
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a/caaf1c7c-ecf1-3764-9608-b6a213e3bd7c.roa
File: caaf1c7c-ecf1-3764-9608-b6a213e3bd7c.roa (raw, json)
Hash identifier: rUgA7PXCKAby/GQKcTUbtqTG3Jea12E3RUbuFjNetTs=
Subject key identifier: 9D:E7:18:2E:10:6B:0D:B0:E6:2D:EB:F2:81:A1:37:94:FE:90:14:48
Certificate issuer: /CN=af651adf-a795-466a-9b0b-afaaea21402a
Certificate serial: 010D0C9F4328584E15E43BD841EB71FE9578B2DE
Authority key identifier: 40:AC:EF:9E:70:07:E0:29:23:FB:44:12:B1:D4:51:1E:1F:AA:93:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a/caaf1c7c-ecf1-3764-9608-b6a213e3bd7c.roa
Signing time: Sat 06 Jun 2026 21:00:13 +0000
ROA not before: Sat 06 Jun 2026 21:00:13 +0000
ROA not after: Fri 04 Sep 2026 21:00:13 +0000
asID: 54143
IP address blocks: 23.166.112.0/24 maxlen: 24
2606:7180::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a/af651adf-a795-466a-9b0b-afaaea21402a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a/af651adf-a795-466a-9b0b-afaaea21402a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 15 Jun 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:15:e4:3b:d8:41:eb:71:fe:95:78:b2:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af651adf-a795-466a-9b0b-afaaea21402a
Validity
Not Before: Jun 6 21:00:13 2026 GMT
Not After : Sep 4 21:00:13 2026 GMT
Subject: CN=2e0c1023-38de-4061-ac0a-ec09de79ba24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:34:88:52:e5:e7:0c:52:90:2d:92:e8:ce:46:
e9:b1:5f:48:01:2a:26:75:58:15:65:89:fd:68:bd:
2b:e1:ff:d7:f1:15:e6:bf:5e:e4:7a:e5:f8:29:80:
b4:1f:68:02:c2:e8:84:85:81:55:a5:b8:11:64:ae:
5d:aa:18:54:74:b0:61:6e:a5:94:ca:a4:27:09:47:
25:23:2a:af:ac:0a:b0:86:c9:2a:a4:c0:89:4a:d2:
fc:61:20:7e:a1:5a:e8:6a:d4:36:95:8f:07:f7:5a:
4b:5a:8f:7f:a0:cb:ac:91:f7:df:5c:bf:ab:42:fd:
51:8e:73:8e:1a:23:a1:e6:ac:a1:74:78:40:b9:b2:
8b:e7:3a:09:b5:68:02:43:6a:7f:8c:79:1e:15:1e:
c7:bb:26:23:c7:61:29:82:64:3c:de:ba:c9:e3:15:
6b:e7:18:fa:1c:c2:80:66:ee:bf:88:73:2d:9c:47:
dc:a0:26:e5:a8:4e:9a:3e:2d:a6:d8:17:31:06:ac:
f0:b6:ec:a9:ac:65:a5:c8:e0:6c:4b:ad:01:7a:6c:
1f:70:f8:ac:50:e1:cc:ac:7e:55:a6:ed:69:16:dd:
f6:7d:90:44:90:4e:8f:ff:40:fd:f5:8f:c3:b4:7e:
f2:af:33:74:b8:7c:7f:9e:05:12:fa:33:42:7f:c7:
84:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:E7:18:2E:10:6B:0D:B0:E6:2D:EB:F2:81:A1:37:94:FE:90:14:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a/caaf1c7c-ecf1-3764-9608-b6a213e3bd7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a/af651adf-a795-466a-9b0b-afaaea21402a.crl
X509v3 Authority Key Identifier:
keyid:40:AC:EF:9E:70:07:E0:29:23:FB:44:12:B1:D4:51:1E:1F:AA:93:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/af651adf-a795-466a-9b0b-afaaea21402a.cer
sbgp-ipAddrBlock: critical
IPv4:
23.166.112.0/24
IPv6:
2606:7180::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:b6:5d:77:0d:19:b6:1f:bc:9e:90:fd:d2:30:d0:e5:95:a6:
dd:ae:af:64:4b:fa:cc:7a:d7:1a:7d:ee:39:85:ce:56:9b:6c:
e4:4a:dd:14:92:06:fb:fc:7b:11:60:b1:0e:b0:81:49:bb:e0:
93:c4:14:e5:60:fe:c8:7d:3f:99:f5:80:fc:49:47:39:77:4e:
93:cb:35:21:ea:85:c9:c4:b9:80:88:35:9e:40:8c:3d:44:fa:
36:c9:cf:d9:e9:db:f9:fa:ad:e4:e6:53:f5:de:8d:85:55:6c:
f4:b6:6a:3d:d0:94:9a:17:ba:36:39:ed:77:ea:2a:33:bf:8d:
92:9b:f0:65:1e:59:a4:61:24:99:96:5a:06:e3:c6:8f:b4:57:
b7:22:6b:a0:fe:0c:6a:0e:85:84:94:5a:b0:8d:a9:ac:c2:91:
94:a0:90:be:38:c3:78:82:9f:1f:98:22:d1:61:26:3a:d2:ea:
f6:fe:aa:f5:b0:c5:bf:d2:24:f9:88:14:3f:13:48:d3:1c:1d:
df:01:53:9f:2e:c3:46:2f:bd:c4:c4:0e:84:22:83:c1:ed:8e:
f2:26:7a:f3:2d:17:c3:8b:29:10:cf:c3:f3:75:22:6e:f3:e6:
65:20:d0:4b:a9:0a:81:75:e2:a7:23:0e:1c:4f:30:68:ed:9d:
6f:f9:28:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:26:21 2026 by rpki-client