
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af3da563-8689-4ebd-a553-31a2f310113a/50ec3321-1821-394a-b233-3c10916fd9ab.roa
File: 50ec3321-1821-394a-b233-3c10916fd9ab.roa (raw, json)
Hash identifier: cPXbZ/ZIBLU1HRVqG3cBHHeABMducjKeUuPqGethPtc=
Subject key identifier: 7A:53:03:02:1D:2D:6A:9A:42:82:C4:F6:D3:05:B5:1D:2D:F0:2A:FF
Certificate issuer: /CN=af3da563-8689-4ebd-a553-31a2f310113a
Certificate serial: 010D0C9F4328584CAE5E6DB345118E070A761B00
Authority key identifier: A6:AF:DB:BC:B6:BD:07:C4:FC:50:80:BB:DA:6D:DC:37:E0:69:92:E0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af3da563-8689-4ebd-a553-31a2f310113a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af3da563-8689-4ebd-a553-31a2f310113a/50ec3321-1821-394a-b233-3c10916fd9ab.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 399688
IP address blocks: 23.144.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af3da563-8689-4ebd-a553-31a2f310113a/af3da563-8689-4ebd-a553-31a2f310113a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af3da563-8689-4ebd-a553-31a2f310113a/af3da563-8689-4ebd-a553-31a2f310113a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af3da563-8689-4ebd-a553-31a2f310113a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:5e:6d:b3:45:11:8e:07:0a:76:1b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af3da563-8689-4ebd-a553-31a2f310113a
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=99f75432-8645-4067-a30d-850b6373b3f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:dd:39:1a:61:ed:38:fa:0f:50:d4:b6:85:d2:
0c:e9:b2:d2:bc:49:d6:60:e4:1e:8b:69:67:57:b2:
4f:6f:d9:59:91:b2:95:dd:93:b8:6b:5a:35:a3:70:
09:66:cb:5e:cc:dc:82:f0:b3:84:58:8a:09:d0:a0:
c3:56:48:fc:6f:63:b0:a8:81:fc:3a:c0:e3:30:e3:
16:c6:de:ec:44:c8:9f:cd:5e:d7:71:b7:d7:90:c1:
b3:84:36:70:75:f8:1f:10:16:7e:cc:e2:79:00:44:
e7:f2:c6:63:38:20:dd:1b:3a:80:a6:03:bf:7f:fa:
02:59:60:23:c8:5a:02:5b:5f:28:de:48:cd:58:46:
64:04:a2:23:6c:54:99:40:ce:8a:95:e8:39:24:90:
bf:cc:c4:ac:3f:7b:96:dc:78:6e:5c:07:75:ba:77:
ef:96:91:21:63:e1:ec:73:04:5e:d6:ab:cc:9a:26:
36:94:92:9c:3c:78:82:bc:1e:f1:1a:2d:3b:d0:d8:
fd:be:b6:35:9b:e0:2a:af:eb:79:ec:40:86:37:c8:
05:89:0b:aa:10:31:81:f7:a3:91:02:70:78:3d:db:
1b:a4:0a:05:94:fc:4f:4e:75:af:a3:6c:6a:1b:63:
b5:a0:e3:5b:6b:f3:f5:db:e2:09:ee:59:50:6e:df:
47:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:53:03:02:1D:2D:6A:9A:42:82:C4:F6:D3:05:B5:1D:2D:F0:2A:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af3da563-8689-4ebd-a553-31a2f310113a/50ec3321-1821-394a-b233-3c10916fd9ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af3da563-8689-4ebd-a553-31a2f310113a/af3da563-8689-4ebd-a553-31a2f310113a.crl
X509v3 Authority Key Identifier:
keyid:A6:AF:DB:BC:B6:BD:07:C4:FC:50:80:BB:DA:6D:DC:37:E0:69:92:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/af3da563-8689-4ebd-a553-31a2f310113a.cer
sbgp-ipAddrBlock: critical
IPv4:
23.144.44.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:ec:8a:36:f2:c3:b1:21:5c:b7:b1:62:32:e2:ee:0e:9d:6b:
14:e2:46:aa:ca:80:56:10:10:05:25:66:7e:c2:48:18:be:e8:
9a:2d:b5:ce:cb:20:32:db:ff:66:c1:79:2c:ae:51:4d:c1:62:
be:04:ca:9a:a8:30:d0:2f:04:37:43:d9:b1:3c:f0:a0:97:53:
94:6d:d7:df:46:d8:d3:11:ac:f6:2f:90:82:47:f3:5f:b5:08:
54:fe:65:8a:7a:08:6e:fa:8f:47:0d:6c:85:ed:d7:bf:fb:f9:
59:9c:71:1a:01:a2:85:bf:9c:05:f7:db:7e:51:eb:95:27:e4:
c8:75:ff:43:ea:16:c7:05:f1:b2:c4:f5:c2:f0:0c:a9:4e:90:
ec:e8:24:eb:5a:5f:4d:54:fc:e5:2e:22:3e:ab:2c:3a:15:d3:
2b:ca:4a:2e:ec:55:c1:02:2f:04:cf:05:8c:01:76:a6:23:6e:
03:11:e3:a9:01:2a:fd:46:91:72:1f:2f:68:71:5f:0c:65:1f:
d4:41:84:e7:c2:72:0e:71:a5:e2:d2:0f:1a:c3:f7:d8:a6:0a:
6e:d2:77:2c:af:ad:23:4c:60:6d:bb:90:5b:92:8e:7d:36:73:
15:f0:05:5e:d6:01:a7:41:02:1e:39:ab:6a:93:f3:14:55:3d:
1b:cf:60:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:24:49 2026 by rpki-client