
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/ca756e9a-47d8-33bf-9e02-86af045884a9.roa
File: ca756e9a-47d8-33bf-9e02-86af045884a9.roa (raw, json)
Hash identifier: OSfbOdfiZSX4osYaEyahcpCW31AH5/XqEx/3KtH6k04=
Subject key identifier: 05:25:34:DC:5A:3A:1E:C0:5C:BB:AC:AB:8D:C2:11:90:52:01:E7:F8
Certificate issuer: /CN=1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f
Certificate serial: 010D0C9F4328584F49746E0B29BE964CC114F2C0
Authority key identifier: 3C:C3:16:47:8C:B1:26:ED:0F:A9:63:29:A2:01:6E:85:BA:90:9A:89
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/ca756e9a-47d8-33bf-9e02-86af045884a9.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 135074
IP address blocks: 23.145.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 26 Sep 2026 08:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:74:6e:0b:29:be:96:4c:c1:14:f2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=b977e0ca-0eba-4703-b4a8-16cb74e7ebf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c8:a3:71:34:14:d4:69:28:65:f5:4f:08:83:
2b:0e:92:56:a3:fc:29:04:c0:d9:aa:3f:ab:5b:1a:
ab:c4:6f:9a:b9:b7:6a:ca:72:c2:d4:ce:61:6b:bf:
fa:31:01:54:9a:bb:b2:dc:10:e4:28:c2:47:ea:f9:
e8:da:06:11:ba:35:8d:22:c9:99:05:9e:93:02:de:
e2:61:1e:16:d5:85:18:9e:fa:b6:64:8c:7f:94:1d:
2a:ca:64:47:1a:27:a6:21:05:aa:4d:7e:8a:02:0c:
7a:b9:13:fd:5e:4e:74:ac:41:cd:2f:45:70:91:a0:
80:ac:39:83:f5:6a:bd:df:7b:43:89:7b:b0:5c:94:
7d:4b:92:59:58:2b:b1:31:b1:96:d9:b9:19:3e:b8:
be:ff:89:0d:22:34:1b:9d:20:ac:7b:99:51:54:9a:
99:e7:12:0f:ef:b3:5d:3c:fe:36:a4:c7:d7:e5:18:
f4:a5:14:b2:63:f0:06:85:e2:8c:9b:29:de:a3:fd:
08:1a:48:3d:9c:a7:11:6b:b5:1f:65:44:7d:ef:e5:
e0:b2:eb:13:78:fa:b5:dc:ad:9f:f3:37:56:0e:2c:
e9:e3:35:60:15:41:08:ea:7d:53:dd:11:62:cf:fe:
80:1c:5b:9e:b7:4e:bb:81:e3:98:9c:c9:b4:2d:36:
66:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:25:34:DC:5A:3A:1E:C0:5C:BB:AC:AB:8D:C2:11:90:52:01:E7:F8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/ca756e9a-47d8-33bf-9e02-86af045884a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.crl
X509v3 Authority Key Identifier:
keyid:3C:C3:16:47:8C:B1:26:ED:0F:A9:63:29:A2:01:6E:85:BA:90:9A:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.cer
sbgp-ipAddrBlock: critical
IPv4:
23.145.136.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:ff:00:59:c0:b6:fc:01:c1:a9:18:5a:0e:cb:4b:79:1f:7c:
c3:38:c3:69:01:6c:dd:f3:20:76:62:97:a5:40:31:5b:9b:75:
38:39:73:37:81:59:44:88:b2:e3:32:c5:3c:f2:25:8f:51:a8:
05:47:4f:ba:39:7f:ea:c9:b0:87:88:98:bc:3f:29:93:29:fd:
07:d8:ff:b7:41:57:73:99:b0:6a:26:09:f7:cd:8b:53:2a:63:
25:c7:39:30:79:9f:af:e2:1c:e6:0e:82:a4:7d:b9:4c:d8:53:
88:7f:db:6a:66:5e:14:5c:5e:79:f3:5f:9c:18:d0:06:b5:47:
c5:db:28:7b:be:12:14:be:cc:12:c4:55:41:3b:6f:b7:6f:2a:
39:15:b7:8f:c1:40:9f:bb:d3:7c:62:1a:3d:60:3d:08:b5:63:
e2:cb:18:f6:d7:b1:df:bf:d3:ac:0b:89:eb:69:a4:79:64:95:
25:e0:eb:d3:ae:43:20:df:60:30:7d:7e:07:fb:4f:da:f2:b2:
5a:cc:67:45:ce:61:7a:ef:55:44:9a:87:f9:b6:1b:03:81:20:
d1:29:b7:96:1c:ad:fc:d7:c5:ec:67:7d:f4:b8:7b:81:a9:f3:
72:36:5e:6f:9b:56:f2:e4:c0:c3:55:cd:f1:47:a4:fe:d7:ab:
2c:58:bb:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:54:09 2026 by rpki-client