
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a24c9f40-601b-4bb8-8c62-250bf812fea9/a2bcaa36-6b27-3e77-b4d1-ccfba18d808e.roa
File: a2bcaa36-6b27-3e77-b4d1-ccfba18d808e.roa (raw, json)
Hash identifier: Swic86uR1UYInxzfS1D3+O1lz81Ju7xftI+sKPNp0Oo=
Subject key identifier: 20:18:78:14:C0:92:A6:0A:1C:48:A7:EE:57:D9:22:79:64:AD:5B:77
Certificate issuer: /CN=a24c9f40-601b-4bb8-8c62-250bf812fea9
Certificate serial: 010D0C9F4328584F49893D2FB09BFD8DF15B4380
Authority key identifier: 46:D4:B2:A8:A7:A7:BA:3B:72:D6:6D:9E:48:23:5B:CE:83:6F:16:0F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a24c9f40-601b-4bb8-8c62-250bf812fea9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a24c9f40-601b-4bb8-8c62-250bf812fea9/a2bcaa36-6b27-3e77-b4d1-ccfba18d808e.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 1097
IP address blocks: 23.152.68.0/24 maxlen: 24
2602:81c:f000::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a24c9f40-601b-4bb8-8c62-250bf812fea9/a24c9f40-601b-4bb8-8c62-250bf812fea9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a24c9f40-601b-4bb8-8c62-250bf812fea9/a24c9f40-601b-4bb8-8c62-250bf812fea9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a24c9f40-601b-4bb8-8c62-250bf812fea9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 29 Sep 2026 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:89:3d:2f:b0:9b:fd:8d:f1:5b:43:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a24c9f40-601b-4bb8-8c62-250bf812fea9
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=4fc08dd9-fd7f-4952-bfcd-2b95a34f360c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c9:32:2f:0d:0e:82:90:87:93:4b:e9:c4:d7:
e6:a7:63:a6:73:9a:75:31:e5:51:0e:b8:63:ef:4f:
f5:88:ea:b8:84:f5:b5:ca:da:fb:05:04:ac:fd:1d:
7e:ab:7c:d6:8d:b7:a9:eb:09:fb:8e:02:1e:0a:ea:
f4:5d:8c:cb:db:d1:4e:5a:48:da:32:62:19:86:af:
f4:a8:14:f7:ea:06:6c:85:9c:27:37:80:77:5c:2d:
0b:63:b8:e6:63:74:05:00:2e:ed:4e:99:e5:12:44:
6c:7c:67:50:19:17:96:72:76:75:09:56:23:a2:a5:
3e:19:95:2d:5d:dd:24:69:29:cb:c0:b5:f3:3c:2a:
f7:d4:ad:1e:8c:68:9b:d7:85:1e:12:26:2b:ee:09:
29:c8:3b:81:55:66:99:7c:2a:60:13:98:5d:c0:8e:
2d:6b:05:33:a6:72:1c:f0:82:a6:f4:65:cf:a6:b8:
ea:15:8b:71:c8:ff:57:4e:e8:04:4b:21:b4:49:d2:
69:62:fa:42:30:c6:0d:00:17:f1:ad:54:81:dd:3e:
d0:6b:21:88:55:3a:b1:e2:ae:1b:64:34:9b:6e:a0:
28:ac:06:4c:be:bb:2b:6a:d7:e1:98:3a:58:0b:00:
5e:d2:70:e7:e4:90:9e:48:27:de:fb:d6:29:70:d0:
63:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:18:78:14:C0:92:A6:0A:1C:48:A7:EE:57:D9:22:79:64:AD:5B:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a24c9f40-601b-4bb8-8c62-250bf812fea9/a2bcaa36-6b27-3e77-b4d1-ccfba18d808e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a24c9f40-601b-4bb8-8c62-250bf812fea9/a24c9f40-601b-4bb8-8c62-250bf812fea9.crl
X509v3 Authority Key Identifier:
keyid:46:D4:B2:A8:A7:A7:BA:3B:72:D6:6D:9E:48:23:5B:CE:83:6F:16:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a24c9f40-601b-4bb8-8c62-250bf812fea9.cer
sbgp-ipAddrBlock: critical
IPv4:
23.152.68.0/24
IPv6:
2602:81c:f000::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:da:36:a6:81:61:e5:5d:54:c5:a0:6e:8a:bc:2e:d0:4b:ce:
6e:d5:2a:97:86:a0:27:20:34:a4:7e:11:b5:a0:a9:4a:cf:c7:
b1:1f:77:f3:6b:49:22:3e:20:9b:0e:bc:30:9d:40:18:0b:12:
e9:37:d8:cb:0b:7c:16:34:56:50:ae:8b:82:c4:de:f1:59:96:
3b:46:40:2d:f0:36:7c:30:0c:70:9b:0f:7e:a1:ef:2d:91:10:
99:06:16:43:c4:a6:ed:27:7e:74:e6:00:2f:95:56:5d:d9:64:
09:69:d9:1b:77:c4:dc:a7:b2:df:56:34:c9:9b:74:ef:e0:a4:
b4:ef:07:73:4b:ed:e5:a6:73:9f:6c:b9:54:1e:21:8a:a4:0b:
23:d0:23:2f:a4:f1:89:92:5a:fc:48:df:a0:d0:97:c5:f6:57:
63:25:ad:27:c5:9a:88:15:bd:0e:0f:11:dd:f0:81:60:30:d9:
3b:8b:6d:d7:f1:21:51:5b:d8:5f:3f:6a:a7:ec:be:f1:12:1b:
f2:8c:ba:33:af:ff:ee:4a:0e:8f:b3:7d:58:6e:f6:5a:0f:5f:
9b:ac:7a:6f:d3:5a:22:8f:e8:25:c4:4e:63:c5:de:b4:19:97:
b0:a2:e8:5a:9c:0e:57:cd:ba:11:c4:07:34:4c:39:50:e0:88:
1a:84:9c:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 17:31:57 2026 by rpki-client