
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2a2cac0-9f4e-4e62-acf9-0302120174f8/9bb6da2c-9e51-30a2-9769-751c1a83d447.roa
File: 9bb6da2c-9e51-30a2-9769-751c1a83d447.roa (raw, json)
Hash identifier: LLq6DWBGxGdlmn7RCncfd4VFSJPTkBxvUKwrjMCLk8U=
Subject key identifier: 29:56:C3:CA:7F:D6:1C:46:39:FD:1D:E8:94:F9:25:8C:2B:AA:6A:8A
Certificate issuer: /CN=b2a2cac0-9f4e-4e62-acf9-0302120174f8
Certificate serial: 010D0C9F4328584E5BAF5FEFE813C0AD3E7E6600
Authority key identifier: D9:8E:DA:EF:67:8F:4D:40:F9:54:87:84:6C:9A:60:B2:88:10:4A:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2a2cac0-9f4e-4e62-acf9-0302120174f8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2a2cac0-9f4e-4e62-acf9-0302120174f8/9bb6da2c-9e51-30a2-9769-751c1a83d447.roa
Signing time: Wed 01 Jul 2026 21:00:12 +0000
ROA not before: Wed 01 Jul 2026 21:00:12 +0000
ROA not after: Tue 29 Sep 2026 21:00:12 +0000
asID: 401998
IP address blocks: 23.145.180.0/24 maxlen: 24
2602:f557::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2a2cac0-9f4e-4e62-acf9-0302120174f8/b2a2cac0-9f4e-4e62-acf9-0302120174f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2a2cac0-9f4e-4e62-acf9-0302120174f8/b2a2cac0-9f4e-4e62-acf9-0302120174f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2a2cac0-9f4e-4e62-acf9-0302120174f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 14 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:5b:af:5f:ef:e8:13:c0:ad:3e:7e:66:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2a2cac0-9f4e-4e62-acf9-0302120174f8
Validity
Not Before: Jul 1 21:00:12 2026 GMT
Not After : Sep 29 21:00:12 2026 GMT
Subject: CN=80c8c02a-17cf-4e4b-b857-d9fd073476b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:66:1a:8e:16:d3:5a:6e:cd:92:67:ba:67:f4:
66:0c:a2:fe:ae:1d:30:54:df:73:01:12:c2:89:9e:
1f:ad:fd:6c:ce:dd:f3:ac:fe:81:90:77:5a:61:dd:
5f:1b:1d:8c:3c:46:aa:77:3e:78:13:fe:f9:4f:02:
3f:98:fa:ea:6f:56:93:8a:bd:e4:70:85:46:d6:bc:
a9:c0:13:cd:d2:3c:8f:90:fe:ce:59:86:e8:0e:98:
4e:e0:d3:a7:9b:5c:0b:98:ef:1b:29:8c:f0:7f:67:
bb:0e:17:42:b7:7a:b8:1e:f7:5c:16:ad:4e:93:69:
c9:cb:e6:ab:b4:7a:11:e8:4d:24:73:78:74:bb:35:
a0:68:aa:c8:6e:99:7b:29:26:cf:28:97:3b:71:bd:
a6:1e:84:8f:25:f7:35:30:c6:12:9a:15:3f:c5:ee:
13:34:b4:e4:d7:f0:4c:8d:a2:24:0c:74:84:76:06:
17:7f:ab:73:3d:c9:ca:e1:80:6c:86:84:31:d6:ab:
cb:9f:7d:bb:af:b0:99:ac:35:d9:28:96:d0:a5:d5:
c2:fb:1b:89:b7:46:9c:cb:65:30:e4:a5:a2:8c:c3:
e9:21:45:49:a5:d7:6c:65:e9:ef:09:d0:67:f5:f7:
0e:62:7a:28:e2:99:64:df:96:1e:00:75:4a:36:3c:
5d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:56:C3:CA:7F:D6:1C:46:39:FD:1D:E8:94:F9:25:8C:2B:AA:6A:8A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2a2cac0-9f4e-4e62-acf9-0302120174f8/9bb6da2c-9e51-30a2-9769-751c1a83d447.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2a2cac0-9f4e-4e62-acf9-0302120174f8/b2a2cac0-9f4e-4e62-acf9-0302120174f8.crl
X509v3 Authority Key Identifier:
keyid:D9:8E:DA:EF:67:8F:4D:40:F9:54:87:84:6C:9A:60:B2:88:10:4A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2a2cac0-9f4e-4e62-acf9-0302120174f8.cer
sbgp-ipAddrBlock: critical
IPv4:
23.145.180.0/24
IPv6:
2602:f557::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:61:8b:36:6d:80:6c:2b:7c:47:d4:ba:dc:c2:8b:2d:4e:45:
16:fa:97:48:56:3b:18:63:50:fd:9c:37:5c:df:68:67:4f:47:
9b:19:1f:98:68:f4:f3:6e:80:e0:44:a3:95:ed:36:03:d2:f6:
39:7a:2c:1d:f5:37:1a:b8:96:94:21:5b:2b:80:18:c5:40:47:
6f:a7:34:ea:93:da:ef:88:bc:b4:9d:b4:1b:f7:c6:67:7c:ee:
6d:97:da:e2:55:e5:3d:a6:a4:5c:a4:31:72:27:d6:36:1d:af:
d1:44:ef:b0:65:99:a8:19:94:4a:cd:f3:ca:3b:f5:01:70:99:
8b:72:26:ae:18:4a:1d:85:ca:3b:4c:ec:2b:d3:a5:62:d0:07:
90:16:e5:ab:8a:b2:98:28:95:97:d5:60:bb:ea:4c:2d:57:13:
24:29:4b:6c:b8:34:de:73:58:ac:94:ea:bb:55:0a:04:f6:51:
0a:09:32:2c:3f:23:10:e5:0b:63:fe:71:4b:14:9a:4e:34:a9:
b5:32:3b:34:4b:7e:38:c0:dd:a8:8b:e1:93:db:98:42:9a:74:
8b:d9:80:48:f8:aa:4e:84:63:d1:81:39:aa:8b:3e:f2:95:cc:
b4:3b:0f:ac:4e:f6:32:b5:0c:fd:1f:12:40:cd:27:51:42:d3:
e9:ce:1c:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 23:46:21 2026 by rpki-client