
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2c2ae48f-475b-42b3-9a56-ce8852515055/4a19c062-d227-31d7-b0dc-2f525567d3c1.roa
File: 4a19c062-d227-31d7-b0dc-2f525567d3c1.roa (raw, json)
Hash identifier: GPOz/4Q1FGUxUjKCSKZWCounD2XL9Pd4vPDXZZrYi1s=
Subject key identifier: 39:93:3B:6E:43:BB:E4:29:72:45:57:73:DE:EA:DA:60:1C:8E:35:AA
Certificate issuer: /CN=2c2ae48f-475b-42b3-9a56-ce8852515055
Certificate serial: 010D0C9F4328584EF87CBC9EDC55E90D6B641100
Authority key identifier: 84:1B:35:49:23:84:0F:18:28:95:15:1C:83:D2:9C:DA:30:ED:E4:4C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2c2ae48f-475b-42b3-9a56-ce8852515055.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2c2ae48f-475b-42b3-9a56-ce8852515055/4a19c062-d227-31d7-b0dc-2f525567d3c1.roa
Signing time: Thu 27 Aug 2026 01:00:12 +0000
ROA not before: Thu 27 Aug 2026 01:00:12 +0000
ROA not after: Wed 25 Nov 2026 02:00:12 +0000
asID: 400142
IP address blocks: 23.191.176.0/24 maxlen: 24
2602:fc99::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2c2ae48f-475b-42b3-9a56-ce8852515055/2c2ae48f-475b-42b3-9a56-ce8852515055.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2c2ae48f-475b-42b3-9a56-ce8852515055/2c2ae48f-475b-42b3-9a56-ce8852515055.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2c2ae48f-475b-42b3-9a56-ce8852515055.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 12 Oct 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:f8:7c:bc:9e:dc:55:e9:0d:6b:64:11:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c2ae48f-475b-42b3-9a56-ce8852515055
Validity
Not Before: Aug 27 01:00:12 2026 GMT
Not After : Nov 25 02:00:12 2026 GMT
Subject: CN=262073f3-6e80-4d94-a62a-b5cf12dca35a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:66:06:b4:91:66:b7:d2:2c:2e:6a:ab:b5:af:
04:63:5a:94:ee:22:2b:46:af:54:c9:2f:e0:19:95:
fd:9e:ec:5d:02:0b:fd:9d:44:32:7e:fd:8b:ff:b3:
79:83:02:fb:fb:79:97:24:0f:4a:b7:b3:f6:c0:dd:
b6:24:89:b3:c3:62:48:1f:2f:88:5d:bd:94:e9:9b:
0a:9f:65:ab:31:ae:bd:ee:e4:ca:ea:5c:22:41:22:
71:7d:ff:ab:b8:7c:c1:1c:f2:ac:d4:e7:44:8b:d2:
95:6e:34:a1:08:5a:96:ce:a5:bc:18:28:bd:67:13:
08:70:ee:d1:9b:79:14:ea:28:61:f4:9e:91:75:df:
bb:40:bc:07:4b:61:5d:c0:be:1d:82:8e:57:ff:4e:
22:42:0e:3e:34:c7:4a:9c:a5:c6:a8:e9:cf:21:fe:
29:45:d2:5e:85:4e:87:aa:e9:bb:79:1a:e1:28:e9:
1c:e9:b8:aa:49:f5:25:f8:cd:8a:66:0b:0f:9d:ac:
81:8a:b6:8b:8b:2d:e8:47:06:d0:87:c7:24:54:66:
a7:c1:b9:53:97:8e:31:c3:9d:e3:99:d5:16:f9:41:
66:e3:20:d5:04:ed:04:da:16:32:8b:ea:32:b2:b0:
17:3b:69:e9:cb:e6:17:69:60:32:68:e4:62:33:df:
23:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:93:3B:6E:43:BB:E4:29:72:45:57:73:DE:EA:DA:60:1C:8E:35:AA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2c2ae48f-475b-42b3-9a56-ce8852515055/4a19c062-d227-31d7-b0dc-2f525567d3c1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2c2ae48f-475b-42b3-9a56-ce8852515055/2c2ae48f-475b-42b3-9a56-ce8852515055.crl
X509v3 Authority Key Identifier:
keyid:84:1B:35:49:23:84:0F:18:28:95:15:1C:83:D2:9C:DA:30:ED:E4:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2c2ae48f-475b-42b3-9a56-ce8852515055.cer
sbgp-ipAddrBlock: critical
IPv4:
23.191.176.0/24
IPv6:
2602:fc99::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:3f:a6:52:2d:c2:eb:7a:1c:74:39:88:6d:19:31:06:25:ef:
76:f2:96:38:d1:15:2a:35:d5:ec:8b:fb:98:b4:4d:0a:f2:22:
7b:ea:45:aa:14:33:05:3a:70:87:0a:bc:8b:8c:eb:9b:db:67:
1a:97:8c:c1:9a:96:36:63:71:f4:f3:dc:24:29:e1:e4:e5:5e:
5f:ae:f1:13:14:98:ad:1b:98:15:6b:a0:4c:6d:61:d8:2b:5f:
eb:23:7d:67:2d:a7:58:78:d2:45:0c:4d:e0:74:29:a7:22:bd:
fd:b0:4d:68:1d:23:2a:5b:52:48:88:58:8c:31:56:24:4b:ea:
e9:b6:d6:85:6f:f1:29:63:db:9d:13:96:8d:4a:cf:43:ec:db:
20:35:a1:47:0a:91:73:c6:62:e7:9a:b4:c1:2a:46:ab:f6:55:
59:f6:91:d4:73:23:88:fc:f1:40:91:fc:71:cd:60:fc:2b:d9:
f2:4d:ac:a4:91:81:02:9f:e6:cd:26:a8:1a:04:4c:4e:70:32:
77:17:f6:65:8c:6e:74:30:7a:15:6c:e6:95:a1:1f:95:6b:9a:
20:68:02:26:48:d7:3c:61:99:50:39:68:cf:0f:84:a6:c7:0c:
34:e5:1e:24:53:67:d9:9c:ac:fd:ca:1b:d8:0c:13:9f:5c:ac:
50:30:42:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 15:04:16 2026 by rpki-client