
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810/ca52a1f7-d7c4-3750-bda5-9dd11d8b2fcb.roa
File: ca52a1f7-d7c4-3750-bda5-9dd11d8b2fcb.roa (raw, json)
Hash identifier: ICKJFqg8ZT786QFNethpWXV8PwUNrJxxDdgFI/WliCU=
Subject key identifier: E4:03:83:13:B5:2C:05:4F:39:36:FF:92:AE:A3:1A:F7:46:14:46:E8
Certificate issuer: /CN=8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810
Certificate serial: 010D0C9F4328584D1F4A460D5A1FF7D917186680
Authority key identifier: FF:C4:B2:E8:4F:33:E8:04:B2:61:B3:8D:82:01:03:6B:BE:73:CE:52
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810/ca52a1f7-d7c4-3750-bda5-9dd11d8b2fcb.roa
Signing time: Tue 10 Mar 2026 13:00:41 +0000
ROA not before: Tue 10 Mar 2026 13:00:41 +0000
ROA not after: Mon 08 Jun 2026 13:00:41 +0000
asID: 63213
IP address blocks: 23.83.220.0/23 maxlen: 23
23.83.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810/8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810/8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 23:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:1f:4a:46:0d:5a:1f:f7:d9:17:18:66:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810
Validity
Not Before: Mar 10 13:00:41 2026 GMT
Not After : Jun 8 13:00:41 2026 GMT
Subject: CN=be1613c2-4cc9-4a80-85ab-0097ab2ea9b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d3:3d:38:3a:b7:1e:26:1a:ed:17:1b:7d:e8:
d4:3b:7b:3d:97:59:e5:79:30:46:1c:4b:d4:bf:8b:
f2:c2:c4:12:f9:d0:7f:ab:8e:b6:20:51:ef:e8:87:
9b:93:6d:d1:b6:6a:a6:35:af:96:fe:b5:e3:6b:33:
5d:ac:d5:b3:04:bb:f3:e6:9f:93:63:10:c0:bd:46:
ac:3d:c0:c9:cd:ae:6b:f4:9d:47:8e:9d:7b:03:cd:
6d:7c:9d:23:c2:a1:c9:dc:88:8e:d8:49:22:a0:6f:
87:c5:61:a8:8f:69:22:8a:f7:3b:2e:89:84:a3:4d:
ec:a4:4b:ff:05:1f:d0:b9:0e:80:bc:9b:49:d8:a0:
6b:b5:c2:4c:19:cc:7a:5b:eb:18:36:79:4c:89:c9:
77:6c:6d:aa:ae:1b:db:4a:61:22:a9:8f:72:2a:88:
26:f3:eb:37:b1:68:d2:08:9f:ea:9d:d3:ae:e8:dd:
c6:c5:bb:5a:9c:9a:11:a9:6b:0e:df:8b:25:c9:70:
cc:f9:34:d3:4a:29:cf:5b:a5:52:3e:e5:db:98:4d:
8b:94:4d:1b:4a:ed:13:18:e4:1a:dd:7a:15:29:b9:
61:15:c9:53:00:ab:91:98:9c:5b:80:7c:05:77:09:
05:1d:36:6d:3e:97:8b:c6:c8:c2:24:34:95:ea:bf:
26:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:03:83:13:B5:2C:05:4F:39:36:FF:92:AE:A3:1A:F7:46:14:46:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810/ca52a1f7-d7c4-3750-bda5-9dd11d8b2fcb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810/8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810.crl
X509v3 Authority Key Identifier:
keyid:FF:C4:B2:E8:4F:33:E8:04:B2:61:B3:8D:82:01:03:6B:BE:73:CE:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810.cer
sbgp-ipAddrBlock: critical
IPv4:
23.83.220.0-23.83.222.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:71:06:1d:63:4a:e3:5c:d8:89:f0:3c:cd:29:b2:9d:8e:79:
94:1d:6e:2a:02:63:7d:fc:90:5e:ef:10:a3:64:c2:75:12:84:
0f:7e:fc:43:b2:bb:2d:f7:17:93:b7:5a:52:39:77:ce:ec:bc:
04:0d:39:6b:44:88:bb:2c:69:38:9d:6d:1e:db:5c:fd:01:80:
c0:2c:04:e0:22:a0:77:84:9d:3a:6f:4c:14:b3:a8:cc:81:82:
f9:f9:83:bd:5a:24:3d:c4:ab:e8:90:71:fd:38:97:bb:a2:08:
39:ab:0a:e3:63:2d:e5:c4:0f:ab:2b:62:f3:3d:20:1c:60:b8:
7f:b5:b6:0f:ea:a2:54:3a:df:1c:e5:e1:11:41:e2:0c:f1:85:
48:1f:5d:d4:ec:f0:44:3b:9e:fe:24:1d:da:d6:68:e8:7c:d9:
2b:83:fd:15:03:4b:1d:34:f7:94:0b:94:2d:02:23:7d:8b:94:
48:47:08:a9:ad:98:1d:90:3c:ae:25:e6:39:36:fa:a8:24:ab:
87:76:cb:5a:3a:17:06:09:7e:5d:82:33:1a:48:88:5a:f8:11:
e5:fa:2d:fc:c7:33:82:47:1c:0f:76:ab:ab:be:40:84:73:ef:
2f:30:b3:3e:ca:02:4e:95:c2:e7:b9:a1:b2:c3:bd:c0:2c:2f:
94:8e:c5:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:55:21 2026 by rpki-client