
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f/514f37a8-f9dd-3461-9c07-1b89920890ee.roa
File: 514f37a8-f9dd-3461-9c07-1b89920890ee.roa (raw, json)
Hash identifier: HdOX/KhGgTdTo0trW2Gf2ytWgfUvhuv1liQuPDnvpvU=
Subject key identifier: B4:96:25:A2:38:CD:C6:33:BB:F1:51:74:E9:29:7E:48:83:2E:B9:48
Certificate issuer: /CN=ec23d019-d079-49df-94b6-ad79d138e90f
Certificate serial: 010D0C9F4328584F94D341106F48FF8150BB8380
Authority key identifier: 7B:45:19:0A:67:71:07:CE:9A:BC:4B:A6:4F:63:DD:81:75:A4:BA:C0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f/514f37a8-f9dd-3461-9c07-1b89920890ee.roa
Signing time: Thu 22 Oct 2026 01:00:12 +0000
ROA not before: Thu 22 Oct 2026 01:00:12 +0000
ROA not after: Wed 20 Jan 2027 02:00:12 +0000
asID: 213073
IP address blocks: 23.187.144.0/24 maxlen: 24
23.187.145.0/24 maxlen: 24
23.187.146.0/24 maxlen: 24
23.187.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f/ec23d019-d079-49df-94b6-ad79d138e90f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f/ec23d019-d079-49df-94b6-ad79d138e90f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 30 Oct 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:94:d3:41:10:6f:48:ff:81:50:bb:83:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec23d019-d079-49df-94b6-ad79d138e90f
Validity
Not Before: Oct 22 01:00:12 2026 GMT
Not After : Jan 20 02:00:12 2027 GMT
Subject: CN=4b863447-ea0a-4f07-abcf-1fb578135761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a7:d8:c2:8f:a9:e8:12:64:14:2c:1f:64:a7:
1e:bf:b5:93:79:36:5d:7d:54:a4:4a:4c:01:4f:5f:
dd:f0:bb:7a:37:61:21:cc:98:e8:bd:58:63:a1:f8:
06:21:e9:ff:2a:15:40:4c:3d:3d:95:ce:d4:2e:70:
a7:62:eb:66:c8:50:70:2e:48:7b:cc:6b:5a:a2:ee:
62:15:0c:c9:72:04:87:3c:60:0c:8b:59:a4:3c:60:
6e:ae:d5:69:20:b9:c3:2b:ca:f1:59:97:09:75:d0:
5a:11:54:ee:0b:1f:7c:5e:34:0e:bb:e5:c4:7e:8a:
fd:bd:39:cb:b2:27:a8:43:ab:3b:20:cf:b1:99:44:
df:a9:2e:07:a9:9f:fc:b5:ca:ad:78:56:7e:a4:0f:
3a:98:a2:67:b0:70:8a:91:24:67:f1:c0:7e:4f:5a:
98:d8:81:41:1d:b2:64:dc:39:bf:56:5b:b4:25:31:
1a:e8:76:79:30:b7:da:fb:76:13:d1:47:aa:2d:b1:
1d:dc:4b:d8:dd:b3:7b:60:04:6b:ee:69:33:34:96:
ff:e7:ed:d0:03:c5:cd:ac:45:74:57:a0:86:49:57:
9e:da:19:c7:af:0c:d9:fd:d2:23:1f:17:8f:57:9a:
69:27:71:e5:ec:40:84:a0:02:1a:20:11:c7:d1:45:
49:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:96:25:A2:38:CD:C6:33:BB:F1:51:74:E9:29:7E:48:83:2E:B9:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f/514f37a8-f9dd-3461-9c07-1b89920890ee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f/ec23d019-d079-49df-94b6-ad79d138e90f.crl
X509v3 Authority Key Identifier:
keyid:7B:45:19:0A:67:71:07:CE:9A:BC:4B:A6:4F:63:DD:81:75:A4:BA:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ec23d019-d079-49df-94b6-ad79d138e90f.cer
sbgp-ipAddrBlock: critical
IPv4:
23.187.144.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:50:2d:c6:f9:27:e1:f2:5a:22:64:e4:7e:92:45:0a:4e:48:
b1:0e:0b:6f:1b:53:89:fc:00:d4:5d:e4:4a:8b:0f:8b:18:62:
cd:a8:59:65:26:64:ed:d7:88:57:8a:76:81:1c:72:1f:ff:7d:
14:b1:0b:90:eb:25:c8:5d:c0:6e:92:8a:ce:25:4d:f7:4b:a7:
bc:04:bc:21:ae:02:3b:43:d7:ff:a2:3d:01:01:b2:c6:0d:73:
55:c2:01:3b:b9:37:70:1e:7d:ef:e1:97:79:d2:42:22:21:85:
85:b2:b5:d2:85:b1:23:1a:b4:75:0a:18:d0:13:92:ea:c8:83:
19:b1:ff:fa:fc:c7:bb:a1:24:fc:b3:ef:9d:96:47:21:8d:91:
71:1f:56:4d:7c:ee:59:3b:fb:a8:24:d8:28:84:78:35:c9:27:
5f:5d:5e:86:51:cc:3f:52:f8:3f:e6:c3:ee:f8:16:06:98:35:
c8:d5:d1:49:6c:e2:d8:92:cd:fe:fa:e9:de:4a:a1:f4:8b:d2:
4c:a2:f8:d6:32:56:42:2d:b8:58:3d:b2:5c:4c:a3:99:c4:b1:
9d:23:6c:1e:c1:c0:bb:5d:e7:47:1d:8f:9d:4b:3a:8a:25:1c:
d3:a4:12:f8:1a:dd:5a:11:57:18:9c:3b:06:ce:b3:41:09:52:
ab:66:2f:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 00:54:02 2026 by rpki-client