
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/a2539617-7315-37c5-84a2-9f369c7e2a2d.roa
File: a2539617-7315-37c5-84a2-9f369c7e2a2d.roa (raw, json)
Hash identifier: OxPY1GlEFBBnVMRfkNvjdLeEeOU69GC0BCZIm9zXid4=
Subject key identifier: 48:4F:7A:B0:35:43:DC:42:B6:B3:80:93:C1:79:97:C6:2A:2D:AC:38
Certificate issuer: /CN=f8e7a246-465c-42e8-8be1-af167b20b04d
Certificate serial: 010D0C9F4328584DB1DAD09C8D038560FBBFB300
Authority key identifier: 47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/a2539617-7315-37c5-84a2-9f369c7e2a2d.roa
Signing time: Sat 02 May 2026 01:00:24 +0000
ROA not before: Sat 02 May 2026 01:00:24 +0000
ROA not after: Fri 31 Jul 2026 01:00:24 +0000
asID: 399091
IP address blocks: 23.234.148.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:b1:da:d0:9c:8d:03:85:60:fb:bf:b3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e7a246-465c-42e8-8be1-af167b20b04d
Validity
Not Before: May 2 01:00:24 2026 GMT
Not After : Jul 31 01:00:24 2026 GMT
Subject: CN=b07e4477-c659-4e74-addb-d3bd0dd5595e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:de:fb:24:f2:e9:9b:5e:cb:27:f3:ac:e1:e1:
23:58:b1:07:98:66:b6:69:81:84:42:70:57:df:46:
31:cb:14:08:f4:f9:e5:64:8d:a6:f1:26:5e:e3:aa:
9a:3b:e5:84:1f:eb:b2:3a:20:f3:ed:63:9b:f4:60:
06:d2:bd:af:9c:c7:09:55:94:31:6f:f4:85:da:37:
76:c8:29:d6:41:5f:27:80:de:a1:fd:8d:d1:65:fa:
ac:ce:20:61:11:bb:dd:d0:f9:7a:2c:85:1c:4e:9a:
8e:f3:05:6a:e8:25:0c:e9:e8:6f:32:c5:96:92:68:
b3:51:44:27:85:9e:0c:b6:bf:de:4b:b6:0e:7b:3f:
96:4b:db:ba:40:fb:3e:c6:3e:d7:0d:dc:54:d0:c4:
ab:bd:86:8e:20:3b:38:e1:e0:b0:bd:f8:a7:66:35:
56:c5:e8:ba:40:dd:17:f7:89:4d:b5:34:78:5a:77:
b6:f3:60:5a:a3:f7:ca:97:1a:44:76:85:2c:2f:51:
17:7e:2b:e2:b9:80:5d:b2:f2:f9:2e:3d:e5:a5:06:
06:d3:91:69:07:71:9f:01:2f:96:1e:9e:4c:bd:49:
82:b1:69:a3:5f:c1:4f:09:bc:3b:c8:92:8d:f5:21:
72:86:c1:42:8e:ab:51:e2:91:42:ea:f4:25:c9:40:
f6:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:4F:7A:B0:35:43:DC:42:B6:B3:80:93:C1:79:97:C6:2A:2D:AC:38
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/a2539617-7315-37c5-84a2-9f369c7e2a2d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl
X509v3 Authority Key Identifier:
keyid:47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
sbgp-ipAddrBlock: critical
IPv4:
23.234.148.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:43:a2:da:fb:93:c5:db:ea:d3:80:42:6b:b4:34:f4:b0:31:
64:b9:81:d5:83:dd:ff:b1:2b:b0:bc:70:07:cb:28:cc:16:08:
80:da:75:94:0f:a5:4a:11:8e:96:b9:ce:0b:9e:a5:91:ba:d8:
5d:94:e8:9a:1d:47:13:be:49:f8:d0:46:b6:aa:66:3c:d2:8d:
2d:c4:dc:ad:e8:04:76:db:cd:ef:87:63:63:f7:74:3c:3c:72:
07:5f:21:6c:b8:00:2c:a4:b8:e1:d4:c5:28:0f:ae:0e:f9:fc:
f3:16:dd:e1:c3:26:e3:a2:d3:a0:b2:41:7e:d3:20:d5:76:ba:
b7:60:09:fa:30:0c:14:7b:31:4b:13:b4:2f:22:f6:1b:f3:37:
b2:35:85:90:47:a5:36:b4:92:09:b7:f6:65:08:5a:53:6d:c0:
da:c0:fd:6e:2a:de:7c:b4:8c:07:ca:b1:27:2d:c8:9e:f9:48:
a2:68:fa:28:01:d7:c5:12:35:85:65:02:16:da:b1:13:8e:b0:
66:87:03:0c:e0:1c:80:15:6c:73:a3:b1:44:90:31:5b:a8:f7:
e1:75:aa:64:cf:e7:06:63:9a:89:92:cc:8b:15:bc:dc:d3:49:
a2:c0:0e:d2:a8:10:34:98:df:1d:b1:a1:7c:81:de:cf:fe:89:
ac:86:8f:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:09:44 2026 by rpki-client