
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1f767e4f-700e-495f-8a3b-72eed82055b4/533e30dd-0c0f-371b-8de9-b5ee71425ace.roa
File: 533e30dd-0c0f-371b-8de9-b5ee71425ace.roa (raw, json)
Hash identifier: HmlR3yMNh+c8gc54buUZ+9K6+1YyotOcuMV0W1/fZwk=
Subject key identifier: C8:4F:BD:23:BA:2B:17:FA:A8:F5:04:BA:EE:FB:DB:2A:3D:4A:9C:05
Certificate issuer: /CN=1f767e4f-700e-495f-8a3b-72eed82055b4
Certificate serial: 010D0C9F4328584D1B19F1A51B46CB963E7A4800
Authority key identifier: 18:39:30:73:F9:D2:68:2D:B0:5F:52:03:A1:24:32:10:D5:96:C6:AF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1f767e4f-700e-495f-8a3b-72eed82055b4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1f767e4f-700e-495f-8a3b-72eed82055b4/533e30dd-0c0f-371b-8de9-b5ee71425ace.roa
Signing time: Mon 09 Mar 2026 01:00:32 +0000
ROA not before: Mon 09 Mar 2026 01:00:32 +0000
ROA not after: Sun 07 Jun 2026 01:00:32 +0000
asID: 1097
IP address blocks: 23.145.20.0/24 maxlen: 24
2602:81c:3000::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1f767e4f-700e-495f-8a3b-72eed82055b4/1f767e4f-700e-495f-8a3b-72eed82055b4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1f767e4f-700e-495f-8a3b-72eed82055b4/1f767e4f-700e-495f-8a3b-72eed82055b4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1f767e4f-700e-495f-8a3b-72eed82055b4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:1b:19:f1:a5:1b:46:cb:96:3e:7a:48:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f767e4f-700e-495f-8a3b-72eed82055b4
Validity
Not Before: Mar 9 01:00:32 2026 GMT
Not After : Jun 7 01:00:32 2026 GMT
Subject: CN=8b16b7f5-6fc9-4592-99a7-14c5c4929977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:69:3b:3d:ee:ad:55:c6:9b:a8:7c:9d:77:df:
29:49:68:d8:b8:b5:ff:e4:80:00:c5:7c:67:7b:c9:
ec:48:de:ac:70:af:bf:52:1a:ff:e5:39:4f:b8:78:
df:07:45:69:50:d3:8e:a0:61:d3:6f:e4:29:6b:f5:
d1:47:64:41:a0:0d:21:05:d0:c9:14:86:fb:e5:47:
58:41:64:a2:c4:9e:55:95:4f:c5:44:a4:9f:0b:c3:
0e:e1:88:34:2a:84:27:e7:57:dc:c8:7a:15:ef:d3:
f6:d4:f0:c0:9d:b0:e7:c9:4f:10:19:3c:af:33:34:
37:10:20:fa:1e:43:dc:4f:d2:21:cd:2a:16:e6:53:
ab:cd:63:5c:43:b9:f9:e6:0c:f1:67:05:9e:d2:99:
c1:ba:21:51:e6:90:7e:fe:22:68:49:7a:6e:2e:76:
97:b5:6f:45:01:07:6a:31:ed:b8:7a:02:10:d6:21:
ff:86:7c:b1:b2:c5:2a:1f:e1:c3:76:05:f1:f3:c1:
42:ce:98:85:7c:cc:38:ac:59:49:2a:b8:65:8c:bd:
5e:7c:1f:0f:f2:9d:f0:4f:78:8e:d5:54:d6:04:c4:
18:da:1b:b4:85:ba:ae:58:59:b6:04:c4:ab:63:56:
06:14:e9:b7:25:77:91:04:48:13:18:ee:4f:e4:c1:
79:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:4F:BD:23:BA:2B:17:FA:A8:F5:04:BA:EE:FB:DB:2A:3D:4A:9C:05
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1f767e4f-700e-495f-8a3b-72eed82055b4/533e30dd-0c0f-371b-8de9-b5ee71425ace.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1f767e4f-700e-495f-8a3b-72eed82055b4/1f767e4f-700e-495f-8a3b-72eed82055b4.crl
X509v3 Authority Key Identifier:
keyid:18:39:30:73:F9:D2:68:2D:B0:5F:52:03:A1:24:32:10:D5:96:C6:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1f767e4f-700e-495f-8a3b-72eed82055b4.cer
sbgp-ipAddrBlock: critical
IPv4:
23.145.20.0/24
IPv6:
2602:81c:3000::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
cd:6f:a6:19:82:ad:ec:44:b7:2c:f9:bf:d0:18:cc:ba:67:1d:
80:01:b2:86:a2:19:6b:96:31:3e:96:7f:80:5a:46:41:52:ba:
2a:73:24:3c:7b:51:d6:c8:56:4a:1d:6b:59:ce:c4:39:43:8e:
b8:dd:04:bd:86:bd:80:ff:05:cc:4a:a1:3b:26:c2:c9:0d:9b:
c9:55:2a:b6:c5:c3:2a:f3:08:53:42:e2:aa:8f:be:09:c9:3d:
1b:af:56:fe:33:5d:5b:8c:be:6a:20:2d:12:3e:a3:8c:da:95:
96:66:dd:f6:62:b1:d9:56:60:1b:d6:52:a1:6d:05:79:23:ab:
c0:60:0d:24:6f:64:ab:77:1d:64:53:f6:0b:0c:c8:d1:3f:51:
4c:4e:24:1b:99:02:f0:95:59:b8:ae:5c:ee:5b:33:88:7a:b3:
00:c7:7d:a1:9f:14:c5:83:86:76:d8:b5:c2:6a:74:5d:1b:d1:
13:94:cd:3f:82:4c:b9:4d:1e:7c:52:89:9e:2e:0c:06:ba:06:
ce:9f:bf:8a:63:4e:86:83:19:94:31:b0:5d:1d:8b:44:2f:b4:
00:e9:51:7e:32:72:06:a4:26:5c:90:6d:ea:52:94:e4:3e:fa:
39:77:fe:50:0b:fd:1a:70:29:ee:39:e2:7e:ba:96:bf:29:d5:
b3:8f:22:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:04:01 2026 by rpki-client