
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/29540dcd-69da-45be-b57c-8c4aefcf66fe/abb00048-3cd8-351a-b0c7-cfbdb46bc6dc.roa
File: abb00048-3cd8-351a-b0c7-cfbdb46bc6dc.roa (raw, json)
Hash identifier: GpzBCksBehCzyZBb1TefijcqGiw/ucVtrEUC5sqzIl0=
Subject key identifier: C1:5F:AC:64:4D:50:1F:A3:FA:64:AE:3C:43:C1:BD:C8:30:BA:10:BA
Certificate issuer: /CN=29540dcd-69da-45be-b57c-8c4aefcf66fe
Certificate serial: 010D0C9F4328584D0912B450A6A9CCA412215000
Authority key identifier: 3B:BC:A1:D1:81:08:2D:07:28:F5:F3:5E:C5:FB:87:AA:EF:00:7A:98
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/29540dcd-69da-45be-b57c-8c4aefcf66fe.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/29540dcd-69da-45be-b57c-8c4aefcf66fe/abb00048-3cd8-351a-b0c7-cfbdb46bc6dc.roa
Signing time: Mon 02 Mar 2026 14:00:41 +0000
ROA not before: Mon 02 Mar 2026 14:00:41 +0000
ROA not after: Sun 31 May 2026 13:00:41 +0000
asID: 7018
IP address blocks: 23.132.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/29540dcd-69da-45be-b57c-8c4aefcf66fe/29540dcd-69da-45be-b57c-8c4aefcf66fe.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/29540dcd-69da-45be-b57c-8c4aefcf66fe/29540dcd-69da-45be-b57c-8c4aefcf66fe.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/29540dcd-69da-45be-b57c-8c4aefcf66fe.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 05 Mar 2026 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:09:12:b4:50:a6:a9:cc:a4:12:21:50:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29540dcd-69da-45be-b57c-8c4aefcf66fe
Validity
Not Before: Mar 2 14:00:41 2026 GMT
Not After : May 31 13:00:41 2026 GMT
Subject: CN=ff33ec50-dd5b-47f6-b5ae-56d0103d5481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:98:fa:ce:e9:1d:d1:48:5b:eb:b5:cc:80:40:
a6:51:cc:99:61:f3:32:7d:44:9d:f6:75:9a:a3:f4:
e9:fe:89:fb:04:9e:d2:74:ee:a6:f5:b6:83:4e:af:
3e:a3:a0:c5:cf:cf:d1:5d:cf:59:a2:2a:1b:b8:e3:
05:82:e4:1a:68:88:b5:d3:31:1b:53:68:9f:64:30:
20:8a:c7:26:fe:b4:6c:63:e7:fb:4d:a0:c9:c8:e2:
29:e7:ff:c0:52:7f:54:77:3b:f1:ff:d4:9c:72:6b:
6f:84:68:14:51:9c:9d:68:00:19:4c:6d:8b:a6:ce:
46:fb:21:21:8e:c3:d8:e5:21:f9:5f:87:c9:90:83:
d8:8c:58:d7:0f:5f:ab:f6:88:c1:20:81:dc:b2:55:
64:17:df:d3:43:53:95:7e:fa:cc:0c:f5:30:1c:2b:
04:d2:53:a1:84:60:36:8f:47:ac:a6:dd:64:98:61:
f2:2b:94:92:2a:9c:83:c3:fa:90:03:28:b6:5e:bd:
2c:6a:db:1e:f9:7c:d3:25:38:5c:9c:b1:ea:3e:b1:
ae:7d:52:85:0c:94:ca:fd:60:d4:46:32:ee:0e:d3:
ce:6f:c8:c4:3f:b9:2d:a3:3d:99:15:b3:83:11:1c:
8e:52:91:9a:52:c4:e2:4a:56:93:c8:6a:5d:32:e6:
c8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:5F:AC:64:4D:50:1F:A3:FA:64:AE:3C:43:C1:BD:C8:30:BA:10:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/29540dcd-69da-45be-b57c-8c4aefcf66fe/abb00048-3cd8-351a-b0c7-cfbdb46bc6dc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/29540dcd-69da-45be-b57c-8c4aefcf66fe/29540dcd-69da-45be-b57c-8c4aefcf66fe.crl
X509v3 Authority Key Identifier:
keyid:3B:BC:A1:D1:81:08:2D:07:28:F5:F3:5E:C5:FB:87:AA:EF:00:7A:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/29540dcd-69da-45be-b57c-8c4aefcf66fe.cer
sbgp-ipAddrBlock: critical
IPv4:
23.132.220.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:28:79:0a:b4:04:15:b6:78:76:d4:cd:c0:46:0c:47:23:6a:
71:0f:5c:30:4a:be:0b:43:aa:40:00:0a:2e:e3:bb:0b:85:79:
db:24:bc:20:85:b1:c0:bf:01:6d:a8:05:e8:05:e2:6a:72:cf:
9a:d6:c3:02:35:3f:1a:82:d4:cf:5d:52:a0:3a:81:c8:56:21:
7e:5d:ed:40:ed:2b:f8:48:f9:95:ab:e9:7a:7d:a4:e7:64:b0:
68:24:42:ef:16:dc:b7:08:b5:b2:c9:ff:5d:1d:8c:6f:f4:e3:
7c:3a:91:d8:db:8a:4b:49:71:d1:ca:79:04:49:ac:cb:7e:5a:
67:86:52:cc:ee:b9:1c:f1:fc:98:10:95:1a:2d:ff:e9:a7:99:
2d:a7:94:c7:3f:26:b3:95:c7:6b:ae:f9:2b:79:1e:84:b6:74:
e2:be:f1:61:9b:4f:a9:71:bc:61:23:14:d1:ce:f2:2e:0b:70:
a6:ee:2f:bc:39:da:a8:60:0f:fb:a2:09:91:83:13:50:10:c0:
0d:b5:2e:15:95:7e:f0:44:c0:35:9c:72:98:a8:1e:7b:5d:cd:
70:71:21:15:cb:d4:e8:5f:93:21:f5:35:9b:dd:3f:da:50:7b:
cf:a6:6c:81:ed:af:80:3a:a0:9e:40:6e:a2:73:b3:ab:24:14:
8d:bd:21:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 01:57:56 2026 by rpki-client