
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cbe95432-80f5-4acc-b869-6d7c0bade7e2/a02d9a2e-b991-34ce-a925-a78450638b13.roa
File: a02d9a2e-b991-34ce-a925-a78450638b13.roa (raw, json)
Hash identifier: JpmKNrZsKEv5pxr561xApi68/5iyZshDvI6q6S6f14Q=
Subject key identifier: 5C:41:54:EA:E9:D9:EB:BC:40:10:D5:3B:B2:67:B3:10:0A:03:38:2A
Certificate issuer: /CN=cbe95432-80f5-4acc-b869-6d7c0bade7e2
Certificate serial: 010D0C9F4328584E5D8375F7BFD7089961EFF380
Authority key identifier: 5C:EE:4C:6D:82:C7:87:CC:4B:DF:E2:57:F7:53:9F:95:CE:D0:B3:0B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cbe95432-80f5-4acc-b869-6d7c0bade7e2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cbe95432-80f5-4acc-b869-6d7c0bade7e2/a02d9a2e-b991-34ce-a925-a78450638b13.roa
Signing time: Thu 02 Jul 2026 12:43:34 +0000
ROA not before: Thu 02 Jul 2026 12:43:34 +0000
ROA not after: Wed 30 Sep 2026 12:43:34 +0000
asID: 15830
IP address blocks: 23.246.144.0/24 maxlen: 24
23.246.145.0/24 maxlen: 24
23.246.146.0/24 maxlen: 24
23.246.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cbe95432-80f5-4acc-b869-6d7c0bade7e2/cbe95432-80f5-4acc-b869-6d7c0bade7e2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cbe95432-80f5-4acc-b869-6d7c0bade7e2/cbe95432-80f5-4acc-b869-6d7c0bade7e2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cbe95432-80f5-4acc-b869-6d7c0bade7e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 06 Jul 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:5d:83:75:f7:bf:d7:08:99:61:ef:f3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbe95432-80f5-4acc-b869-6d7c0bade7e2
Validity
Not Before: Jul 2 12:43:34 2026 GMT
Not After : Sep 30 12:43:34 2026 GMT
Subject: CN=f0ef159b-a8cf-4d3a-9f6d-74fd7b306ec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:aa:e0:4c:3b:96:0f:ac:ff:76:dc:bf:05:eb:
c7:1b:34:dc:ec:52:3b:d3:98:44:38:44:70:c1:b7:
5c:35:59:a2:7f:01:e2:0a:90:5d:fe:d3:29:cc:e8:
7f:07:ae:ab:3d:ca:ca:49:d2:75:43:56:5d:c6:0b:
2b:70:20:9c:af:89:ca:af:d9:ff:21:34:ed:c2:2d:
cd:c9:10:9d:44:18:d7:97:fd:01:06:74:7f:78:c5:
7e:57:89:b9:96:2a:5d:78:bc:d8:6a:20:6b:a0:1d:
96:50:35:f4:eb:47:0b:a2:ba:e0:42:2f:9a:ee:bd:
d6:bf:19:95:05:1d:ed:67:f8:dd:67:47:8f:fb:a8:
51:c4:99:72:71:25:45:6f:a3:bb:30:d5:ed:ac:ba:
ff:05:85:41:ef:8a:19:16:7f:37:91:f9:e9:57:fe:
7a:65:59:95:69:4e:0e:65:b0:83:90:4b:11:16:1a:
2a:51:34:31:c8:f7:11:9b:d4:0f:a3:3d:45:58:cf:
bd:28:d4:dd:cd:05:a1:90:50:1c:75:d3:7c:b2:f0:
e3:1f:d3:57:ca:5d:ba:6b:a8:f0:29:59:d1:83:55:
d9:a7:b3:17:9b:d9:b0:c9:e4:5f:22:b1:0a:e7:c7:
62:2c:81:98:04:03:3c:45:03:cf:0c:bc:b9:13:ce:
89:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:41:54:EA:E9:D9:EB:BC:40:10:D5:3B:B2:67:B3:10:0A:03:38:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cbe95432-80f5-4acc-b869-6d7c0bade7e2/a02d9a2e-b991-34ce-a925-a78450638b13.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cbe95432-80f5-4acc-b869-6d7c0bade7e2/cbe95432-80f5-4acc-b869-6d7c0bade7e2.crl
X509v3 Authority Key Identifier:
keyid:5C:EE:4C:6D:82:C7:87:CC:4B:DF:E2:57:F7:53:9F:95:CE:D0:B3:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cbe95432-80f5-4acc-b869-6d7c0bade7e2.cer
sbgp-ipAddrBlock: critical
IPv4:
23.246.144.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:20:c1:26:b7:2e:92:73:2f:aa:39:d6:c1:9b:99:b3:7a:33:
87:72:b0:58:b8:2d:22:20:f3:b2:95:86:9c:c2:9c:42:06:a5:
62:e5:77:d9:7a:39:51:74:65:f6:e3:17:e5:d4:04:10:d0:54:
9f:1c:ad:6c:b1:dd:08:bf:da:f1:6e:2c:b0:c1:6c:e3:8b:e0:
08:f5:4a:cd:50:6c:75:24:9e:93:46:a1:95:82:00:b5:6b:9b:
2a:81:af:b8:5b:47:ce:31:17:60:aa:7a:49:cb:99:28:a3:a8:
d4:57:3c:80:6e:c7:f3:82:2a:27:0a:f2:44:4e:c1:ac:63:20:
c0:0d:6e:fc:88:89:f7:22:d2:8f:d7:24:b0:1d:9b:f9:86:06:
56:e1:3e:d2:f0:39:76:bb:4a:70:5b:11:4f:d1:33:4f:b7:91:
8f:c5:47:57:d1:ee:dd:45:39:a4:7b:f5:eb:cb:0d:85:cb:31:
4e:d0:90:0d:9b:15:84:0b:70:f7:52:67:3a:7b:77:f2:9d:7a:
40:ea:1f:4d:97:7b:c6:4f:f9:c6:15:8a:7a:de:69:bd:81:66:
be:46:39:ce:7e:29:78:9f:2b:73:ff:60:db:f3:de:23:0b:ea:
09:f5:b0:6c:02:a1:67:21:05:7e:5c:42:bf:6b:3d:e5:bd:b6:
07:98:82:19
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5dg3X3v9cImWHv84AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2JlOTU0MzItODBmNS00YWNjLWI4NjktNmQ3YzBiYWRl
N2UyMB4XDTI2MDcwMjEyNDMzNFoXDTI2MDkzMDEyNDMzNFowLzEtMCsGA1UEAxMk
ZjBlZjE1OWItYThjZi00ZDNhLTlmNmQtNzRmZDdiMzA2ZWMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqrgTDuWD6z/dty/BevHGzTc7FI705hEOERw
wbdcNVmifwHiCpBd/tMpzOh/B66rPcrKSdJ1Q1ZdxgsrcCCcr4nKr9n/ITTtwi3N
yRCdRBjXl/0BBnR/eMV+V4m5lipdeLzYaiBroB2WUDX060cLorrgQi+a7r3WvxmV
BR3tZ/jdZ0eP+6hRxJlycSVFb6O7MNXtrLr/BYVB74oZFn83kfnpV/56ZVmVaU4O
ZbCDkEsRFhoqUTQxyPcRm9QPoz1FWM+9KNTdzQWhkFAcddN8svDjH9NXyl26a6jw
KVnRg1XZp7MXm9mwyeRfIrEK58diLIGYBAM8RQPPDLy5E86JIwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFxBVOrp2eu8QBDVO7JnsxAKAzgqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9jYmU5
NTQzMi04MGY1LTRhY2MtYjg2OS02ZDdjMGJhZGU3ZTIvYTAyZDlhMmUtYjk5MS0z
NGNlLWE5MjUtYTc4NDUwNjM4YjEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvY2JlOTU0MzItODBmNS00YWNjLWI4
NjktNmQ3YzBiYWRlN2UyL2NiZTk1NDMyLTgwZjUtNGFjYy1iODY5LTZkN2MwYmFk
ZTdlMi5jcmwwHwYDVR0jBBgwFoAUXO5MbYLHh8xL3+JX91Oflc7QswswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS9jYmU5NTQzMi04MGY1LTRhY2MtYjg2OS02ZDdj
MGJhZGU3ZTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF/aQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAsgwSa3LpJzL6o51sGbmbN6M4dysFi4LSIg87KVhpzCnEIGpWLld9l6
OVF0ZfbjF+XUBBDQVJ8crWyx3Qi/2vFuLLDBbOOL4Aj1Ss1QbHUknpNGoZWCALVr
myqBr7hbR84xF2CqeknLmSijqNRXPIBux/OCKicK8kROwaxjIMANbvyIifci0o/X
JLAdm/mGBlbhPtLwOXa7SnBbEU/RM0+3kY/FR1fR7t1FOaR79evLDYXLMU7QkA2b
FYQLcPdSZzp7d/KdekDqH02Xe8ZP+cYVinreab2BZr5GOc5+KXifK3P/YNvz3iML
6gn1sGwCoWchBX5cQr9rPeW9tgeYghk=
-----END CERTIFICATE-----
Generated at Sun Jul 5 11:20:35 2026 by rpki-client