
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/99b49bb6-2782-4a82-829c-d4b94eb646f1/b4ef1d26-f52e-3595-b56c-7660a2e4de08.roa
File: b4ef1d26-f52e-3595-b56c-7660a2e4de08.roa (raw, json)
Hash identifier: wtOynx6mj7AOebPLmtwgMMl/ZaAq0QYckHdbhqv/91w=
Subject key identifier: FC:69:E8:5D:76:72:AC:5D:CA:CC:3A:18:9F:3E:D8:EC:D3:43:AF:F0
Certificate issuer: /CN=99b49bb6-2782-4a82-829c-d4b94eb646f1
Certificate serial: 010D0C9F4328584D237A72B64C12702DBBBA99A0
Authority key identifier: D6:69:B4:0F:5D:A2:4C:D6:6A:FF:27:0A:E8:FE:F2:CC:F9:E8:6C:24
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/99b49bb6-2782-4a82-829c-d4b94eb646f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/99b49bb6-2782-4a82-829c-d4b94eb646f1/b4ef1d26-f52e-3595-b56c-7660a2e4de08.roa
Signing time: Thu 12 Mar 2026 01:00:32 +0000
ROA not before: Thu 12 Mar 2026 01:00:32 +0000
ROA not after: Wed 10 Jun 2026 01:00:32 +0000
asID: 8095
IP address blocks: 23.154.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/99b49bb6-2782-4a82-829c-d4b94eb646f1/99b49bb6-2782-4a82-829c-d4b94eb646f1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/99b49bb6-2782-4a82-829c-d4b94eb646f1/99b49bb6-2782-4a82-829c-d4b94eb646f1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/99b49bb6-2782-4a82-829c-d4b94eb646f1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 23 Mar 2026 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:23:7a:72:b6:4c:12:70:2d:bb:ba:99:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99b49bb6-2782-4a82-829c-d4b94eb646f1
Validity
Not Before: Mar 12 01:00:32 2026 GMT
Not After : Jun 10 01:00:32 2026 GMT
Subject: CN=f8c7bb03-4d6d-4820-8768-865128694332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:32:f1:8f:25:56:15:82:8d:5f:66:36:43:43:
fc:a6:3b:45:f7:96:f5:0f:7f:48:1b:1f:6f:95:0b:
cf:05:15:2f:3b:b1:59:76:08:64:a6:3b:11:8b:91:
3f:93:21:da:25:19:8e:4b:b3:d6:e2:3d:e6:91:99:
5e:f5:3d:f6:09:d9:ce:84:dc:2d:73:be:33:66:60:
dd:f8:10:a6:a5:5f:d2:ff:ce:ce:ae:58:ed:6c:b1:
86:16:3f:84:d0:7f:e5:6f:21:85:70:6b:48:27:cd:
fa:cb:e4:6c:58:17:bd:42:7e:56:81:c3:7d:c6:d0:
2d:0c:f4:e5:2e:8f:47:8d:c9:11:83:9c:91:1d:16:
21:69:02:75:8f:60:7e:ee:53:7b:e6:04:06:38:f6:
03:7e:b4:86:ac:b2:08:19:f5:d6:2b:cb:6f:9e:79:
fd:03:7d:33:0e:dd:c8:14:a9:f7:88:fd:19:49:90:
1c:10:a3:8a:bd:30:af:cf:71:1d:20:94:d5:f2:f3:
e8:0f:9b:8e:8b:aa:fc:ae:1f:ca:bd:7e:84:d3:a0:
37:94:ac:3f:c3:a9:1b:2f:7d:20:c6:29:45:b9:1c:
33:49:98:34:80:6f:07:83:25:73:e1:23:41:f0:f0:
4a:c9:a6:5d:30:bd:7b:46:5f:85:6b:c8:63:cf:ed:
b1:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:69:E8:5D:76:72:AC:5D:CA:CC:3A:18:9F:3E:D8:EC:D3:43:AF:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/99b49bb6-2782-4a82-829c-d4b94eb646f1/b4ef1d26-f52e-3595-b56c-7660a2e4de08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/99b49bb6-2782-4a82-829c-d4b94eb646f1/99b49bb6-2782-4a82-829c-d4b94eb646f1.crl
X509v3 Authority Key Identifier:
keyid:D6:69:B4:0F:5D:A2:4C:D6:6A:FF:27:0A:E8:FE:F2:CC:F9:E8:6C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/99b49bb6-2782-4a82-829c-d4b94eb646f1.cer
sbgp-ipAddrBlock: critical
IPv4:
23.154.120.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:48:d1:c5:96:d3:ad:1d:ca:da:29:05:15:71:bd:d5:48:c1:
f8:59:fe:0d:c0:eb:c2:2d:e6:31:a9:80:78:27:8c:ba:6a:fe:
03:43:e0:d3:89:c0:b3:49:6d:ac:ab:76:e5:c0:85:0f:81:86:
91:87:50:0e:3f:ed:86:de:f2:60:b1:89:c7:4d:a1:50:ae:50:
f5:cd:79:f0:4e:b9:00:f6:dc:41:1b:0e:65:ff:35:4d:d2:1d:
23:82:65:a1:92:b2:26:e1:c5:37:07:b8:60:61:b5:96:e5:63:
8f:c5:a1:0a:fa:c5:bb:fe:de:ff:a1:60:e5:55:22:e0:4e:73:
3b:ad:8a:8d:02:2d:d3:f0:75:6b:38:e9:ae:30:5d:47:73:77:
80:94:4b:e8:35:f6:22:ce:d4:8e:95:b4:0c:f2:01:9b:08:55:
19:43:10:9c:ef:f3:a6:a6:16:b2:9d:a1:0a:76:fd:8e:eb:51:
f3:57:04:83:63:01:83:92:7e:aa:d0:00:7f:9f:70:92:2c:3d:
14:62:17:ec:a0:4d:19:83:40:6f:ce:71:07:57:0e:56:5e:f0:
9a:33:41:3a:3b:f6:2c:22:4c:ce:f7:de:aa:8d:2c:90:62:74:
b6:1c:b2:47:83:9c:0f:e0:2f:37:45:2d:8f:d7:05:5b:1a:d3:
da:b4:42:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 04:26:58 2026 by rpki-client