
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/9dbe0597-903d-34a9-8315-3dd91ef42978.roa
File: 9dbe0597-903d-34a9-8315-3dd91ef42978.roa (raw, json)
Hash identifier: QtQOJp6+xtqFYY2VetgODfOuDMH1cWwlI1JNuEIvNMo=
Subject key identifier: 9A:62:FE:C3:F7:AC:F5:7A:71:EC:82:C3:36:A9:BE:E0:0A:F9:A5:43
Certificate issuer: /CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3
Certificate serial: 010D0C9F4328584D386A45A5AD03EC6EC9272CD0
Authority key identifier: BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/9dbe0597-903d-34a9-8315-3dd91ef42978.roa
Signing time: Thu 19 Mar 2026 13:00:41 +0000
ROA not before: Thu 19 Mar 2026 13:00:41 +0000
ROA not after: Wed 17 Jun 2026 13:00:41 +0000
asID: 22765
IP address blocks: 68.170.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:38:6a:45:a5:ad:03:ec:6e:c9:27:2c:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56a23346-5a0e-4976-9b33-3b4d1d90cfa3
Validity
Not Before: Mar 19 13:00:41 2026 GMT
Not After : Jun 17 13:00:41 2026 GMT
Subject: CN=77a0320a-6bc6-4b7c-ac8e-abafe11d23de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3b:3a:a4:4d:c1:67:18:7f:3e:5c:65:bd:0e:
10:29:75:61:17:0f:83:74:f0:43:f6:d3:e0:a5:9b:
54:9d:75:3f:f8:a4:53:aa:49:7f:42:cc:02:41:86:
15:32:ab:8f:c2:e1:1e:87:07:fd:e6:ec:20:15:45:
2a:03:94:54:ad:64:73:c9:2e:c5:6d:81:f0:9b:be:
34:ab:35:5e:60:27:ac:25:96:6f:9a:c3:3a:34:80:
48:f1:e4:d1:c6:4e:71:9f:7e:20:f8:b2:9e:dc:d7:
b8:d3:58:15:d2:15:e4:66:b3:35:69:ea:f0:2d:f0:
34:2d:e6:6a:7a:ab:04:65:33:e7:56:f8:65:0e:e6:
fe:1d:a0:19:64:00:e4:33:1d:da:b7:a2:76:d4:0b:
d7:3b:e6:5a:9f:83:d4:58:1c:b8:0d:9f:e7:a9:2d:
ad:56:19:94:c7:54:f7:e0:56:78:4c:7e:a4:6f:56:
87:49:b7:a9:74:74:c6:3d:72:05:d7:f7:e9:fb:b8:
7e:35:43:7c:12:8a:0c:ed:41:06:10:4a:62:b7:39:
88:05:cf:60:48:2d:9e:73:f2:b3:9f:b7:b2:97:90:
b0:01:2f:a3:f2:23:2e:17:e7:5c:e9:37:9f:31:75:
1c:73:9c:d8:e9:f4:90:58:97:53:09:8b:1a:17:e4:
a3:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:62:FE:C3:F7:AC:F5:7A:71:EC:82:C3:36:A9:BE:E0:0A:F9:A5:43
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/9dbe0597-903d-34a9-8315-3dd91ef42978.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.crl
X509v3 Authority Key Identifier:
keyid:BF:20:32:E5:7B:D7:81:C7:C0:B0:29:98:B3:33:55:D1:62:33:E8:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/56a23346-5a0e-4976-9b33-3b4d1d90cfa3.cer
sbgp-ipAddrBlock: critical
IPv4:
68.170.201.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:18:0c:a1:10:94:62:c7:75:2e:94:39:72:a2:1e:32:20:fe:
9f:08:57:d4:c4:f0:5d:40:5a:39:a7:be:7e:94:1d:13:e4:0b:
c1:53:96:d0:c1:6a:5d:db:4a:1d:3a:6f:11:48:d4:aa:1a:0b:
aa:5c:8e:8b:c0:01:ac:0a:4f:c4:1b:01:21:99:ea:76:d4:7d:
3e:5c:2e:8e:89:50:83:c2:76:1c:7b:9d:e0:3b:2e:ce:d8:d2:
c3:77:60:0c:74:a3:89:ff:ce:37:9f:77:c9:55:27:8a:71:dd:
8b:bc:0f:dc:f6:6f:9a:a8:13:17:94:eb:fb:8d:3f:38:35:34:
59:53:e7:a0:cc:33:7e:69:ff:3f:bf:e8:fa:d3:c4:2a:dc:c8:
eb:f0:74:f3:d3:03:c4:b4:2c:24:17:7d:51:5d:95:d7:bc:d8:
c7:f2:8e:36:d9:af:72:a1:54:d2:12:29:10:b8:29:98:e7:58:
14:91:e5:88:48:84:d1:55:a6:60:3b:2e:02:f5:2b:0a:ca:bf:
4e:f1:0b:ee:68:da:1b:60:da:4b:59:69:1e:09:80:88:c9:9e:
26:32:b8:bb:75:7c:31:92:1e:40:b8:d6:48:a8:2a:64:27:28:
83:f2:0c:8f:69:0e:36:13:71:07:55:df:cd:b3:c4:1d:54:f8:
53:f6:7f:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:04:02 2026 by rpki-client