
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2a43a868-3d14-440f-a95a-5428c232c5d0/e93a5b63-6268-38f6-b20d-f5c2fcf1e8d7.roa
File: e93a5b63-6268-38f6-b20d-f5c2fcf1e8d7.roa (raw, json)
Hash identifier: fU7ezug3XUAwZOclqJTMHpq7EZ11/WAJUZ0d3sGAzxc=
Subject key identifier: 8B:65:F8:1A:9A:AC:55:6A:DE:56:10:17:4C:85:DC:5B:CF:4D:19:1D
Certificate issuer: /CN=2a43a868-3d14-440f-a95a-5428c232c5d0
Certificate serial: 010D0C9F4328584DF640B1D8C874830FA8903308
Authority key identifier: 8A:E9:B1:DB:3E:1C:E3:90:30:AA:C9:E4:44:E2:AF:BB:97:F1:4B:32
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2a43a868-3d14-440f-a95a-5428c232c5d0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2a43a868-3d14-440f-a95a-5428c232c5d0/e93a5b63-6268-38f6-b20d-f5c2fcf1e8d7.roa
Signing time: Tue 26 May 2026 13:00:31 +0000
ROA not before: Tue 26 May 2026 13:00:31 +0000
ROA not after: Mon 24 Aug 2026 13:00:31 +0000
asID: 402230
IP address blocks: 23.154.28.0/24 maxlen: 24
2602:f440::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2a43a868-3d14-440f-a95a-5428c232c5d0/2a43a868-3d14-440f-a95a-5428c232c5d0.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2a43a868-3d14-440f-a95a-5428c232c5d0/2a43a868-3d14-440f-a95a-5428c232c5d0.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2a43a868-3d14-440f-a95a-5428c232c5d0.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 03 Jun 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:f6:40:b1:d8:c8:74:83:0f:a8:90:33:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a43a868-3d14-440f-a95a-5428c232c5d0
Validity
Not Before: May 26 13:00:31 2026 GMT
Not After : Aug 24 13:00:31 2026 GMT
Subject: CN=aa2a7083-e0c9-4b92-988b-fd26848d35ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2d:26:97:19:8b:a9:a5:bc:f2:0c:ec:71:30:
f1:90:c6:e1:5e:54:7d:a5:82:d1:76:e7:dc:a9:70:
12:b3:81:6c:c9:c4:45:ec:1e:97:4d:59:76:61:9a:
41:be:6d:f5:6f:32:6b:10:db:bf:ba:aa:94:4a:16:
b3:85:ff:63:de:6c:f1:22:03:9e:1b:ee:fd:04:9b:
21:49:54:01:16:a8:16:94:63:c2:cf:28:74:a2:25:
1d:e8:2b:3a:65:e3:ab:4e:1a:70:dd:2b:98:ec:9d:
f0:aa:93:c0:4d:51:6f:13:77:9b:a9:88:86:8e:1b:
39:ba:74:24:cb:d9:c9:53:d0:7b:e4:e6:bb:79:1c:
2f:ab:9e:33:e3:79:a3:55:7d:5c:10:54:4d:ca:a7:
5e:09:da:91:26:7d:40:22:09:4c:ed:e5:eb:81:ad:
bb:93:ce:b8:20:40:e1:4f:2e:67:85:0f:83:b2:c6:
0c:93:29:a6:c2:d8:3a:1b:dd:62:57:c6:e6:da:53:
61:f5:b9:d1:38:6f:d4:cb:6b:72:67:c2:a0:82:39:
73:7e:57:b7:4b:c7:b1:10:c9:c2:0c:41:f5:d8:64:
bf:5e:11:3b:50:73:c9:e4:04:c4:ad:4a:37:4e:77:
31:95:b9:d6:65:31:3c:14:c0:53:bb:73:b1:3a:8c:
25:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:65:F8:1A:9A:AC:55:6A:DE:56:10:17:4C:85:DC:5B:CF:4D:19:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2a43a868-3d14-440f-a95a-5428c232c5d0/e93a5b63-6268-38f6-b20d-f5c2fcf1e8d7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2a43a868-3d14-440f-a95a-5428c232c5d0/2a43a868-3d14-440f-a95a-5428c232c5d0.crl
X509v3 Authority Key Identifier:
keyid:8A:E9:B1:DB:3E:1C:E3:90:30:AA:C9:E4:44:E2:AF:BB:97:F1:4B:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2a43a868-3d14-440f-a95a-5428c232c5d0.cer
sbgp-ipAddrBlock: critical
IPv4:
23.154.28.0/24
IPv6:
2602:f440::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:a9:9a:00:79:24:d4:e1:44:d0:10:44:1f:a0:52:95:a8:98:
bc:4b:2a:60:35:cc:4e:77:bc:5d:37:27:38:49:5e:48:62:16:
7f:fa:55:79:b3:69:06:47:ef:62:a9:63:a5:5e:43:d2:d5:cf:
ce:36:81:2a:96:cb:86:99:44:05:93:b0:85:1c:b1:a4:6b:3e:
3d:c8:b5:13:08:8a:2d:9b:d3:04:35:c3:65:5a:70:0e:4c:27:
4f:84:62:50:34:72:97:14:dc:15:42:dd:64:fd:54:9f:e5:5a:
6e:3f:55:e3:7c:41:2d:37:af:1c:1f:c5:7a:9a:54:1b:dc:1c:
46:ae:16:b3:c2:24:4e:19:7c:5c:92:d8:3d:7a:14:ff:3a:84:
68:46:91:86:3b:68:a4:73:d3:e7:0f:dd:bd:8f:c9:61:3b:ed:
8a:c7:8f:29:22:8a:82:ec:51:17:22:4a:03:d6:ee:a1:42:5f:
5e:1c:94:df:66:00:75:6a:5a:68:4b:b5:da:1a:2d:71:9c:cd:
d6:d0:48:5b:3e:61:d3:73:f9:dc:88:c8:a4:56:91:40:f0:08:
6b:09:64:2a:65:7d:91:eb:6f:28:a5:e9:f8:18:0e:75:54:a0:
38:48:29:42:bf:1a:e5:79:70:2f:12:ca:fa:78:9e:01:76:1f:
37:bd:bf:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 1 22:01:14 2026 by rpki-client