
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1c59fee6-6fbd-4e70-b8c8-332ead43ccdd/002ef700-936e-3cb8-aa93-bc3050bdb98d.roa
File: 002ef700-936e-3cb8-aa93-bc3050bdb98d.roa (raw, json)
Hash identifier: Ip+VZFXnKT5NFm+rpPTFaljObrnNdr1+TWvdUg/aLFE=
Subject key identifier: 8D:08:FE:FF:64:8B:6D:7A:55:E1:6C:51:EE:36:28:38:F7:52:6D:D9
Certificate issuer: /CN=1c59fee6-6fbd-4e70-b8c8-332ead43ccdd
Certificate serial: 010D0C9F4328584D9FB57434FCD19C60AE0ED200
Authority key identifier: 5F:2D:BC:FC:32:43:4D:81:C2:5F:35:D9:9A:19:49:DB:25:3D:3A:22
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1c59fee6-6fbd-4e70-b8c8-332ead43ccdd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1c59fee6-6fbd-4e70-b8c8-332ead43ccdd/002ef700-936e-3cb8-aa93-bc3050bdb98d.roa
Signing time: Sat 25 Apr 2026 13:00:30 +0000
ROA not before: Sat 25 Apr 2026 13:00:30 +0000
ROA not after: Fri 24 Jul 2026 13:00:30 +0000
asID: 201579
IP address blocks: 23.166.72.0/24 maxlen: 24
2602:f9e4::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1c59fee6-6fbd-4e70-b8c8-332ead43ccdd/1c59fee6-6fbd-4e70-b8c8-332ead43ccdd.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1c59fee6-6fbd-4e70-b8c8-332ead43ccdd/1c59fee6-6fbd-4e70-b8c8-332ead43ccdd.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1c59fee6-6fbd-4e70-b8c8-332ead43ccdd.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:9f:b5:74:34:fc:d1:9c:60:ae:0e:d2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c59fee6-6fbd-4e70-b8c8-332ead43ccdd
Validity
Not Before: Apr 25 13:00:30 2026 GMT
Not After : Jul 24 13:00:30 2026 GMT
Subject: CN=46a9dde2-b153-42f2-a363-5b7cbe61b458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:e0:5c:ea:cc:8a:57:d7:83:40:f0:84:2b:2e:
5b:7b:cc:0e:31:52:86:7d:b2:be:af:8d:19:ec:9c:
0d:36:c2:55:a7:fa:c2:b1:09:02:d8:53:eb:37:1a:
6d:14:93:95:93:2a:ca:e8:3b:4d:a9:fa:69:4d:1e:
1b:39:15:a8:98:7a:b4:0e:9e:b9:dd:30:53:ea:76:
0d:a6:93:24:98:de:a8:e5:84:44:e9:76:43:3b:70:
3c:2b:9b:5f:94:e1:4d:6a:fd:cc:7b:a3:6a:ca:e2:
56:f4:44:57:79:f6:0c:22:f4:63:8d:22:17:c5:81:
6e:08:1f:ce:ce:2d:59:d4:89:f4:ca:bf:4c:50:e2:
d4:d3:84:e8:a2:a5:b2:55:ed:a1:b5:86:56:e2:8f:
d0:1f:19:84:bd:eb:1c:72:94:c2:05:75:0c:b3:43:
d1:46:3a:e0:97:5f:7e:9a:96:f7:fb:d3:8f:39:b6:
d6:8b:c3:2b:4c:a1:70:04:8f:d8:f2:0a:52:7f:72:
3a:5b:2b:17:6b:2f:29:b1:fe:bd:15:89:b2:33:95:
50:1e:ce:ca:d4:a3:f4:7b:0f:37:3f:0c:10:71:0f:
46:18:09:6e:25:86:21:c8:f7:b8:92:01:bb:14:74:
4f:ad:7b:cd:a9:e0:d7:ea:e5:27:95:19:50:6c:4e:
1a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:08:FE:FF:64:8B:6D:7A:55:E1:6C:51:EE:36:28:38:F7:52:6D:D9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1c59fee6-6fbd-4e70-b8c8-332ead43ccdd/002ef700-936e-3cb8-aa93-bc3050bdb98d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1c59fee6-6fbd-4e70-b8c8-332ead43ccdd/1c59fee6-6fbd-4e70-b8c8-332ead43ccdd.crl
X509v3 Authority Key Identifier:
keyid:5F:2D:BC:FC:32:43:4D:81:C2:5F:35:D9:9A:19:49:DB:25:3D:3A:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1c59fee6-6fbd-4e70-b8c8-332ead43ccdd.cer
sbgp-ipAddrBlock: critical
IPv4:
23.166.72.0/24
IPv6:
2602:f9e4::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:3b:ac:ba:21:ac:6c:4a:ec:12:ed:2d:72:8b:cb:e7:15:81:
56:43:89:b4:3d:9d:b3:2a:99:4a:26:6d:93:06:cf:73:3f:e2:
9b:2b:9e:62:46:93:cb:dd:4d:da:5d:ae:55:c7:21:63:f3:00:
ff:1d:25:64:5c:1c:98:fe:36:c5:de:0e:41:c3:9f:ca:f1:71:
24:a0:06:4b:09:5f:48:f9:4f:b2:c9:f7:d8:36:e5:ea:05:7f:
fc:67:88:81:67:a4:14:41:ff:fb:6f:f3:ca:a7:7d:81:f4:67:
4b:95:58:f1:77:20:f1:ce:a4:b4:ed:8c:84:2a:2d:1b:35:b6:
ad:47:b8:42:48:39:fc:f5:33:4b:a0:ff:cb:bc:9c:74:eb:82:
a2:fb:6d:da:cc:9a:fe:9f:55:45:db:90:a9:93:26:d9:49:4d:
b4:bb:cd:9d:c1:67:a9:ee:25:d1:05:29:d6:cf:6d:16:23:f2:
b0:cb:3c:89:d2:af:6f:ef:72:f6:d2:6e:63:78:44:91:37:55:
18:03:7a:ed:ec:54:4c:26:69:04:e3:08:b9:35:94:9e:7b:c5:
a5:2b:c2:39:38:88:b4:f2:aa:2f:b1:72:e5:7e:79:3e:e8:a1:
72:b9:ae:eb:58:3a:17:93:ab:3f:bf:6d:af:6a:ef:63:e3:de:
24:0a:df:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:50:24 2026 by rpki-client