
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/ca756e9a-47d8-33bf-9e02-86af045884a9.roa
File: ca756e9a-47d8-33bf-9e02-86af045884a9.roa (raw, json)
Hash identifier: eENtczCb6ZTv8d621XMqUq8JfAc6i7UJmZDkaZ1OQRg=
Subject key identifier: FB:6F:A0:E8:9B:89:9C:21:BC:72:6B:4E:3E:78:D5:3F:3F:7C:C5:F5
Certificate issuer: /CN=1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f
Certificate serial: 010D0C9F4328584D0BDD007AA495F8D3F33A7060
Authority key identifier: 3C:C3:16:47:8C:B1:26:ED:0F:A9:63:29:A2:01:6E:85:BA:90:9A:89
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/ca756e9a-47d8-33bf-9e02-86af045884a9.roa
Signing time: Tue 03 Mar 2026 14:00:40 +0000
ROA not before: Tue 03 Mar 2026 14:00:40 +0000
ROA not after: Mon 01 Jun 2026 13:00:40 +0000
asID: 135074
IP address blocks: 23.145.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:0b:dd:00:7a:a4:95:f8:d3:f3:3a:70:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f
Validity
Not Before: Mar 3 14:00:40 2026 GMT
Not After : Jun 1 13:00:40 2026 GMT
Subject: CN=2e2e34ab-978e-4748-85ba-718613bdc461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:f8:dd:1a:5b:75:82:98:67:87:4b:05:94:95:
92:a5:b0:25:5b:95:29:4b:ff:2a:63:2b:d6:78:e7:
81:61:68:99:5d:d9:95:dc:eb:7f:45:78:d4:89:75:
72:a5:6d:b0:8d:3b:55:95:d7:60:ae:70:a6:7f:ad:
5e:26:c4:b2:d3:1f:fa:91:b0:c2:5a:7e:5c:22:ea:
57:fe:34:22:15:5e:f1:5e:03:89:6d:a9:fd:dd:49:
f1:9c:7d:de:da:f6:52:49:87:78:67:9d:68:cc:4c:
f3:ad:e9:4f:8b:72:78:71:f3:47:e9:08:ba:f9:a8:
b9:ae:f6:ff:62:0c:2f:63:98:35:b4:cd:cf:19:14:
e7:7e:12:8f:86:fa:cc:d8:e3:a5:cf:93:31:6d:c8:
6b:30:63:9c:42:7f:94:59:2e:55:b6:74:89:35:f8:
5b:55:f7:1f:57:75:6f:4b:3f:be:58:a6:bc:b6:6c:
b6:f1:c1:0f:75:af:1d:9e:ec:e8:d8:5e:02:59:95:
66:7e:46:4c:6f:8a:b5:63:34:2b:17:92:25:d4:96:
71:5b:04:bb:dc:a7:9e:66:02:53:fb:1d:9d:08:5c:
26:31:a0:df:9b:68:29:92:82:a5:63:3f:53:74:16:
5c:19:56:cc:73:2f:1c:8c:ad:21:ab:b3:35:da:3f:
7d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:6F:A0:E8:9B:89:9C:21:BC:72:6B:4E:3E:78:D5:3F:3F:7C:C5:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/ca756e9a-47d8-33bf-9e02-86af045884a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.crl
X509v3 Authority Key Identifier:
keyid:3C:C3:16:47:8C:B1:26:ED:0F:A9:63:29:A2:01:6E:85:BA:90:9A:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.cer
sbgp-ipAddrBlock: critical
IPv4:
23.145.136.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:40:c2:41:88:c1:35:1a:92:84:0d:9d:a1:5f:af:ed:fa:4d:
41:b4:ac:eb:15:9c:65:e0:be:6f:dc:ff:c0:4d:ce:1c:37:0c:
30:18:7f:01:66:cc:1a:83:7e:ab:3a:61:8b:56:71:59:64:f9:
4d:a6:d7:f3:f2:92:0c:da:db:d9:3f:df:2b:53:58:bf:10:13:
3d:f3:49:e1:58:b3:44:35:4b:e3:5e:56:7c:e1:85:4b:3c:4d:
e7:dc:92:72:22:5f:d0:8d:96:d0:2f:0d:7a:99:3f:c4:e2:4c:
94:b2:7e:a7:77:64:8f:50:a2:79:4c:13:0e:8e:80:69:7b:67:
41:13:cf:fa:05:59:20:ef:95:e6:0b:41:47:27:9c:27:aa:16:
ae:a1:82:69:80:c5:66:05:e4:93:f4:7f:fd:7d:4d:0c:23:51:
41:03:78:09:0c:03:38:5d:7f:59:1a:7d:c5:e7:4c:fc:a8:72:
99:28:09:64:99:de:f0:a6:d6:ab:77:5f:e7:cf:1b:a9:ae:8c:
fb:70:91:7e:f6:69:aa:0a:af:0a:11:b9:4d:99:99:9d:34:99:
ad:e0:2d:da:68:5e:dd:75:86:db:3b:75:43:ef:a6:89:6a:36:
4c:08:fe:f6:1a:00:68:29:3e:0d:2a:06:a2:33:c6:96:3a:10:
a2:e9:f5:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:51:19 2026 by rpki-client