
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/22e42724-5d65-4798-a360-69c4707835eb/b3aa5067-3544-31fa-a9d9-7a2c079a9030.roa
File: b3aa5067-3544-31fa-a9d9-7a2c079a9030.roa (raw, json)
Hash identifier: XLWq6vr8pu4DB328FWF6fuVgPFyFJnwVyz6eiorTFCA=
Subject key identifier: 86:09:C1:37:18:88:81:F1:2B:FC:51:4A:91:E0:05:D6:7D:46:E7:D3
Certificate issuer: /CN=22e42724-5d65-4798-a360-69c4707835eb
Certificate serial: 010D0C9F4328584F4974D65B121982C9C9141B80
Authority key identifier: 5F:33:31:54:AD:F9:EA:60:C1:97:A7:5E:E9:F9:D9:F1:A4:37:35:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/22e42724-5d65-4798-a360-69c4707835eb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/22e42724-5d65-4798-a360-69c4707835eb/b3aa5067-3544-31fa-a9d9-7a2c079a9030.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 401854
IP address blocks: 23.142.116.0/24 maxlen: 24
2620:da:2000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/22e42724-5d65-4798-a360-69c4707835eb/22e42724-5d65-4798-a360-69c4707835eb.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/22e42724-5d65-4798-a360-69c4707835eb/22e42724-5d65-4798-a360-69c4707835eb.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/22e42724-5d65-4798-a360-69c4707835eb.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 06 Oct 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:74:d6:5b:12:19:82:c9:c9:14:1b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22e42724-5d65-4798-a360-69c4707835eb
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=969cf04e-3970-4ce4-ac6f-7cccab95ea17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:eb:39:bc:78:5f:1b:33:1a:f6:45:4e:16:38:
7d:ee:67:44:bf:ec:92:f7:69:e0:6f:43:5b:ad:d1:
b6:cd:ee:e6:1a:3a:d5:30:bf:fc:6c:80:3f:aa:77:
1c:31:69:a3:b8:0f:d8:2c:d4:3a:54:aa:27:6c:dc:
e2:84:b9:3c:34:39:34:97:c5:9c:34:b5:d4:ab:8f:
dd:ed:34:09:88:ad:bd:ad:89:71:20:d7:6f:9e:a8:
34:dd:59:a9:11:fd:59:ca:8a:f6:a4:b0:cb:4e:76:
da:77:06:97:18:4e:f0:dd:a1:57:a2:1d:e5:90:aa:
a0:7e:94:6b:02:0d:74:37:dd:31:3f:b6:a7:c7:1a:
49:ad:24:bf:d9:29:ad:cc:c1:f5:66:c0:b3:57:33:
b9:fe:75:18:da:18:bd:45:e7:3e:95:1e:4f:49:9c:
8c:0d:c8:c1:13:24:a5:de:81:0e:79:26:79:00:06:
1f:9a:26:b6:2a:01:f6:f9:30:38:fa:f9:42:69:68:
c1:4a:45:d5:ea:d1:2f:13:2d:13:62:4b:ed:8c:fd:
bd:b5:f8:d5:19:19:59:da:3c:64:72:06:84:b6:24:
5e:97:a1:1a:b4:be:1c:9d:b1:de:94:23:b9:dd:43:
08:cf:ef:2b:c5:f4:2e:c6:8f:a5:e9:2d:72:47:02:
50:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:09:C1:37:18:88:81:F1:2B:FC:51:4A:91:E0:05:D6:7D:46:E7:D3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/22e42724-5d65-4798-a360-69c4707835eb/b3aa5067-3544-31fa-a9d9-7a2c079a9030.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/22e42724-5d65-4798-a360-69c4707835eb/22e42724-5d65-4798-a360-69c4707835eb.crl
X509v3 Authority Key Identifier:
keyid:5F:33:31:54:AD:F9:EA:60:C1:97:A7:5E:E9:F9:D9:F1:A4:37:35:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/22e42724-5d65-4798-a360-69c4707835eb.cer
sbgp-ipAddrBlock: critical
IPv4:
23.142.116.0/24
IPv6:
2620:da:2000::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a2:d7:66:c2:47:74:f9:72:2c:4a:1e:f8:46:38:55:1b:11:5a:
ae:ad:ab:f1:db:db:51:a1:ab:bc:f3:7d:39:5e:82:d8:18:dc:
bf:6d:7d:9e:d2:62:e2:6e:91:08:5c:12:bc:4c:b3:01:a7:2e:
a4:62:fd:17:46:6a:ca:43:4b:ae:86:d8:04:14:c5:b9:a2:68:
46:c8:5f:27:e7:18:15:ee:a1:56:56:89:93:0d:cc:91:c6:5e:
32:7f:95:de:85:3f:24:74:e0:47:76:08:07:07:2d:eb:65:19:
a2:af:51:5d:ed:be:d0:dc:d8:30:ff:5b:b5:7d:cc:fa:74:53:
86:d8:74:51:2e:62:9f:55:2b:9b:a1:d0:eb:5b:1d:de:6c:7c:
0b:21:2e:79:35:e4:b2:15:b8:69:40:72:57:1c:6e:00:50:a9:
75:eb:91:b9:2e:14:a2:3e:45:c8:32:ba:bf:5e:78:80:7c:5f:
4c:51:c6:f5:ae:77:f9:14:47:ed:93:a0:43:de:0a:5d:42:d1:
a3:c1:23:9c:8d:e3:23:7c:0f:9f:c1:53:10:b0:ee:50:2c:29:
71:6f:cf:89:7f:ad:ad:8d:58:cf:e2:97:7e:e7:8d:89:4d:5e:
5e:51:0f:22:8d:23:41:fb:41:25:2d:d1:b8:9e:f9:d9:f7:c4:
09:8c:ef:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:06:25 2026 by rpki-client