:55:
cc:a9:0f:36:5c:64:10:30:11:9d:43:00:e8:aa:c6:
6b:96:50:c7:1c:89:e4:ce:a7:bb:17:4c:c6:08:4b:
ff:7c:6e:90:ba:0c:fa:a7:0e:3c:2c:b0:b2:b6:99:
a8:1b:60:f8:e3:a3:e0:0a:85:e6:08:74:b9:84:6a:
b1:ec:42:a3:f8:f0:bb:61:94:ce:83:4b:b6:45:d2:
5d:20:15:76:76:d1:43:20:8b:9c:40:dc:04:ea:40:
d7:dd:57:de:2d:b7:97:86:74:13:98:42:46:4b:2d:
8b:68:32:67:35:f0:1c:32:40:92:98:92:12:74:2e:
a7:cc:e4:35:8c:be:1f:a7:4c:cc:2a:e4:45:4e:c0:
16:14:13:a3:40:40:db:11:84:7a:06:5b:e8:f4:a9:
ff:52:fd:7e:07:e0:a8:c7:5e:6c:98:27:d7:ea:41:
cd:19:55:bd:1f:d0:78:ca:aa:ee:e5:4a:17:f1:1e:
d0:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:C8:1E:83:B5:F1:86:16:0D:52:BD:9D:A3:88:10:86:0B:34:DE:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3196482-9a63-48b1-828c-a6de96f0caff/86f55d44-ae15-32b3-90fc-b80be13a02a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3196482-9a63-48b1-828c-a6de96f0caff/d3196482-9a63-48b1-828c-a6de96f0caff.crl
X509v3 Authority Key Identifier:
keyid:71:AC:DB:CF:DA:22:A4:C9:36:F2:84:28:DD:3B:FD:69:E5:3E:61:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3196482-9a63-48b1-828c-a6de96f0caff.cer
sbgp-ipAddrBlock: critical
IPv4:
23.140.44.0/24
IPv6:
2602:f712::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:d7:a5:46:4f:59:04:e2:c1:7e:7b:68:4b:7f:e6:94:1e:55:
0f:8c:7d:18:72:2d:c9:9e:e4:4c:ac:7c:0a:00:2d:73:2d:07:
e3:7c:95:c6:70:ba:0e:9b:2c:13:93:3c:b2:5a:e7:70:7b:16:
2f:c9:8c:97:62:b6:a8:3f:38:88:40:b5:9b:6f:9f:09:9e:0c:
79:0c:48:02:07:44:6d:b9:ab:ba:0e:11:af:9a:82:00:8d:4b:
e5:51:85:19:d7:99:b5:e8:64:94:09:32:5d:a7:46:c3:b8:e5:
22:ef:19:45:7e:c8:14:07:ea:a4:d8:f8:e9:e4:2a:9a:3c:65:
8c:f8:aa:90:62:92:ea:c7:1e:c7:ba:c6:64:ae:a8:b9:fa:9a:
36:f2:c1:f2:63:99:d3:34:17:38:9a:cb:58:0f:1e:04:0c:7f:
3b:cc:23:81:8e:f4:c1:70:7d:e9:9a:f8:31:5d:a7:56:15:0f:
7d:ee:ea:6f:29:ca:39:d5:cf:97:80:13:90:1a:e2:43:7b:66:
5f:cb:d8:66:ff:f1:ad:41:e6:aa:75:f4:4b:2f:4f:2f:5c:3d:
69:67:f4:84:93:d5:fc:ca:e8:e1:f7:06:f7:45:21:a4:06:e9:
14:29:f8:84:4a:4d:69:b7:00:70:f3:30:93:26:01:a7:55:8d:
98:9a:ac:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:37:41 2026 by rpki-client