
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/127a8f9d-78b3-435d-91ec-6d948f908a3f/b2e302bf-2b6c-3cd0-aa65-b872dbd874f3.roa
File: b2e302bf-2b6c-3cd0-aa65-b872dbd874f3.roa (raw, json)
Hash identifier: gMsnzV6s0VDfl3Ns9qVBfudrkXQOSjFsApppDZuEXrs=
Subject key identifier: 02:FB:FC:B2:F2:A2:3B:96:8A:2E:6F:A7:23:07:AC:10:D4:D8:07:00
Certificate issuer: /CN=127a8f9d-78b3-435d-91ec-6d948f908a3f
Certificate serial: 010D0C9F4328584EFB4764C8FECA5F8E9B35EB00
Authority key identifier: BE:19:D4:32:BF:CF:63:4C:0C:9B:D1:C2:27:20:39:41:27:E5:6E:C5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/127a8f9d-78b3-435d-91ec-6d948f908a3f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/127a8f9d-78b3-435d-91ec-6d948f908a3f/b2e302bf-2b6c-3cd0-aa65-b872dbd874f3.roa
Signing time: Fri 28 Aug 2026 01:00:12 +0000
ROA not before: Fri 28 Aug 2026 01:00:12 +0000
ROA not after: Thu 26 Nov 2026 02:00:12 +0000
asID: 400004
IP address blocks: 23.140.188.0/24 maxlen: 24
149.112.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/127a8f9d-78b3-435d-91ec-6d948f908a3f/127a8f9d-78b3-435d-91ec-6d948f908a3f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/127a8f9d-78b3-435d-91ec-6d948f908a3f/127a8f9d-78b3-435d-91ec-6d948f908a3f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/127a8f9d-78b3-435d-91ec-6d948f908a3f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 29 Sep 2026 03:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:fb:47:64:c8:fe:ca:5f:8e:9b:35:eb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=127a8f9d-78b3-435d-91ec-6d948f908a3f
Validity
Not Before: Aug 28 01:00:12 2026 GMT
Not After : Nov 26 02:00:12 2026 GMT
Subject: CN=bad22bea-24c8-423c-9970-22049b838571
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:24:6d:97:9c:d8:79:b3:58:00:46:4c:7b:dc:
75:3e:3a:b7:01:91:e2:5d:9c:fa:cd:ad:59:5c:92:
82:54:f4:e5:3e:0e:d3:0e:17:0e:bb:1d:f2:8c:f1:
98:a9:dd:6a:a0:1e:43:24:53:3b:84:89:9f:4c:67:
30:99:75:d7:ac:45:01:08:8e:9f:39:21:37:96:51:
2e:ab:ac:13:9d:fb:c8:47:c5:a3:21:bb:15:02:ea:
6b:83:25:e9:0b:98:22:05:d7:2d:54:6e:40:eb:c4:
c0:8f:ba:4a:6a:f6:ae:40:e6:6a:d3:03:59:58:cd:
d4:5f:db:30:cd:af:96:09:c7:9d:e5:14:71:b2:4a:
54:a9:01:17:1f:14:bf:10:86:ef:be:43:77:c0:e9:
6d:92:a4:4f:8a:9d:78:3d:72:3e:a9:f3:3b:f3:57:
d8:98:be:4d:7b:d8:ce:9d:ea:4b:04:f5:8e:94:00:
fc:90:c7:a7:96:25:28:c0:d7:95:d9:49:8f:ba:68:
f5:02:86:30:1b:da:fc:92:23:a5:5f:1f:85:be:9e:
66:f9:22:e8:7b:ff:29:56:0e:45:87:fd:eb:6d:38:
70:a3:30:31:9d:e0:43:da:f2:b8:f7:46:db:7a:4b:
ca:50:d6:e2:e1:5e:69:a2:11:10:b7:ff:ff:ef:ed:
6a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:FB:FC:B2:F2:A2:3B:96:8A:2E:6F:A7:23:07:AC:10:D4:D8:07:00
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/127a8f9d-78b3-435d-91ec-6d948f908a3f/b2e302bf-2b6c-3cd0-aa65-b872dbd874f3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/127a8f9d-78b3-435d-91ec-6d948f908a3f/127a8f9d-78b3-435d-91ec-6d948f908a3f.crl
X509v3 Authority Key Identifier:
keyid:BE:19:D4:32:BF:CF:63:4C:0C:9B:D1:C2:27:20:39:41:27:E5:6E:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/127a8f9d-78b3-435d-91ec-6d948f908a3f.cer
sbgp-ipAddrBlock: critical
IPv4:
23.140.188.0/24
149.112.176.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:8b:3c:a2:15:0c:6b:c7:ae:10:46:fd:ef:b7:cb:ac:33:5e:
34:49:ef:f9:c6:68:07:15:d1:bb:4a:5c:6f:b6:94:6d:b5:0a:
1f:2a:4c:32:da:58:00:e8:22:34:17:cc:cf:75:06:1f:a2:8f:
6c:5f:63:64:24:52:b8:24:2a:60:b9:88:0d:b7:f3:25:79:89:
4e:26:46:81:de:37:fb:f8:c2:e2:c4:b0:95:3b:8a:07:2f:da:
bc:ff:c9:aa:67:a7:57:c4:5f:d1:77:d6:4c:89:3b:47:77:19:
86:fb:9a:91:aa:7d:38:6e:6a:8e:d8:6f:df:34:97:ab:b6:a5:
a7:b0:fc:ec:c7:b3:2d:8a:80:b6:71:f0:d9:cd:a7:a2:26:ab:
f7:41:6f:c0:2b:66:db:cc:9a:32:a1:3e:b2:f7:fd:69:3d:b3:
88:3f:23:04:ce:1f:09:9d:2c:37:9a:dc:ca:8d:1e:d4:31:57:
2d:89:bd:60:7b:bc:4e:f2:cc:c0:4c:e1:fb:d6:c2:9e:0a:e1:
bf:23:16:48:59:62:0e:3b:22:51:50:8d:90:a0:c3:e4:42:d1:
5c:94:f9:db:39:9e:74:a7:7b:ce:cd:26:fc:2f:12:13:e6:9c:
19:24:92:60:10:ce:23:9a:ee:d5:be:b0:63:1b:3b:99:85:9d:
d0:5b:50:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 18:40:22 2026 by rpki-client