
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e307b23-6715-4f4e-8e81-99854b623d2d/39e8376f-22b2-35f2-8504-c32896390d85.roa
File: 39e8376f-22b2-35f2-8504-c32896390d85.roa (raw, json)
Hash identifier: aZgcMadr3Yc2DWCon9qWGiRMlC2MfITtgkQJA+bqlrY=
Subject key identifier: 80:08:BC:6B:57:3B:52:3C:68:71:7D:28:F7:6F:A1:77:17:55:72:17
Certificate issuer: /CN=0e307b23-6715-4f4e-8e81-99854b623d2d
Certificate serial: 010D0C9F4328584CAA271C9F42A1A81F745417E0
Authority key identifier: 58:34:FD:48:71:A0:77:58:13:5A:90:DF:7D:63:69:6C:60:64:5D:CE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e307b23-6715-4f4e-8e81-99854b623d2d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e307b23-6715-4f4e-8e81-99854b623d2d/39e8376f-22b2-35f2-8504-c32896390d85.roa
Signing time: Tue 27 Jan 2026 14:00:36 +0000
ROA not before: Tue 27 Jan 2026 14:00:36 +0000
ROA not after: Mon 27 Apr 2026 13:00:36 +0000
asID: 397668
IP address blocks: 23.165.56.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e307b23-6715-4f4e-8e81-99854b623d2d/0e307b23-6715-4f4e-8e81-99854b623d2d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e307b23-6715-4f4e-8e81-99854b623d2d/0e307b23-6715-4f4e-8e81-99854b623d2d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e307b23-6715-4f4e-8e81-99854b623d2d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 22 Feb 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:aa:27:1c:9f:42:a1:a8:1f:74:54:17:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e307b23-6715-4f4e-8e81-99854b623d2d
Validity
Not Before: Jan 27 14:00:36 2026 GMT
Not After : Apr 27 13:00:36 2026 GMT
Subject: CN=643351c8-0b93-41d1-9507-452ace4d8f66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:69:46:3e:df:e3:01:c4:98:e9:0e:47:ea:4d:
44:28:8e:08:11:f7:84:d5:e3:a0:19:8a:63:13:9d:
5e:14:c7:85:03:45:01:a0:33:03:dc:f1:9d:4f:a5:
c8:a5:7a:2a:4b:04:fe:86:72:48:a1:76:2e:09:d7:
60:c2:4d:85:7c:8a:92:e6:23:fa:50:9e:cd:58:31:
dd:ac:25:b5:a9:14:d5:eb:8e:4d:e2:16:bd:b3:19:
d5:88:2d:45:52:4f:d1:33:e7:b0:7a:6e:41:78:6c:
84:55:92:9d:ea:5e:eb:04:75:73:0f:48:ae:bc:ef:
b7:2f:16:d7:99:b8:77:79:55:c3:6e:35:34:3c:6e:
8e:7f:ba:e8:33:e9:21:72:e5:b9:d1:fa:7e:a5:47:
87:c9:13:89:d7:f7:30:30:0f:57:a2:f1:26:ac:98:
6a:6c:28:09:16:fe:4f:d5:89:be:01:d5:7d:62:90:
f3:25:44:0f:20:10:87:f2:31:69:fc:4b:bd:1e:ab:
bb:48:b2:9b:e1:12:93:73:27:ee:7f:34:98:8f:99:
01:ee:c9:d2:7c:aa:bc:6c:bb:c1:4a:a0:8c:28:1e:
b6:97:01:ab:99:79:b6:d4:75:b9:d4:4b:e1:5e:5d:
40:f4:17:d8:b4:b4:62:47:bc:60:cf:11:4e:25:eb:
c2:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:08:BC:6B:57:3B:52:3C:68:71:7D:28:F7:6F:A1:77:17:55:72:17
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e307b23-6715-4f4e-8e81-99854b623d2d/39e8376f-22b2-35f2-8504-c32896390d85.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e307b23-6715-4f4e-8e81-99854b623d2d/0e307b23-6715-4f4e-8e81-99854b623d2d.crl
X509v3 Authority Key Identifier:
keyid:58:34:FD:48:71:A0:77:58:13:5A:90:DF:7D:63:69:6C:60:64:5D:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e307b23-6715-4f4e-8e81-99854b623d2d.cer
sbgp-ipAddrBlock: critical
IPv4:
23.165.56.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:f2:17:3b:11:69:1a:70:d9:e9:43:ae:15:cb:58:6a:86:34:
a6:ec:b1:a0:41:d1:41:4f:23:57:d8:52:36:e7:b4:b3:1f:72:
4e:ce:5e:2b:57:25:2a:90:81:82:e2:22:5e:9d:fb:07:79:82:
a7:8c:fd:c1:d2:4b:7d:83:e4:30:fc:11:6d:b6:8f:87:6f:7d:
f0:b0:15:b5:f0:78:c5:30:bd:7d:53:70:e6:21:78:87:da:c5:
6d:42:b8:31:a5:ed:e4:8c:a4:7e:58:01:2c:38:6b:54:34:05:
c5:da:80:d9:ec:83:99:c2:55:db:27:a1:a4:fa:9e:4b:66:20:
de:b4:5e:f3:2b:6f:99:24:ed:1d:1e:be:33:12:a4:b3:71:84:
9a:bb:65:7b:8d:90:b8:06:67:35:7b:02:72:64:59:f3:88:4d:
a2:6d:cc:09:fb:d4:a1:78:48:1d:8d:2f:0e:0c:3a:de:2d:98:
af:2f:99:43:df:39:6c:e0:57:12:20:a8:3e:4b:2a:8f:b9:75:
04:17:28:f1:68:fe:c0:48:3c:4d:cb:44:57:23:e8:24:8f:f0:
31:5c:28:c9:19:40:97:61:56:8d:62:64:a0:71:1e:bc:09:84:
43:a0:df:48:b0:e8:0a:0c:c3:64:58:26:38:9e:48:13:13:c2:
80:cb:e7:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 08:47:04 2026 by rpki-client