
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03d20efd-729c-46b2-b268-510d1f9f7dd3/d5ccba6c-e48a-34dc-9989-d340928eb37f.roa
File: d5ccba6c-e48a-34dc-9989-d340928eb37f.roa (raw, json)
Hash identifier: qAuyNBYTB39KM+tWpsv5v09rAsqzGI1J8Ru5ZLHlDqg=
Subject key identifier: 00:BA:66:FE:28:59:CB:FE:70:BA:48:D2:F9:23:6C:24:68:20:63:D6
Certificate issuer: /CN=03d20efd-729c-46b2-b268-510d1f9f7dd3
Certificate serial: 010D0C9F4328584DB77031EC78ECB8F9BD6E7200
Authority key identifier: EE:28:10:71:FC:4B:A1:89:5B:96:F5:A7:39:16:B2:72:08:13:DF:D4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03d20efd-729c-46b2-b268-510d1f9f7dd3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03d20efd-729c-46b2-b268-510d1f9f7dd3/d5ccba6c-e48a-34dc-9989-d340928eb37f.roa
Signing time: Mon 04 May 2026 01:00:25 +0000
ROA not before: Mon 04 May 2026 01:00:25 +0000
ROA not after: Sun 02 Aug 2026 01:00:25 +0000
asID: 400803
IP address blocks: 23.141.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03d20efd-729c-46b2-b268-510d1f9f7dd3/03d20efd-729c-46b2-b268-510d1f9f7dd3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03d20efd-729c-46b2-b268-510d1f9f7dd3/03d20efd-729c-46b2-b268-510d1f9f7dd3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03d20efd-729c-46b2-b268-510d1f9f7dd3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:b7:70:31:ec:78:ec:b8:f9:bd:6e:72:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03d20efd-729c-46b2-b268-510d1f9f7dd3
Validity
Not Before: May 4 01:00:25 2026 GMT
Not After : Aug 2 01:00:25 2026 GMT
Subject: CN=b8ea6aa5-b33e-4e57-872a-3c87b61cbfae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d5:56:69:8f:f7:28:84:02:e1:43:53:39:c3:
13:cb:44:d8:56:46:b8:ca:c9:29:23:62:67:3b:d1:
4a:b8:27:ce:72:45:16:80:f3:3d:46:9e:df:a7:0f:
e0:67:5c:1a:f7:d8:c6:e4:cb:a9:b7:bb:01:bf:c8:
d5:6a:16:5c:8a:38:36:d8:91:a1:93:f9:2b:87:fa:
35:30:d3:5a:ac:e0:6a:13:f4:bb:f5:15:6f:c3:53:
fb:80:ba:46:c9:53:b4:f1:ea:94:9e:99:e5:85:15:
81:f3:26:32:c3:7b:37:06:df:66:1d:4b:63:1c:6c:
03:70:f1:25:ad:15:e3:c2:77:52:c9:bb:40:f3:b2:
55:f5:e7:2c:80:ab:f2:8e:69:88:84:33:e9:29:8e:
e7:57:ca:62:c9:bc:74:b7:f0:3b:db:cd:1f:f1:c1:
07:b8:6e:81:8c:b6:e7:fe:05:31:22:d9:27:d3:48:
3b:86:22:bf:73:77:f8:d7:b4:53:99:2c:9e:c9:e5:
39:41:13:8c:23:ed:71:41:7d:bf:a8:e3:cc:01:e2:
e0:e1:5e:62:f8:1c:e6:32:0d:7b:bd:d7:9e:5c:9e:
03:91:15:d0:46:44:16:0b:b7:3a:70:5e:b2:8d:31:
e8:00:7c:8f:2c:7f:b6:d1:7c:3f:1b:a3:30:f4:f2:
02:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:BA:66:FE:28:59:CB:FE:70:BA:48:D2:F9:23:6C:24:68:20:63:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03d20efd-729c-46b2-b268-510d1f9f7dd3/d5ccba6c-e48a-34dc-9989-d340928eb37f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03d20efd-729c-46b2-b268-510d1f9f7dd3/03d20efd-729c-46b2-b268-510d1f9f7dd3.crl
X509v3 Authority Key Identifier:
keyid:EE:28:10:71:FC:4B:A1:89:5B:96:F5:A7:39:16:B2:72:08:13:DF:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/03d20efd-729c-46b2-b268-510d1f9f7dd3.cer
sbgp-ipAddrBlock: critical
IPv4:
23.141.120.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a2:35:e8:54:5d:d3:1b:13:86:10:8f:46:de:67:66:65:a5:3c:
6b:1a:c9:44:67:45:42:fb:a8:3e:17:0a:86:db:f1:0a:ac:01:
a8:c6:26:ac:49:87:9c:b9:55:0a:d6:20:54:16:25:cb:8e:e0:
ce:63:73:e4:b7:09:57:21:e9:d0:33:70:34:d7:be:16:27:68:
22:40:ab:d8:b8:72:bd:90:d4:c5:5d:ad:76:2f:81:19:21:3c:
03:74:1a:c2:0a:0e:1a:cd:d0:3c:a9:b0:92:2a:50:c1:7c:1d:
71:46:d6:39:73:aa:18:39:f3:17:28:f0:e2:20:82:0c:47:d4:
9d:9d:bc:fc:b7:3b:c1:68:15:40:98:c5:4c:ac:b9:ef:8a:d2:
cb:02:10:36:08:9b:43:0a:77:76:df:5e:28:92:7d:8b:8b:5a:
c4:40:37:94:d5:51:f7:b4:0b:e3:61:72:cf:4e:51:bc:52:e1:
eb:61:ae:40:ff:d5:f2:5e:46:c5:6b:ff:d7:d6:52:25:eb:ab:
f0:4d:62:d6:a0:41:46:13:de:97:79:d8:a0:db:bd:ea:11:bc:
8d:60:8a:8e:c4:62:50:62:52:ee:16:fd:79:c5:ea:3e:a5:8f:
5a:6b:fc:e0:d0:95:e3:44:dc:b2:26:59:43:11:24:53:24:10:
5b:c7:bf:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:53:58 2026 by rpki-client