
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4164770e-1f48-4239-921d-775b5152fa2e/603aac71-6f4f-3ebf-bc6d-6aa249c2f40d.roa
File: 603aac71-6f4f-3ebf-bc6d-6aa249c2f40d.roa (raw, json)
Hash identifier: LDQyVLmjFiALtXQdMnRPDXTQZMtoZsoqB1WRJlKxawM=
Subject key identifier: 05:AC:00:8B:1B:A8:AA:BE:90:44:B5:2E:C1:5F:A6:E8:F3:64:52:66
Certificate issuer: /CN=4164770e-1f48-4239-921d-775b5152fa2e
Certificate serial: 010D0C9F4328584D39CF90D51A5D23C3198E1520
Authority key identifier: 83:CB:8B:EB:85:4D:F2:17:9E:37:1A:F6:F7:DF:52:05:04:76:B5:6A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4164770e-1f48-4239-921d-775b5152fa2e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4164770e-1f48-4239-921d-775b5152fa2e/603aac71-6f4f-3ebf-bc6d-6aa249c2f40d.roa
Signing time: Fri 20 Mar 2026 01:00:32 +0000
ROA not before: Fri 20 Mar 2026 01:00:32 +0000
ROA not after: Thu 18 Jun 2026 01:00:32 +0000
asID: 20055
IP address blocks: 23.131.120.0/24 maxlen: 24
2606:acc0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4164770e-1f48-4239-921d-775b5152fa2e/4164770e-1f48-4239-921d-775b5152fa2e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4164770e-1f48-4239-921d-775b5152fa2e/4164770e-1f48-4239-921d-775b5152fa2e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4164770e-1f48-4239-921d-775b5152fa2e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:39:cf:90:d5:1a:5d:23:c3:19:8e:15:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4164770e-1f48-4239-921d-775b5152fa2e
Validity
Not Before: Mar 20 01:00:32 2026 GMT
Not After : Jun 18 01:00:32 2026 GMT
Subject: CN=50e2b020-aae0-44cb-abb3-c4bc73203218
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:14:8b:3c:50:70:30:87:d6:bd:35:47:f1:be:
46:b0:27:b7:b9:e3:29:47:a5:92:0c:bc:ea:05:f5:
64:2c:58:27:39:b7:df:b8:2f:c6:65:a2:bc:6d:d7:
eb:17:24:3e:27:1f:ec:10:43:92:f6:ec:3c:1e:ea:
df:21:82:7f:18:e4:2f:e6:a0:d6:90:e9:60:05:9a:
23:84:0a:61:4f:94:74:29:78:30:0b:e2:2d:18:16:
80:a6:15:ec:09:19:d2:7f:1e:00:2d:90:57:57:88:
e5:86:e0:1d:a2:af:0e:a6:e9:42:70:24:3e:15:9e:
3f:a8:52:f4:bc:a6:13:e6:9f:a7:c8:5c:27:20:b0:
f2:61:10:20:e6:35:f1:cc:1d:73:bf:6b:ed:53:33:
40:fb:d4:5c:81:e2:17:d8:54:ee:07:f0:0c:db:0a:
91:98:a6:e4:82:d4:43:bb:00:10:74:6e:1a:ee:4d:
13:9e:4a:c0:9c:dd:a4:9c:36:b7:db:60:b0:08:c1:
fa:12:ed:5a:a0:e8:d7:6c:ab:61:7f:dd:e9:18:3d:
19:11:58:93:7c:d3:20:72:28:b3:00:65:56:d4:91:
83:85:1c:b8:05:3d:fb:b1:1b:c5:45:d7:41:0c:e6:
56:8b:e2:f2:c4:5c:66:23:a6:63:2d:33:9f:f5:52:
c0:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:AC:00:8B:1B:A8:AA:BE:90:44:B5:2E:C1:5F:A6:E8:F3:64:52:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4164770e-1f48-4239-921d-775b5152fa2e/603aac71-6f4f-3ebf-bc6d-6aa249c2f40d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4164770e-1f48-4239-921d-775b5152fa2e/4164770e-1f48-4239-921d-775b5152fa2e.crl
X509v3 Authority Key Identifier:
keyid:83:CB:8B:EB:85:4D:F2:17:9E:37:1A:F6:F7:DF:52:05:04:76:B5:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4164770e-1f48-4239-921d-775b5152fa2e.cer
sbgp-ipAddrBlock: critical
IPv4:
23.131.120.0/24
IPv6:
2606:acc0::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:c3:6f:68:07:d6:80:49:8f:c1:18:17:1b:8a:f6:f9:7c:b5:
27:a3:36:5f:92:2f:c6:b6:4d:2c:3b:eb:f6:10:e6:f9:b5:a5:
29:23:8a:ec:1f:1f:c7:e8:f9:75:73:eb:8b:5a:c8:43:8e:8a:
14:f8:d7:80:a9:04:92:40:ae:d3:41:1a:3c:2a:e8:60:6a:fc:
4c:de:ea:85:c4:b8:14:95:5f:fb:ef:77:51:93:f1:5e:bf:77:
2f:d7:cf:b3:01:8d:d1:cb:1f:c6:d1:0a:d8:59:0f:08:de:dc:
de:73:44:ff:c9:7c:4b:a7:1e:d4:d1:04:5e:c2:39:d6:83:d5:
a0:47:08:8c:5e:86:60:5f:1e:b8:3c:e4:06:51:ef:d0:15:14:
67:bb:c1:95:a2:54:62:cc:07:6b:87:03:ac:d8:82:96:17:3c:
f9:b6:63:fb:bf:c4:2e:73:cf:91:e0:78:9d:8f:75:dd:00:33:
3a:27:af:4c:68:6e:c2:16:ae:9a:08:b9:f8:8c:f9:d5:02:06:
61:de:58:10:39:64:e1:de:4d:a0:86:44:fe:46:a4:9c:d5:98:
28:1d:90:44:60:c5:87:4e:bc:20:78:01:41:f1:04:ed:59:df:
10:a4:59:af:b0:2a:b9:1f:1b:de:17:da:35:42:be:bc:f3:4e:
b2:dc:78:99
-----BEGIN CERTIFICATE-----
MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWE05z5DVGl0jwxmOFSAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDE2NDc3MGUtMWY0OC00MjM5LTkyMWQtNzc1YjUxNTJm
YTJlMB4XDTI2MDMyMDAxMDAzMloXDTI2MDYxODAxMDAzMlowLzEtMCsGA1UEAxMk
NTBlMmIwMjAtYWFlMC00NGNiLWFiYjMtYzRiYzczMjAzMjE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRSLPFBwMIfWvTVH8b5GsCe3ueMpR6WSDLzq
BfVkLFgnObffuC/GZaK8bdfrFyQ+Jx/sEEOS9uw8HurfIYJ/GOQv5qDWkOlgBZoj
hAphT5R0KXgwC+ItGBaAphXsCRnSfx4ALZBXV4jlhuAdoq8OpulCcCQ+FZ4/qFL0
vKYT5p+nyFwnILDyYRAg5jXxzB1zv2vtUzNA+9RcgeIX2FTuB/AM2wqRmKbkgtRD
uwAQdG4a7k0TnkrAnN2knDa322CwCMH6Eu1aoOjXbKthf93pGD0ZEViTfNMgciiz
AGVW1JGDhRy4BT37sRvFRddBDOZWi+LyxFxmI6ZjLTOf9VLAIwIDAQABo4IDZDCC
A2AwHQYDVR0OBBYEFAWsAIsbqKq+kES1LsFfpujzZFJmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80MTY0
NzcwZS0xZjQ4LTQyMzktOTIxZC03NzViNTE1MmZhMmUvNjAzYWFjNzEtNmY0Zi0z
ZWJmLWJjNmQtNmFhMjQ5YzJmNDBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNDE2NDc3MGUtMWY0OC00MjM5LTky
MWQtNzc1YjUxNTJmYTJlLzQxNjQ3NzBlLTFmNDgtNDIzOS05MjFkLTc3NWI1MTUy
ZmEyZS5jcmwwHwYDVR0jBBgwFoAUg8uL64VN8heeNxr2999SBQR2tWowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS80MTY0NzcwZS0xZjQ4LTQyMzktOTIxZC03NzVi
NTE1MmZhMmUuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAF4N4MA0E
AgACMAcDBQAmBqzAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF
BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0
bWwwDQYJKoZIhvcNAQELBQADggEBAFTDb2gH1oBJj8EYFxuK9vl8tSejNl+SL8a2
TSw76/YQ5vm1pSkjiuwfH8fo+XVz64tayEOOihT414CpBJJArtNBGjwq6GBq/Eze
6oXEuBSVX/vvd1GT8V6/dy/Xz7MBjdHLH8bRCthZDwje3N5zRP/JfEunHtTRBF7C
OdaD1aBHCIxehmBfHrg85AZR79AVFGe7wZWiVGLMB2uHA6zYgpYXPPm2Y/u/xC5z
z5HgeJ2Pdd0AMzonr0xobsIWrpoIufiM+dUCBmHeWBA5ZOHeTaCGRP5GpJzVmCgd
kERgxYdOvCB4AUHxBO1Z3xCkWa+wKrkfG94X2jVCvrzzTrLceJk=
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:35:27 2026 by rpki-client