
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b43c5615-9630-4bab-8258-f3b32e00f304/1f8b69fd-0f88-3d83-8616-5876e0d10640.roa
File: 1f8b69fd-0f88-3d83-8616-5876e0d10640.roa (raw, json)
Hash identifier: DsQWLLcNgQYRblq8m8d2oLAG8YfuNcF97suB0C4+Z1U=
Subject key identifier: 80:6F:80:5F:3F:2F:3C:79:4E:22:66:53:76:AA:81:F4:E0:1B:EB:F1
Certificate issuer: /CN=b43c5615-9630-4bab-8258-f3b32e00f304
Certificate serial: 010D0C9F4328584D7E353443AAF432ACEB5F1F00
Authority key identifier: F8:68:64:D8:02:6E:DD:51:CD:3C:54:F5:81:BF:E8:A0:A1:30:FC:2C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b43c5615-9630-4bab-8258-f3b32e00f304.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b43c5615-9630-4bab-8258-f3b32e00f304/1f8b69fd-0f88-3d83-8616-5876e0d10640.roa
Signing time: Mon 13 Apr 2026 13:00:30 +0000
ROA not before: Mon 13 Apr 2026 13:00:30 +0000
ROA not after: Sun 12 Jul 2026 13:00:30 +0000
asID: 36832
IP address blocks: 23.132.172.0/24 maxlen: 24
2602:f8c4::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b43c5615-9630-4bab-8258-f3b32e00f304/b43c5615-9630-4bab-8258-f3b32e00f304.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b43c5615-9630-4bab-8258-f3b32e00f304/b43c5615-9630-4bab-8258-f3b32e00f304.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b43c5615-9630-4bab-8258-f3b32e00f304.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:7e:35:34:43:aa:f4:32:ac:eb:5f:1f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b43c5615-9630-4bab-8258-f3b32e00f304
Validity
Not Before: Apr 13 13:00:30 2026 GMT
Not After : Jul 12 13:00:30 2026 GMT
Subject: CN=e269b9a2-a902-4730-9a38-9846c8af9dd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:3b:e2:da:ae:ea:fe:4a:ca:93:3d:f8:3f:50:
1a:15:cd:c1:a6:35:3c:4d:24:b5:e3:1f:b6:63:67:
82:bd:df:77:34:c5:74:89:a1:73:97:f6:9e:f8:11:
10:6e:8a:a2:f4:64:a8:f0:c0:5b:a7:57:b1:a4:24:
dc:c2:76:ae:ed:da:ef:31:68:f5:d7:6a:7e:8b:40:
ba:5d:6c:aa:9b:a2:0d:ec:0f:14:9e:27:76:69:e9:
7d:72:27:3f:d8:b9:d9:32:1e:8a:a0:e5:34:c6:ad:
94:61:71:46:2f:ff:9e:75:02:da:d0:53:61:9d:a2:
25:ea:66:b9:2f:2b:d4:36:b4:ea:0d:d2:1c:14:23:
7a:41:a3:cd:20:d1:1a:bc:06:bb:e1:16:cc:ed:9c:
aa:e9:af:33:34:33:1d:ae:09:c6:12:ca:90:79:0b:
c1:96:66:11:59:e2:0d:51:b1:23:21:57:76:a9:1d:
90:3c:2f:4c:3a:6c:e5:76:bc:2b:78:09:91:44:3b:
13:d4:04:8f:08:44:3a:d0:cf:f8:3a:25:e4:63:5d:
a2:f5:26:cf:bc:a3:9d:20:2b:c9:e4:4a:4b:54:82:
2c:78:8b:27:01:b1:20:93:d6:83:3f:28:d5:76:1f:
97:55:95:bc:66:96:8c:c7:03:7b:96:e8:0f:3c:71:
fc:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:6F:80:5F:3F:2F:3C:79:4E:22:66:53:76:AA:81:F4:E0:1B:EB:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b43c5615-9630-4bab-8258-f3b32e00f304/1f8b69fd-0f88-3d83-8616-5876e0d10640.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b43c5615-9630-4bab-8258-f3b32e00f304/b43c5615-9630-4bab-8258-f3b32e00f304.crl
X509v3 Authority Key Identifier:
keyid:F8:68:64:D8:02:6E:DD:51:CD:3C:54:F5:81:BF:E8:A0:A1:30:FC:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b43c5615-9630-4bab-8258-f3b32e00f304.cer
sbgp-ipAddrBlock: critical
IPv4:
23.132.172.0/24
IPv6:
2602:f8c4::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:3c:f7:45:ba:ca:78:1c:34:96:7e:f3:91:e8:6b:1c:e7:c0:
18:dc:34:5a:02:41:7c:c2:e4:ae:df:81:ed:84:eb:f9:ba:10:
62:9c:b3:a0:a7:ec:38:5a:e0:2d:09:76:45:7f:ba:17:ec:3e:
6d:82:ef:22:1a:fa:4c:6f:00:75:50:4f:02:d9:f4:ab:23:50:
fa:50:4f:5b:38:e7:3f:c7:ac:00:89:28:a7:f9:62:10:9d:99:
eb:dc:85:23:1f:67:fc:5e:6d:80:19:11:cb:e8:11:e9:86:bf:
78:cc:a6:2d:29:ff:bc:e3:b4:4b:42:8d:db:90:d6:51:ed:88:
78:28:fa:81:f2:78:1d:db:72:f9:0b:c3:21:0e:40:4f:d3:4d:
71:1c:ef:c7:d5:9d:a5:d1:ec:ae:30:f8:30:f0:7e:64:ca:04:
7b:e9:1d:7b:d5:46:63:1a:5c:a3:2d:92:f8:55:83:d7:0b:26:
23:d4:e2:4d:8b:6a:ba:25:97:40:0d:81:ec:0d:8b:ed:5e:a5:
bc:df:ec:07:77:40:d4:ce:b1:f6:00:7f:f2:3a:5f:dc:36:81:
51:61:26:ad:7b:20:ac:8b:42:34:e2:16:83:8e:2a:13:8d:be:
eb:43:a3:82:fe:26:ad:a4:e3:cb:ad:5a:46:a6:1b:b8:7b:a3:
d8:bb:77:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:18:56 2026 by rpki-client