
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/7a815ed4-4225-3420-a6b7-ea3b0826ab0f.roa
File: 7a815ed4-4225-3420-a6b7-ea3b0826ab0f.roa (raw, json)
Hash identifier: JBZcs3Tg8oJDnv+2nQwD6/SDtkZruKk/MEqNwctz3Dk=
Subject key identifier: 24:B7:DF:23:5A:17:1E:FF:73:8D:90:B0:AA:D2:82:6A:2E:F6:6A:E0
Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial: 010D0C9F4328584D1B1A6521AF97971318AD6480
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/7a815ed4-4225-3420-a6b7-ea3b0826ab0f.roa
Signing time: Mon 09 Mar 2026 01:00:32 +0000
ROA not before: Mon 09 Mar 2026 01:00:32 +0000
ROA not after: Sun 07 Jun 2026 01:00:32 +0000
asID: 32043
IP address blocks: 173.232.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 11 Mar 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:1b:1a:65:21:af:97:97:13:18:ad:64:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Validity
Not Before: Mar 9 01:00:32 2026 GMT
Not After : Jun 7 01:00:32 2026 GMT
Subject: CN=66d76f3e-2f82-4878-b26e-193ee3664a6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:2f:36:e8:7e:0a:65:7a:21:34:7a:04:89:d7:
3e:c4:a2:49:a7:84:df:ee:e6:eb:65:25:63:06:a9:
31:9d:24:2b:87:2a:21:5e:96:a6:26:fe:23:f5:ac:
e8:c4:dc:2f:98:cf:36:1b:91:5d:c3:6a:97:49:e4:
4f:43:de:35:bc:b8:5b:b0:4d:d8:ed:f3:b0:60:8b:
1a:a0:b9:ba:60:0f:cb:7d:6d:14:ab:a7:b5:5a:a6:
ef:4b:c4:62:cc:df:0c:62:7d:d4:0c:71:be:5a:a5:
6e:27:4e:af:30:01:46:07:40:77:c5:95:89:58:6e:
88:48:f0:58:d3:68:fa:49:3f:95:d2:52:51:39:9f:
b5:3c:8b:2e:56:ce:b8:37:9d:52:1f:fe:d9:c2:4e:
18:bc:8e:ef:ba:22:5b:14:87:01:df:d4:3b:bd:a8:
1f:19:09:cd:f2:02:9c:40:9b:c2:1e:f1:27:00:22:
c5:72:6c:fd:84:4a:42:6f:08:3c:fe:60:cf:6c:41:
25:d3:71:df:57:e9:e9:a9:73:3c:a9:8a:a0:1c:c8:
ce:58:fe:05:dd:e1:0f:2a:75:4c:19:6a:a9:10:d8:
3f:1a:25:b3:93:57:9c:87:76:c5:3b:81:44:04:4d:
43:cd:01:26:e4:e5:4c:40:de:93:ef:1b:5f:0d:42:
16:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:B7:DF:23:5A:17:1E:FF:73:8D:90:B0:AA:D2:82:6A:2E:F6:6A:E0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/7a815ed4-4225-3420-a6b7-ea3b0826ab0f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
X509v3 Authority Key Identifier:
keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
sbgp-ipAddrBlock: critical
IPv4:
173.232.23.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:6c:f0:de:df:51:9e:24:63:12:c1:40:8d:68:00:0c:50:e3:
13:17:c4:0f:ff:d2:2c:07:10:c1:d7:26:39:ef:46:98:dd:4a:
83:1c:77:5d:09:cc:de:db:70:35:58:8b:15:63:b7:ed:34:31:
a0:68:c8:9c:a1:36:56:29:4c:92:40:fc:98:b7:d9:14:cc:19:
1f:16:d1:e2:7f:0e:5e:3a:ee:5c:40:f2:35:8c:11:c5:f5:c3:
73:16:b9:39:0a:24:30:87:24:63:33:dd:27:c1:16:99:93:19:
71:89:ee:8f:52:b3:2e:96:50:52:57:44:f2:70:bf:51:06:b9:
1c:07:d3:cf:46:79:1a:ba:a7:b2:cc:71:35:64:f3:5f:96:8a:
98:cd:77:89:e4:26:9e:56:56:b3:81:99:99:df:cc:7d:cb:14:
6b:d3:63:ae:b6:1a:e7:24:4a:7d:9a:bb:7b:90:9f:11:51:2d:
7a:8d:21:b9:86:3b:0c:cb:c3:9a:40:27:cf:1c:b3:73:e8:43:
d6:14:86:54:b9:bc:05:59:4f:cc:cf:2e:88:d3:80:28:ec:71:
bc:92:2f:79:e1:98:6d:ac:2a:4d:e9:a8:e2:b7:d3:94:b6:12:
ca:7d:95:bb:b3:bc:4f:32:7d:c0:f9:cc:fc:cf:8c:f3:20:9c:
1a:2f:54:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 10 12:00:57 2026 by rpki-client