
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc195d24-8046-44e5-bf80-7bdde011ee7b/4f2c271e-9985-3804-96f9-c37c9b7b1a80.roa
File: 4f2c271e-9985-3804-96f9-c37c9b7b1a80.roa (raw, json)
Hash identifier: 57mE1dtzznDuksy1YommBHt+62Ik1Bd/U2Cko3kgsrQ=
Subject key identifier: D6:62:D2:83:B1:BB:A2:B1:19:73:B6:7F:4E:EE:99:71:79:4E:F0:F6
Certificate issuer: /CN=cc195d24-8046-44e5-bf80-7bdde011ee7b
Certificate serial: 010D0C9F4328584D39CF825A3A2745DA4D7B6100
Authority key identifier: BB:88:F9:B7:DC:D8:C0:65:52:71:57:36:F2:60:0C:47:E5:8C:F1:4E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc195d24-8046-44e5-bf80-7bdde011ee7b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc195d24-8046-44e5-bf80-7bdde011ee7b/4f2c271e-9985-3804-96f9-c37c9b7b1a80.roa
Signing time: Fri 20 Mar 2026 01:00:32 +0000
ROA not before: Fri 20 Mar 2026 01:00:32 +0000
ROA not after: Thu 18 Jun 2026 01:00:32 +0000
asID: 400240
IP address blocks: 23.189.112.0/24 maxlen: 24
2620:9e:e000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc195d24-8046-44e5-bf80-7bdde011ee7b/cc195d24-8046-44e5-bf80-7bdde011ee7b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc195d24-8046-44e5-bf80-7bdde011ee7b/cc195d24-8046-44e5-bf80-7bdde011ee7b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc195d24-8046-44e5-bf80-7bdde011ee7b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 23 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:39:cf:82:5a:3a:27:45:da:4d:7b:61:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc195d24-8046-44e5-bf80-7bdde011ee7b
Validity
Not Before: Mar 20 01:00:32 2026 GMT
Not After : Jun 18 01:00:32 2026 GMT
Subject: CN=2d41a86b-313d-428d-892e-6e69564e79e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:21:66:1b:f8:73:d0:f6:2d:2f:d6:11:bc:fd:
d8:31:55:1b:0c:9d:91:6c:83:f6:68:e4:a8:c6:4d:
d9:37:41:26:20:41:8e:73:41:c2:78:79:c2:fd:bb:
48:cc:95:3b:5a:d5:f2:7d:4a:4b:ee:28:62:a0:dc:
af:40:e2:73:f3:66:46:8c:28:ed:fb:ce:f0:49:b0:
a2:d1:92:92:ff:78:b2:2f:9a:d7:8d:83:af:f1:e5:
da:13:56:db:36:0d:f3:44:b8:1f:1a:0f:4d:d8:9c:
f6:85:d2:81:6a:41:28:8f:bb:18:f4:6c:1a:49:f0:
0b:ed:f7:17:49:ba:2b:cd:12:53:84:ac:2b:b4:e2:
fd:42:6b:3a:9d:00:7c:e5:ce:57:e0:4d:44:cc:97:
91:41:20:d1:89:b0:78:9d:eb:d7:36:2b:d9:ed:02:
0d:e8:a1:62:03:f2:11:a0:88:45:67:cc:0f:c2:1f:
ab:ff:6e:0e:f8:d1:9f:7c:fe:91:99:16:f6:b6:b8:
b1:50:5d:b0:0c:b0:ec:1a:1d:3b:cd:80:36:b0:1c:
99:2c:68:0f:f4:3b:0b:25:ca:f0:ed:19:5e:c7:95:
20:62:ba:a2:eb:0d:13:7c:0e:8b:31:bf:59:70:5c:
2b:70:98:46:4e:05:29:3e:5e:11:61:ee:af:39:51:
0e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:62:D2:83:B1:BB:A2:B1:19:73:B6:7F:4E:EE:99:71:79:4E:F0:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc195d24-8046-44e5-bf80-7bdde011ee7b/4f2c271e-9985-3804-96f9-c37c9b7b1a80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc195d24-8046-44e5-bf80-7bdde011ee7b/cc195d24-8046-44e5-bf80-7bdde011ee7b.crl
X509v3 Authority Key Identifier:
keyid:BB:88:F9:B7:DC:D8:C0:65:52:71:57:36:F2:60:0C:47:E5:8C:F1:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cc195d24-8046-44e5-bf80-7bdde011ee7b.cer
sbgp-ipAddrBlock: critical
IPv4:
23.189.112.0/24
IPv6:
2620:9e:e000::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:f4:43:dc:f8:25:ce:4e:bb:e2:13:32:ae:21:0d:cd:51:c1:
9d:06:01:cb:83:8c:f4:5d:2a:a4:79:47:b5:25:c5:f6:f8:ba:
04:86:fe:bf:65:c5:17:4d:ef:ad:35:be:59:f3:04:66:a0:1b:
22:ba:ab:dc:ed:cc:6a:ff:45:1e:be:b9:21:a7:b5:b3:64:5e:
e0:50:66:72:a7:de:37:07:2c:ce:b2:43:1f:69:17:1f:45:ed:
e6:25:56:05:de:c1:50:2e:b9:7c:2c:21:e1:d6:51:f9:5f:1e:
2b:3a:44:d3:86:a9:34:c9:76:ab:13:41:20:16:04:24:4e:de:
81:31:57:eb:ab:2a:84:2b:a8:53:db:4c:4a:44:c7:79:cd:d2:
6e:db:5c:ae:34:bc:a5:23:de:20:89:dc:63:5c:90:dd:b2:36:
2a:bb:c3:f7:63:1f:63:1e:a8:96:7c:f6:04:51:09:bb:49:bb:
f1:1d:3d:60:80:cb:ff:a6:0b:7a:19:a9:3c:57:e2:94:fd:8e:
c6:2d:d6:be:f5:86:5d:15:fc:a5:64:b9:ad:75:05:16:c2:13:
fa:25:ec:86:f1:a4:f1:91:04:d6:26:33:19:df:14:20:f4:6d:
bb:31:aa:4a:8a:d7:d7:69:1e:21:ea:b2:1e:45:f7:57:72:3e:
5e:3e:f4:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 09:32:37 2026 by rpki-client