
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/22030947-2334-4dfa-a1e3-0e4e83260593/c1d00ab1-68c6-31f2-8d46-8db5ebbc9690.roa
File: c1d00ab1-68c6-31f2-8d46-8db5ebbc9690.roa (raw, json)
Hash identifier: 9HlNKiuQ+ZtKq36v4ajMrIOL1C5ilvqm2Q1QrDt/NNE=
Subject key identifier: 5D:14:0F:82:33:FE:47:47:E3:64:6F:F2:D1:80:74:7A:00:02:35:B8
Certificate issuer: /CN=22030947-2334-4dfa-a1e3-0e4e83260593
Certificate serial: 010D0C9F4328584CC70EAF023A3E75CEA2E07600
Authority key identifier: 90:22:75:60:7B:52:B2:69:4E:6A:1A:3C:9D:6E:09:CF:58:C5:9B:59
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/22030947-2334-4dfa-a1e3-0e4e83260593.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/22030947-2334-4dfa-a1e3-0e4e83260593/c1d00ab1-68c6-31f2-8d46-8db5ebbc9690.roa
Signing time: Sun 04 Jan 2026 02:00:30 +0000
ROA not before: Sun 04 Jan 2026 02:00:30 +0000
ROA not after: Sat 04 Apr 2026 01:00:30 +0000
asID: 19285
IP address blocks: 23.153.92.0/24 maxlen: 24
2602:f6b2:ff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/22030947-2334-4dfa-a1e3-0e4e83260593/22030947-2334-4dfa-a1e3-0e4e83260593.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/22030947-2334-4dfa-a1e3-0e4e83260593/22030947-2334-4dfa-a1e3-0e4e83260593.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/22030947-2334-4dfa-a1e3-0e4e83260593.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:c7:0e:af:02:3a:3e:75:ce:a2:e0:76:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22030947-2334-4dfa-a1e3-0e4e83260593
Validity
Not Before: Jan 4 02:00:30 2026 GMT
Not After : Apr 4 01:00:30 2026 GMT
Subject: CN=47727100-cd1b-481a-bb42-26b0c2d7e42d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:57:7c:e5:83:0e:02:25:95:00:ef:ac:25:a5:
48:26:b8:f1:dd:d3:ef:d1:c2:b0:31:d2:da:d3:1b:
87:28:b6:54:6b:14:6b:79:97:0b:fb:89:c3:0e:d9:
fd:15:d9:20:3f:17:b3:d0:47:7c:81:7f:2a:6a:55:
a5:1d:fc:dd:d8:bb:5b:0b:ca:56:c2:e4:38:4b:8a:
8f:60:4c:11:b2:76:ef:d3:0d:d2:2e:3a:ee:11:ff:
9c:e6:6d:b8:a4:98:e5:2c:94:10:8f:74:d1:bc:cd:
44:b8:cc:f6:14:5a:fa:27:76:f8:05:04:c0:08:8a:
3c:4b:3e:3d:ba:3d:4d:b1:16:e1:9d:83:25:1c:1d:
79:9e:ab:a3:69:bd:bd:96:aa:da:c1:2c:b0:18:b7:
8b:a9:93:97:03:da:69:cc:75:05:64:e4:0d:48:9c:
00:52:cb:e5:ae:75:3d:ba:7a:e5:46:ec:ca:2e:f0:
f9:9a:4d:63:7c:b9:fd:41:6f:ae:c8:35:4e:b3:82:
f4:24:5d:cf:55:27:d4:9c:ad:bc:d5:13:7f:25:4d:
de:df:5d:64:10:d0:c1:59:6b:d0:82:cd:18:c6:30:
11:fb:21:26:f1:29:1d:ee:19:6c:10:56:d9:e0:10:
93:d7:e9:ac:1a:dc:db:9f:1e:91:9c:79:54:c5:57:
92:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:14:0F:82:33:FE:47:47:E3:64:6F:F2:D1:80:74:7A:00:02:35:B8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/22030947-2334-4dfa-a1e3-0e4e83260593/c1d00ab1-68c6-31f2-8d46-8db5ebbc9690.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/22030947-2334-4dfa-a1e3-0e4e83260593/22030947-2334-4dfa-a1e3-0e4e83260593.crl
X509v3 Authority Key Identifier:
keyid:90:22:75:60:7B:52:B2:69:4E:6A:1A:3C:9D:6E:09:CF:58:C5:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/22030947-2334-4dfa-a1e3-0e4e83260593.cer
sbgp-ipAddrBlock: critical
IPv4:
23.153.92.0/24
IPv6:
2602:f6b2:ff::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
af:39:94:fc:f9:64:39:07:a2:bf:29:02:90:f1:a6:27:44:43:
48:be:3d:1b:15:13:81:2a:14:e6:37:2c:96:20:0c:42:7b:0e:
a5:a8:f5:f6:97:51:9f:af:e5:31:f8:cb:7c:ff:c2:bd:c5:eb:
f0:9a:13:e0:f7:8a:08:d2:c9:d3:a7:78:d1:09:de:5e:ed:5b:
41:94:0f:31:66:34:28:3f:5b:05:14:aa:f4:36:39:50:0b:56:
63:6b:a3:bb:17:a1:ce:e6:c9:3d:a6:74:11:bc:a4:79:6d:15:
b3:bd:d7:21:3a:01:62:3d:aa:b3:f4:f8:fc:9f:84:77:83:33:
96:78:49:31:4b:63:d9:54:b7:7b:bd:56:61:9c:cb:01:d9:62:
8b:ec:e5:60:66:1a:d3:b3:59:ef:cf:94:be:82:da:02:83:aa:
4d:62:6c:1a:d9:a1:ab:c3:b4:1b:3b:05:fc:0b:72:0f:93:e2:
c3:2c:e7:f0:fd:7c:9e:be:63:70:8c:96:bf:a3:45:f9:72:12:
55:a9:4e:77:f7:25:1d:9c:37:73:73:0c:06:94:d5:bf:74:bb:
04:70:8a:a4:7b:bf:59:ed:b1:ae:0e:b8:61:e5:d8:92:25:9d:
34:ef:d9:b4:73:b8:6c:f0:27:3b:3f:76:57:f3:90:f0:97:a8:
01:71:1e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:25:16 2026 by rpki-client