
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/dec813f6-f841-3023-8fdf-50c0bc3546e1.roa
File: dec813f6-f841-3023-8fdf-50c0bc3546e1.roa (raw, json)
Hash identifier: C9IEq5TH+5O23FTWfE0Yp44yp1j5KOFIRI3I+cyxlD8=
Subject key identifier: BC:44:F8:0C:5D:76:6F:A0:0A:71:85:F0:2D:31:8D:F5:0F:89:96:65
Certificate issuer: /CN=7b143713-7923-4e4d-9476-b8e5ce1ca9c9
Certificate serial: 010D0C9F4328584D492A52E788BDD739AE799200
Authority key identifier: 61:D5:32:E9:6D:BB:CA:2E:A4:34:67:90:E5:3E:1C:8C:AF:B2:D9:30
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/dec813f6-f841-3023-8fdf-50c0bc3546e1.roa
Signing time: Wed 25 Mar 2026 13:00:41 +0000
ROA not before: Wed 25 Mar 2026 13:00:41 +0000
ROA not after: Tue 23 Jun 2026 13:00:41 +0000
asID: 14555
IP address blocks: 198.23.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:49:2a:52:e7:88:bd:d7:39:ae:79:92:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b143713-7923-4e4d-9476-b8e5ce1ca9c9
Validity
Not Before: Mar 25 13:00:41 2026 GMT
Not After : Jun 23 13:00:41 2026 GMT
Subject: CN=0d123ad7-6884-4ba6-af5f-05f23099ce6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:7e:e6:5d:29:13:53:9d:04:20:81:bc:de:7b:
9d:83:5e:29:c9:ec:27:89:85:73:84:ef:33:3b:f9:
2e:8b:59:ee:2a:97:39:08:94:64:4d:31:4d:1a:d8:
bb:2a:23:16:58:87:93:a0:ba:3b:b2:db:9a:19:9a:
bb:81:71:e8:8f:16:9f:1f:6c:e6:8b:6f:4a:c1:53:
1f:c1:81:3f:27:94:38:a5:48:42:5f:4a:88:6f:b6:
67:27:eb:67:01:6b:69:fd:fa:c8:c5:6d:23:47:8c:
be:94:24:74:ee:52:f3:45:87:0d:50:1e:30:42:16:
68:bd:1e:5b:02:f9:d9:62:65:de:ce:ad:d6:c0:63:
51:81:4c:7d:db:99:97:7f:40:7e:e2:23:b1:c8:39:
5e:df:4c:d1:71:8f:24:3e:ed:03:79:5c:6f:b5:b5:
4c:a6:b3:bc:67:3c:f0:34:49:a8:93:b6:18:0e:29:
aa:06:7b:17:f7:ba:c0:0c:37:46:da:83:5a:d5:be:
41:be:80:68:f9:5f:ca:b0:52:3d:0c:19:bc:8f:4f:
69:69:e3:91:08:78:0a:aa:5b:78:2e:0a:e4:6d:c3:
36:69:7e:cd:1c:76:93:9f:bd:09:0a:6c:dd:16:2f:
0a:71:e4:98:a3:5c:9f:90:13:e3:c1:7e:34:38:a8:
c1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:44:F8:0C:5D:76:6F:A0:0A:71:85:F0:2D:31:8D:F5:0F:89:96:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/dec813f6-f841-3023-8fdf-50c0bc3546e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.crl
X509v3 Authority Key Identifier:
keyid:61:D5:32:E9:6D:BB:CA:2E:A4:34:67:90:E5:3E:1C:8C:AF:B2:D9:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer
sbgp-ipAddrBlock: critical
IPv4:
198.23.52.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:b3:76:61:a5:8d:cc:fe:3f:49:c6:2c:c2:55:20:5c:ce:e1:
81:03:14:4f:23:3c:ab:56:47:1d:ff:61:8b:fb:2a:0f:31:4f:
38:04:7d:e7:78:7a:fe:9c:ad:e5:1a:cb:e1:18:09:b0:82:69:
9b:7e:1b:6c:74:b7:d7:62:65:ac:0f:eb:43:b2:7a:10:74:10:
5d:b4:95:32:fe:47:a4:22:5d:70:ea:a4:e2:19:ef:2f:31:a4:
55:a9:fc:2f:c3:6c:32:55:a1:94:61:53:a0:29:af:c5:cc:2a:
32:99:a6:38:c3:32:ee:83:f1:38:6f:de:74:7c:c3:84:c6:93:
15:ac:c4:08:db:ca:d1:17:4b:e0:9b:17:14:ba:08:e0:96:12:
7f:b3:e5:cc:76:fc:b9:db:a2:81:71:d3:69:71:6d:78:3a:05:
a3:87:12:71:33:7b:2b:6d:e4:7d:2e:81:19:e8:7c:59:89:bf:
ec:4e:3d:e8:84:6f:22:0b:88:cd:80:65:f2:5b:10:b9:2c:cc:
ca:80:6f:17:1a:b8:3b:c2:3f:4e:ae:9e:f4:16:89:57:44:b1:
0e:fd:25:2b:80:19:30:77:62:0b:44:14:ab:c3:c5:bd:e3:34:
10:69:b9:1b:bd:f5:d4:cd:ac:68:a3:15:f4:bd:80:2c:14:90:
1a:ed:e0:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:34:36 2026 by rpki-client