
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/41706dfa-8951-332c-9f7d-6dcade1679b5.roa
File: 41706dfa-8951-332c-9f7d-6dcade1679b5.roa (raw, json)
Hash identifier: fwylyWmp/i85F8TC66ElF69ue90CA3kDipixz3ozyvc=
Subject key identifier: 22:A3:D5:C7:21:A3:BE:03:3D:6C:28:86:7F:40:08:57:CD:E1:03:E9
Certificate issuer: /CN=7b143713-7923-4e4d-9476-b8e5ce1ca9c9
Certificate serial: 010D0C9F4328584D492A4F23263AD266C3C1AF00
Authority key identifier: 61:D5:32:E9:6D:BB:CA:2E:A4:34:67:90:E5:3E:1C:8C:AF:B2:D9:30
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/41706dfa-8951-332c-9f7d-6dcade1679b5.roa
Signing time: Wed 25 Mar 2026 13:00:41 +0000
ROA not before: Wed 25 Mar 2026 13:00:41 +0000
ROA not after: Tue 23 Jun 2026 13:00:41 +0000
asID: 14555
IP address blocks: 198.23.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:49:2a:4f:23:26:3a:d2:66:c3:c1:af:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b143713-7923-4e4d-9476-b8e5ce1ca9c9
Validity
Not Before: Mar 25 13:00:41 2026 GMT
Not After : Jun 23 13:00:41 2026 GMT
Subject: CN=a273f0f4-a4e4-4644-bcdb-1a6f707863d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:10:2e:fa:6e:71:f0:aa:62:19:85:4f:39:5d:
75:58:c5:24:cf:63:5d:e2:be:a4:90:c3:85:18:08:
1d:0d:08:54:01:a6:49:d0:af:3a:d7:42:e2:ac:36:
90:b6:9c:8e:50:97:05:52:7e:bc:57:cd:97:38:7e:
fd:39:e6:36:35:b3:20:dd:3b:87:10:c4:62:b9:bf:
40:1e:89:2d:c5:ff:10:36:bb:31:eb:9c:b2:31:81:
1b:6c:06:e8:2e:ba:38:ce:82:e3:dc:2c:2b:a0:e9:
8a:ed:ea:4c:b5:82:0c:b0:b9:c1:17:66:e1:8a:fb:
a7:1a:fa:d9:89:eb:d7:c3:7c:50:4c:19:72:42:1a:
d8:6c:a1:c6:70:1b:e5:f1:15:28:ab:b2:e1:2b:82:
9c:ba:dc:4e:fe:38:1f:b9:cd:dc:93:68:f1:0a:05:
97:52:a1:6a:6a:69:c7:0f:0a:a9:4d:ee:07:42:97:
b6:61:5a:79:e5:24:31:77:ac:a6:ae:96:39:54:aa:
f5:83:3f:cd:4b:18:3e:86:6c:ba:c8:b7:32:74:de:
35:06:0c:34:2f:90:75:0d:85:b9:48:af:ad:74:04:
75:28:3a:04:16:4c:52:89:de:8c:04:5f:fd:47:88:
e7:04:14:1f:47:95:16:07:cd:9b:9c:f8:32:81:c6:
d5:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:A3:D5:C7:21:A3:BE:03:3D:6C:28:86:7F:40:08:57:CD:E1:03:E9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/41706dfa-8951-332c-9f7d-6dcade1679b5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.crl
X509v3 Authority Key Identifier:
keyid:61:D5:32:E9:6D:BB:CA:2E:A4:34:67:90:E5:3E:1C:8C:AF:B2:D9:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer
sbgp-ipAddrBlock: critical
IPv4:
198.23.59.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:49:fc:05:8a:cf:91:7d:0b:84:98:63:78:64:70:d9:35:42:
24:be:4b:9e:20:c9:f5:82:1c:67:f6:f1:4b:7a:a9:bb:0d:bb:
14:8d:11:cd:7b:07:d7:c7:57:98:bc:33:c3:3f:62:0c:e5:24:
32:32:15:4d:9f:39:8f:35:fd:6d:44:c6:29:72:75:66:9e:b1:
45:7c:cf:e1:e4:9b:30:44:e8:9f:51:83:39:c6:d7:54:b7:20:
a0:73:8e:19:37:39:91:fa:e8:9b:dd:48:14:d4:0a:2d:03:f4:
10:a7:9e:6d:1b:21:d7:16:8c:51:ef:74:ac:b8:e3:f4:3a:e1:
39:25:b0:71:c3:ae:30:9d:56:35:ac:f6:a2:6d:da:03:a8:67:
67:62:ea:29:d0:77:c2:11:1b:1c:4f:7b:7e:78:96:74:de:5a:
44:ad:e1:5f:75:a9:13:f0:e4:1d:d2:7c:91:0f:29:85:3b:b7:
ae:2e:92:e4:16:72:fb:8c:ed:b5:5f:b0:8e:c3:ad:67:72:5e:
98:4b:a7:f9:ee:a5:de:39:de:8d:bf:bc:a4:9a:b8:9d:b6:f4:
88:01:81:aa:0a:9a:46:b6:06:34:4c:a7:31:f9:5e:ae:27:a9:
b7:c3:1f:6e:7e:c9:bb:32:6c:c6:65:a7:07:2d:d5:c2:84:1f:
dc:b4:a5:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:57:52 2026 by rpki-client