
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/659c51b6-b1ff-426e-a5f4-86f155c1d9e4/129c3d36-47e7-391c-9b2e-a0052216f38b.roa
File: 129c3d36-47e7-391c-9b2e-a0052216f38b.roa (raw, json)
Hash identifier: 4n8VhUNeQXwaM4AAvIW/0L2RVIn0ogKner1EftF2pSc=
Subject key identifier: 7E:47:B9:FC:24:2A:15:09:FB:76:2F:D8:3C:97:40:DB:57:7B:5E:B1
Certificate issuer: /CN=659c51b6-b1ff-426e-a5f4-86f155c1d9e4
Certificate serial: 010D0C9F4328584D8EF5789CCAF18C36C5FFC940
Authority key identifier: E0:D0:FA:24:C3:E0:AA:78:B6:32:9F:9B:E4:F8:01:E0:46:A6:19:29
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/659c51b6-b1ff-426e-a5f4-86f155c1d9e4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/659c51b6-b1ff-426e-a5f4-86f155c1d9e4/129c3d36-47e7-391c-9b2e-a0052216f38b.roa
Signing time: Sun 19 Apr 2026 13:00:31 +0000
ROA not before: Sun 19 Apr 2026 13:00:31 +0000
ROA not after: Sat 18 Jul 2026 13:00:31 +0000
asID: 400970
IP address blocks: 23.152.248.0/24 maxlen: 24
2602:2d2::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/659c51b6-b1ff-426e-a5f4-86f155c1d9e4/659c51b6-b1ff-426e-a5f4-86f155c1d9e4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/659c51b6-b1ff-426e-a5f4-86f155c1d9e4/659c51b6-b1ff-426e-a5f4-86f155c1d9e4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/659c51b6-b1ff-426e-a5f4-86f155c1d9e4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Apr 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:8e:f5:78:9c:ca:f1:8c:36:c5:ff:c9:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=659c51b6-b1ff-426e-a5f4-86f155c1d9e4
Validity
Not Before: Apr 19 13:00:31 2026 GMT
Not After : Jul 18 13:00:31 2026 GMT
Subject: CN=c7ddd226-9d9c-4afc-bdb0-453df79ec018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:bd:a6:ba:38:e9:8f:55:a5:9c:4e:55:f5:7a:
9f:8f:97:13:eb:03:9b:0f:eb:3f:0c:87:7f:be:07:
e8:b1:fb:ea:d4:41:48:6c:1a:ed:28:bd:af:0f:fa:
9d:a6:19:4f:ae:9e:23:52:40:70:b2:58:c6:21:e3:
ce:6e:a0:9b:fa:34:33:19:0b:1c:fc:71:30:b2:ed:
3a:7f:30:49:52:55:c7:cd:2b:80:8f:3f:5b:72:45:
13:29:57:53:16:bb:d6:33:db:a9:74:91:b5:1b:20:
32:a6:45:7b:8a:64:6e:bc:f6:0f:15:e2:c1:e6:0e:
59:9d:25:87:0c:c2:84:08:0f:12:6f:b8:a0:35:bb:
96:84:83:c3:5e:0b:6e:8d:e0:b7:09:a9:7e:bd:89:
1e:ad:51:fc:52:39:e4:50:89:b8:76:16:f4:b5:ae:
9d:f2:96:9a:66:ac:06:1e:3e:19:39:56:ea:20:19:
11:73:4d:8e:a2:34:09:53:da:dc:5a:bd:ab:f0:08:
d2:c8:b9:ad:f7:81:b6:37:a6:01:23:10:ba:e6:b5:
3b:ec:4a:b4:c5:fa:95:1b:66:f1:fa:9c:98:e5:7a:
ad:59:4e:d8:c3:83:7c:25:5d:39:8f:cc:48:83:3b:
43:1e:cd:27:08:48:af:fc:e4:0a:04:ef:ea:64:d1:
94:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:47:B9:FC:24:2A:15:09:FB:76:2F:D8:3C:97:40:DB:57:7B:5E:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/659c51b6-b1ff-426e-a5f4-86f155c1d9e4/129c3d36-47e7-391c-9b2e-a0052216f38b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/659c51b6-b1ff-426e-a5f4-86f155c1d9e4/659c51b6-b1ff-426e-a5f4-86f155c1d9e4.crl
X509v3 Authority Key Identifier:
keyid:E0:D0:FA:24:C3:E0:AA:78:B6:32:9F:9B:E4:F8:01:E0:46:A6:19:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/659c51b6-b1ff-426e-a5f4-86f155c1d9e4.cer
sbgp-ipAddrBlock: critical
IPv4:
23.152.248.0/24
IPv6:
2602:2d2::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:77:8c:2b:98:b5:94:6f:59:40:0d:ec:b1:d2:d5:67:0f:44:
d0:57:2c:bc:6b:6d:99:5e:e1:90:bc:90:0d:2e:55:c4:63:3d:
77:19:69:1b:d3:81:ba:21:4a:dd:eb:d0:d4:8c:84:2f:ee:d2:
dd:c6:83:07:a9:d5:0c:45:bf:5c:e1:03:22:14:89:5d:3f:04:
b0:d5:18:64:6a:ba:13:d9:c7:7a:01:a4:2b:71:c4:f1:1f:05:
82:3b:2e:c8:27:e4:52:68:1c:d6:5f:82:71:9b:74:ff:f8:ec:
11:65:14:02:22:bf:56:ad:53:8e:c3:47:45:64:cb:39:dd:de:
f2:11:2d:2c:37:15:ff:32:4e:f2:fc:8b:15:38:2c:ab:87:4c:
ff:0f:39:72:43:49:8e:43:cd:ee:91:30:79:eb:81:22:f0:bc:
9b:06:2b:fb:62:f3:74:39:8c:2f:ec:84:57:97:bd:86:5b:a9:
8e:44:60:c1:ce:46:6a:14:51:1c:10:50:fb:58:51:a3:79:50:
35:3a:c1:65:0a:75:a9:54:b3:9e:fd:8c:96:00:9f:c0:76:f3:
88:fb:5a:00:ec:34:07:db:d6:ef:78:e7:f9:dc:4e:f9:09:b4:
bc:2a:0f:f7:46:7f:dd:95:eb:58:c9:d0:10:31:8f:34:05:47:
48:be:a7:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 15:22:29 2026 by rpki-client