
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2a2cac0-9f4e-4e62-acf9-0302120174f8/123ec8f2-3786-3363-ba42-24ba0989b710.roa
File: 123ec8f2-3786-3363-ba42-24ba0989b710.roa (raw, json)
Hash identifier: pxDgTdrv5McS1osDjK1nousgAOpx3QM7Dnx39ZhOSc0=
Subject key identifier: FD:66:59:A6:1D:59:4E:08:BC:00:1B:DD:42:B3:F2:05:BE:17:AB:65
Certificate issuer: /CN=b2a2cac0-9f4e-4e62-acf9-0302120174f8
Certificate serial: 010D0C9F4328584CA8C1976FACD700016C81B590
Authority key identifier: D9:8E:DA:EF:67:8F:4D:40:F9:54:87:84:6C:9A:60:B2:88:10:4A:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2a2cac0-9f4e-4e62-acf9-0302120174f8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2a2cac0-9f4e-4e62-acf9-0302120174f8/123ec8f2-3786-3363-ba42-24ba0989b710.roa
Signing time: Tue 27 Jan 2026 02:00:29 +0000
ROA not before: Tue 27 Jan 2026 02:00:29 +0000
ROA not after: Mon 27 Apr 2026 01:00:29 +0000
asID: 18935
IP address blocks: 23.145.180.0/24 maxlen: 24
2602:f557::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2a2cac0-9f4e-4e62-acf9-0302120174f8/b2a2cac0-9f4e-4e62-acf9-0302120174f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2a2cac0-9f4e-4e62-acf9-0302120174f8/b2a2cac0-9f4e-4e62-acf9-0302120174f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2a2cac0-9f4e-4e62-acf9-0302120174f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Feb 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:a8:c1:97:6f:ac:d7:00:01:6c:81:b5:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2a2cac0-9f4e-4e62-acf9-0302120174f8
Validity
Not Before: Jan 27 02:00:29 2026 GMT
Not After : Apr 27 01:00:29 2026 GMT
Subject: CN=d362bd7b-ca8a-4e80-a3fb-eb702b4ad77c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6c:2d:7c:7b:16:d7:b6:a1:1f:16:9c:02:27:
b7:c5:f9:a2:db:00:7c:28:3f:22:9a:29:31:ab:ef:
b7:56:a3:b9:62:01:9d:02:28:3c:9c:ad:56:ab:e9:
cd:dd:13:fd:1d:c9:be:1e:b4:fb:34:08:a5:cc:ff:
ec:2f:90:9a:cc:ea:f6:bb:f2:4d:a8:d9:61:b5:eb:
6a:a5:1b:97:7f:e1:37:8d:c8:19:7e:7c:1f:7e:0e:
02:a3:a1:ed:55:d2:b6:9d:26:5b:4e:3d:1b:f5:75:
6b:60:84:a5:d6:af:e9:3b:ba:75:e6:df:16:91:a8:
1f:69:31:51:d8:dd:de:0f:3a:5b:d0:61:fb:07:99:
c5:f8:89:f2:4c:c5:b7:2a:b5:36:60:42:22:3b:a5:
55:78:7a:5b:b4:58:59:cd:0e:e6:8b:a2:0c:0a:9c:
ae:e1:5f:84:9f:b2:35:f4:7e:19:da:17:d1:15:08:
fa:c2:d9:69:19:f3:74:a1:10:3c:a5:cc:04:86:fb:
98:72:af:71:16:3e:24:8d:b8:57:57:67:ed:53:d0:
aa:a3:bc:41:43:73:8d:f3:89:fa:16:50:45:55:76:
3b:3d:45:1c:2b:a2:c1:d7:9c:87:7e:d1:23:6f:3f:
5d:11:3e:ca:9c:24:d8:b3:f8:b1:b7:93:2e:61:e0:
a2:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:66:59:A6:1D:59:4E:08:BC:00:1B:DD:42:B3:F2:05:BE:17:AB:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2a2cac0-9f4e-4e62-acf9-0302120174f8/123ec8f2-3786-3363-ba42-24ba0989b710.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2a2cac0-9f4e-4e62-acf9-0302120174f8/b2a2cac0-9f4e-4e62-acf9-0302120174f8.crl
X509v3 Authority Key Identifier:
keyid:D9:8E:DA:EF:67:8F:4D:40:F9:54:87:84:6C:9A:60:B2:88:10:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2a2cac0-9f4e-4e62-acf9-0302120174f8.cer
sbgp-ipAddrBlock: critical
IPv4:
23.145.180.0/24
IPv6:
2602:f557::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:63:0d:3e:e6:56:35:08:4e:19:31:82:35:a1:f1:66:62:78:
85:8d:2d:77:e3:26:e1:2a:21:2c:8a:d7:3c:aa:5b:d1:99:eb:
18:ab:fe:17:83:c8:e2:38:c5:c1:00:e0:0c:4e:64:5f:8e:1a:
2e:51:72:dc:b3:eb:3b:09:5d:7e:b6:91:4c:bf:43:12:83:08:
a9:c6:82:8a:b8:ce:26:ec:26:bd:8c:a4:5c:e7:89:ab:0b:89:
38:53:bc:61:ea:9e:4e:e9:ba:69:a0:77:9b:1a:95:05:4e:00:
97:ec:19:e6:87:99:3b:2e:3a:b7:0c:c8:f6:37:cb:d7:04:84:
b5:5f:4e:a9:fa:44:6e:fc:bb:45:af:9f:88:05:8b:d3:e4:62:
c8:28:ac:06:a2:0f:96:6d:fc:33:54:18:03:8d:1e:1c:1e:a3:
a6:ee:30:1d:41:34:24:d2:0b:d7:85:ca:7a:1f:cc:e2:09:74:
0a:6f:3b:7e:46:0d:58:c2:e0:74:f0:68:d5:1b:9b:fe:d3:2e:
d1:25:ea:a2:c4:4f:df:97:e0:97:ab:a3:61:99:59:92:c2:17:
0b:4e:5f:08:45:95:58:4c:5b:45:88:3a:27:52:19:b4:a8:83:
94:0e:e1:af:5e:10:cc:5b:07:5e:a9:7f:aa:7d:2f:3d:0e:22:
fb:c9:52:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 22:52:32 2026 by rpki-client