
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/68e8d38b-0b87-495a-96cc-346ddf0d5802/dfdbfc18-aa98-3225-abfe-7e62127b7000.roa
File: dfdbfc18-aa98-3225-abfe-7e62127b7000.roa (raw, json)
Hash identifier: IWgE2I4pabBNOnHSMp/sWgZf3CFH0kofDUfhPtj/+H4=
Subject key identifier: CC:44:8F:69:41:B7:22:F5:DE:8E:3D:6A:15:09:33:9B:96:7A:32:E6
Certificate issuer: /CN=68e8d38b-0b87-495a-96cc-346ddf0d5802
Certificate serial: 010D0C9F4328584CFC82298E2786EF9CE6998100
Authority key identifier: BD:81:2C:A3:4E:92:55:96:CD:13:B5:D9:5C:AE:92:E0:4D:19:67:04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/68e8d38b-0b87-495a-96cc-346ddf0d5802.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/68e8d38b-0b87-495a-96cc-346ddf0d5802/dfdbfc18-aa98-3225-abfe-7e62127b7000.roa
Signing time: Thu 26 Feb 2026 02:00:32 +0000
ROA not before: Thu 26 Feb 2026 02:00:32 +0000
ROA not after: Wed 27 May 2026 01:00:32 +0000
asID: 401990
IP address blocks: 23.145.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/68e8d38b-0b87-495a-96cc-346ddf0d5802/68e8d38b-0b87-495a-96cc-346ddf0d5802.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/68e8d38b-0b87-495a-96cc-346ddf0d5802/68e8d38b-0b87-495a-96cc-346ddf0d5802.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/68e8d38b-0b87-495a-96cc-346ddf0d5802.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Feb 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:fc:82:29:8e:27:86:ef:9c:e6:99:81:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68e8d38b-0b87-495a-96cc-346ddf0d5802
Validity
Not Before: Feb 26 02:00:32 2026 GMT
Not After : May 27 01:00:32 2026 GMT
Subject: CN=bb4a26cb-93b3-4c3e-abc3-8287e06b1940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ff:0d:a5:62:1c:5d:5f:63:9b:c2:3a:fa:90:
ac:80:31:c5:a7:0a:f1:a7:18:41:f6:52:6a:1d:85:
47:0e:73:5e:63:e8:b5:eb:36:e8:7e:23:ce:43:a2:
ae:ac:61:6d:10:71:72:77:95:d1:e5:4f:22:87:f6:
95:2f:1f:83:0d:8a:e1:03:07:3a:e2:d7:c9:6e:49:
f2:cc:1d:23:09:97:82:04:11:31:50:8c:6e:22:b8:
72:44:cb:71:0e:d0:35:ee:68:2f:61:63:62:64:40:
9b:ca:d6:4e:ae:d5:cf:3b:e3:85:b5:91:05:1a:c1:
cb:2f:ea:1c:54:9e:7d:ff:3e:80:0c:50:d2:ad:2c:
85:c7:7e:b2:0e:fe:5d:4a:61:03:f1:f0:13:63:ee:
be:31:c9:01:43:d6:0c:cb:4a:97:3f:fe:17:32:aa:
6a:e0:8e:80:09:ba:89:85:5f:27:45:fb:f7:59:42:
5e:51:08:cc:8d:f4:ff:8b:0f:42:aa:17:06:9d:a6:
04:2f:43:ec:ee:86:71:74:75:f2:c2:0a:9e:37:b4:
d2:ad:84:6c:cf:e5:8e:89:00:2f:69:f0:fe:02:3a:
13:b5:5e:28:51:ef:87:c3:73:23:b9:e2:6c:5f:8c:
ae:1e:1e:58:bc:20:8a:c0:c5:cb:70:5c:b2:27:e7:
0c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:44:8F:69:41:B7:22:F5:DE:8E:3D:6A:15:09:33:9B:96:7A:32:E6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/68e8d38b-0b87-495a-96cc-346ddf0d5802/dfdbfc18-aa98-3225-abfe-7e62127b7000.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/68e8d38b-0b87-495a-96cc-346ddf0d5802/68e8d38b-0b87-495a-96cc-346ddf0d5802.crl
X509v3 Authority Key Identifier:
keyid:BD:81:2C:A3:4E:92:55:96:CD:13:B5:D9:5C:AE:92:E0:4D:19:67:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/68e8d38b-0b87-495a-96cc-346ddf0d5802.cer
sbgp-ipAddrBlock: critical
IPv4:
23.145.196.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:f9:bd:bc:00:52:f1:59:c0:41:24:a4:48:3b:d0:ab:f0:b6:
fc:98:a3:29:64:1c:ec:05:4f:71:94:2d:19:41:80:5b:6b:8a:
3b:55:9d:ec:19:c9:11:9e:ef:32:6c:1d:a2:9d:10:8f:5f:f0:
f9:15:fa:73:bd:39:bd:79:80:cf:14:15:c4:5b:32:69:63:20:
32:c2:5b:92:1b:58:5d:b6:db:f4:ff:ca:80:dd:be:7f:e3:24:
66:bf:a0:d4:bf:13:c6:ed:db:8b:7d:14:e2:37:77:b2:5d:60:
9c:af:6e:b8:41:cf:1d:90:87:2c:dd:bb:ec:5c:32:bd:d3:c4:
18:c4:e7:66:02:ce:72:26:ee:35:41:47:ce:72:a0:5c:89:a8:
98:62:7d:f3:06:26:4a:97:56:b6:1a:2b:54:3e:20:87:83:40:
b1:9c:8c:45:b0:dc:0d:c4:28:5a:d7:f2:ac:3b:f0:b5:46:fc:
ef:20:bf:34:83:1e:33:6b:f8:25:5d:40:9f:c3:b8:bd:d2:46:
1f:ef:87:41:62:d6:cb:81:2b:2f:9d:9b:5e:71:d1:f2:8f:4f:
88:23:a7:43:17:47:da:72:56:86:7b:92:f7:ea:71:78:bf:df:
b1:9d:0d:f1:73:67:c9:de:4f:5e:dd:04:03:ad:fd:00:71:84:
0d:0b:90:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 13:31:03 2026 by rpki-client