
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1222a11d-80a3-457a-aa55-a4b1fec71a5c/baf89299-a768-3de2-97bb-42764b25fb78.roa
File: baf89299-a768-3de2-97bb-42764b25fb78.roa (raw, json)
Hash identifier: 68hwPWfSTSa27wb/2uO8A6A4fvbk57akJAmWWj4lFi4=
Subject key identifier: 14:BC:70:E8:4B:EB:2C:5A:D7:A1:C5:F5:BF:F6:EB:12:77:99:3F:47
Certificate issuer: /CN=1222a11d-80a3-457a-aa55-a4b1fec71a5c
Certificate serial: 010D0C9F4328584D4BF4F42FDA95F0CCB2BC9BC0
Authority key identifier: A0:85:C2:F0:36:BB:26:C6:41:97:8C:70:46:D1:29:00:5D:DD:BE:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1222a11d-80a3-457a-aa55-a4b1fec71a5c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1222a11d-80a3-457a-aa55-a4b1fec71a5c/baf89299-a768-3de2-97bb-42764b25fb78.roa
Signing time: Thu 26 Mar 2026 13:00:41 +0000
ROA not before: Thu 26 Mar 2026 13:00:41 +0000
ROA not after: Wed 24 Jun 2026 13:00:41 +0000
asID: 46664
IP address blocks: 23.148.144.0/24 maxlen: 24
23.148.145.0/24 maxlen: 24
23.148.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1222a11d-80a3-457a-aa55-a4b1fec71a5c/1222a11d-80a3-457a-aa55-a4b1fec71a5c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1222a11d-80a3-457a-aa55-a4b1fec71a5c/1222a11d-80a3-457a-aa55-a4b1fec71a5c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1222a11d-80a3-457a-aa55-a4b1fec71a5c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 15 Apr 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:4b:f4:f4:2f:da:95:f0:cc:b2:bc:9b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1222a11d-80a3-457a-aa55-a4b1fec71a5c
Validity
Not Before: Mar 26 13:00:41 2026 GMT
Not After : Jun 24 13:00:41 2026 GMT
Subject: CN=7a033d9e-0ddc-4544-bc67-c3178a17665a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7a:90:ea:93:8f:1e:20:9b:b7:71:6a:dd:b1:
2a:ad:9e:f4:54:6a:0f:5e:6f:3d:d6:15:29:13:b4:
2d:7f:f4:f4:cd:d0:08:3d:58:22:d3:84:f7:23:3a:
52:30:9b:25:ef:fe:9a:23:f8:0e:18:04:33:a9:5b:
fa:a9:7e:f8:80:f2:31:2e:aa:16:c5:ec:66:03:57:
d4:19:76:be:6e:93:dc:71:74:7b:30:d9:6b:1b:e1:
8e:bc:e2:b3:f4:85:d2:be:f2:32:0e:88:db:1c:f2:
6c:3f:55:b6:fc:b0:03:a8:d9:4b:04:d6:f7:9f:7a:
f4:69:a2:21:a5:9a:71:2e:8e:ff:10:d9:f9:4c:39:
96:71:ed:64:b0:2d:c4:15:5d:87:87:de:4d:61:55:
d3:75:7f:fd:07:ab:62:b1:f4:de:cf:a6:5c:f7:75:
a5:23:ac:73:23:8e:c4:9d:21:00:89:fa:9b:3e:88:
44:38:7d:5e:a2:d0:c5:bd:b3:df:b8:ce:e5:1e:6b:
af:6c:57:7b:bc:4a:f7:98:39:54:39:db:b1:41:cf:
96:be:ac:be:32:4b:82:af:75:79:54:38:6d:8d:f7:
af:e6:de:eb:84:ba:67:32:97:d8:10:c4:cb:d5:d5:
55:a4:c3:bb:3b:65:2c:8d:6b:d9:26:a0:0c:88:1d:
80:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:BC:70:E8:4B:EB:2C:5A:D7:A1:C5:F5:BF:F6:EB:12:77:99:3F:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1222a11d-80a3-457a-aa55-a4b1fec71a5c/baf89299-a768-3de2-97bb-42764b25fb78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1222a11d-80a3-457a-aa55-a4b1fec71a5c/1222a11d-80a3-457a-aa55-a4b1fec71a5c.crl
X509v3 Authority Key Identifier:
keyid:A0:85:C2:F0:36:BB:26:C6:41:97:8C:70:46:D1:29:00:5D:DD:BE:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/1222a11d-80a3-457a-aa55-a4b1fec71a5c.cer
sbgp-ipAddrBlock: critical
IPv4:
23.148.144.0-23.148.146.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:19:82:2c:c8:f8:fa:2a:87:d1:5c:5d:3f:b5:cd:0b:d3:d4:
b6:95:8d:e4:25:84:04:85:81:74:0e:0f:f4:bf:94:fc:06:ba:
d3:6b:db:1a:9b:03:06:29:45:ad:27:4e:43:28:72:51:05:59:
e1:ef:7d:0e:8e:bf:62:0b:94:d3:2a:74:13:c8:61:20:49:3f:
e8:a4:51:ac:5b:57:8c:c9:47:1f:f6:07:8d:28:60:b9:4b:c1:
e3:d3:33:47:a8:dd:8a:21:88:1e:ca:7a:8d:6b:8a:b4:e4:06:
36:5b:c2:14:d6:1b:08:ea:58:4a:26:57:0f:12:56:e7:0d:8b:
73:38:d2:72:45:a9:9c:0f:ac:5e:1a:bd:1d:70:90:1c:57:ae:
d0:bd:24:88:de:43:30:f6:90:a6:d4:95:bf:36:62:3a:ed:fa:
89:a8:6a:b2:55:08:3e:4f:0c:6f:6e:89:00:a5:3f:fb:a1:62:
e6:82:5a:af:67:76:8d:14:c9:e4:d5:90:de:cf:9f:26:ab:bc:
04:81:9f:ff:67:fd:3e:93:a2:0c:23:d2:d3:23:6f:82:0d:5e:
f2:d5:a7:a3:c2:4a:b5:b7:fc:9d:6d:ae:1a:3d:ed:4a:e4:d8:
04:80:9d:4c:85:60:60:0e:af:2d:39:95:38:5e:e9:61:bd:e5:
73:a8:5b:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:05:23 2026 by rpki-client