
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e7f2d196-f493-41ef-a906-7b0786815678/42f8e1d1-c94e-3b17-892c-0a735d44591a.roa
File: 42f8e1d1-c94e-3b17-892c-0a735d44591a.roa (raw, json)
Hash identifier: 3Xz/uy4vXSkxYzT1dHdxsjTNxDOn4Dsily4furbEtvk=
Subject key identifier: 01:D0:34:D0:C9:1C:AA:DD:43:4A:41:EA:D0:83:61:04:D0:F8:ED:29
Certificate issuer: /CN=e7f2d196-f493-41ef-a906-7b0786815678
Certificate serial: 010D0C9F4328584D2BDA1E5E0B456A62B04CAD00
Authority key identifier: 77:73:63:4D:ED:24:E8:B5:C5:4C:EC:19:3E:76:F1:D6:FA:73:FB:D0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e7f2d196-f493-41ef-a906-7b0786815678.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e7f2d196-f493-41ef-a906-7b0786815678/42f8e1d1-c94e-3b17-892c-0a735d44591a.roa
Signing time: Sun 15 Mar 2026 01:00:32 +0000
ROA not before: Sun 15 Mar 2026 01:00:32 +0000
ROA not after: Sat 13 Jun 2026 01:00:32 +0000
asID: 400545
IP address blocks: 23.136.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e7f2d196-f493-41ef-a906-7b0786815678/e7f2d196-f493-41ef-a906-7b0786815678.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e7f2d196-f493-41ef-a906-7b0786815678/e7f2d196-f493-41ef-a906-7b0786815678.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e7f2d196-f493-41ef-a906-7b0786815678.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:2b:da:1e:5e:0b:45:6a:62:b0:4c:ad:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7f2d196-f493-41ef-a906-7b0786815678
Validity
Not Before: Mar 15 01:00:32 2026 GMT
Not After : Jun 13 01:00:32 2026 GMT
Subject: CN=9ea9171a-189f-417e-99c8-9d353898c0c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f8:b4:8e:95:4a:82:e0:9a:fd:13:93:4d:22:
7d:a5:e8:99:34:3a:d1:b4:1d:ef:0f:93:80:ac:e4:
31:9f:9b:62:c3:4d:52:b8:eb:be:97:e4:9d:f6:ed:
b7:e5:d8:7e:b7:e6:fb:70:b0:9a:81:a2:99:b2:33:
f4:b1:75:4c:ca:a4:29:c3:18:00:83:f3:f4:08:68:
16:0e:de:ed:06:82:f1:72:0f:a5:58:bc:92:7a:de:
f2:ab:6d:c3:0c:1c:7f:0d:e8:43:80:c4:80:ef:1c:
2d:bc:3d:4c:ba:2b:d6:41:0a:c0:4f:39:94:15:ea:
0b:21:cd:c2:b8:af:d6:2a:f8:8b:13:35:ff:1e:56:
88:e4:96:59:d4:dc:19:a8:2d:0c:11:3c:5a:d9:ff:
12:07:68:81:d3:72:69:62:ff:d0:ea:eb:8f:00:56:
25:00:a7:1f:8b:cf:55:da:d8:23:17:b3:da:a6:f0:
16:08:15:db:b9:da:8c:e0:5c:57:b5:7e:03:9f:f5:
8a:7a:88:60:bc:1d:d1:12:be:ed:ae:3f:76:08:51:
60:3a:0e:1b:f9:06:8b:a0:85:6e:43:c3:84:96:26:
05:b2:e9:0b:8f:7a:26:17:96:fc:a8:ca:29:e8:84:
ca:fa:6f:a4:9c:f5:17:9d:bb:05:08:b5:ff:86:01:
c9:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:D0:34:D0:C9:1C:AA:DD:43:4A:41:EA:D0:83:61:04:D0:F8:ED:29
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e7f2d196-f493-41ef-a906-7b0786815678/42f8e1d1-c94e-3b17-892c-0a735d44591a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e7f2d196-f493-41ef-a906-7b0786815678/e7f2d196-f493-41ef-a906-7b0786815678.crl
X509v3 Authority Key Identifier:
keyid:77:73:63:4D:ED:24:E8:B5:C5:4C:EC:19:3E:76:F1:D6:FA:73:FB:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e7f2d196-f493-41ef-a906-7b0786815678.cer
sbgp-ipAddrBlock: critical
IPv4:
23.136.104.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:9a:70:a8:0c:0c:01:7a:49:da:56:ab:1d:e9:f5:9a:39:f8:
69:cb:90:65:26:2b:18:95:9e:0c:97:17:e2:f8:09:93:18:2e:
d0:9f:71:63:cb:4d:a3:4b:84:9b:7e:1b:26:68:59:7e:6b:a1:
9f:15:fa:2d:68:13:ac:5f:9e:49:3c:2c:23:c5:76:2d:97:ed:
73:bb:7f:87:15:36:28:da:ac:dc:a4:9e:15:b7:3f:23:03:fe:
1c:7b:ca:82:04:6b:ce:63:4b:1c:98:39:cc:21:61:71:9c:91:
9b:12:ce:06:b6:1c:60:28:eb:4e:80:9b:30:7c:23:48:55:cc:
4e:13:d7:41:da:a5:79:1a:f1:3c:64:6e:b2:58:c3:83:a2:c3:
9e:fe:14:e2:aa:99:65:b5:e6:b5:c9:83:b4:63:f9:46:0d:34:
26:6d:03:6c:9d:d4:55:48:54:29:09:60:6f:12:bb:d1:4d:92:
b7:c2:b7:83:da:17:39:29:f0:45:95:54:f8:45:84:8d:6b:b2:
88:a2:1a:62:75:32:bb:bc:ea:30:e8:aa:8f:17:b0:c0:37:26:
bb:6f:a9:56:e6:13:7b:48:4a:c3:e2:00:c5:94:40:15:77:8d:
99:2a:c9:f1:c6:8c:d9:89:91:8b:eb:6b:5b:a1:56:34:54:38:
b9:b7:ab:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:44:50 2026 by rpki-client