
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cfaaed90-ce68-4e22-870b-7b7d86e949e0/eb089fd3-de83-32fc-94eb-491970ba886f.roa
File: eb089fd3-de83-32fc-94eb-491970ba886f.roa (raw, json)
Hash identifier: MDdXNQfl1YAtg7IccgM530AYjQ8UDiVOP9W2dtHBqr0=
Subject key identifier: E6:DD:4D:14:E8:09:EE:79:67:64:C9:EB:40:5B:F4:68:C1:B5:20:BD
Certificate issuer: /CN=cfaaed90-ce68-4e22-870b-7b7d86e949e0
Certificate serial: 010D0C9F4328584D465F8FCF848557028AABFA00
Authority key identifier: 43:57:76:F1:A0:91:41:12:89:EA:7C:30:5A:AD:E0:81:03:40:5E:27
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cfaaed90-ce68-4e22-870b-7b7d86e949e0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cfaaed90-ce68-4e22-870b-7b7d86e949e0/eb089fd3-de83-32fc-94eb-491970ba886f.roa
Signing time: Tue 24 Mar 2026 13:00:41 +0000
ROA not before: Tue 24 Mar 2026 13:00:41 +0000
ROA not after: Mon 22 Jun 2026 13:00:41 +0000
asID: 9318
IP address blocks: 23.142.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cfaaed90-ce68-4e22-870b-7b7d86e949e0/cfaaed90-ce68-4e22-870b-7b7d86e949e0.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cfaaed90-ce68-4e22-870b-7b7d86e949e0/cfaaed90-ce68-4e22-870b-7b7d86e949e0.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cfaaed90-ce68-4e22-870b-7b7d86e949e0.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 23:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:46:5f:8f:cf:84:85:57:02:8a:ab:fa:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfaaed90-ce68-4e22-870b-7b7d86e949e0
Validity
Not Before: Mar 24 13:00:41 2026 GMT
Not After : Jun 22 13:00:41 2026 GMT
Subject: CN=648c835d-3f3c-478e-8b03-a8ee823162b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:44:34:92:84:1c:b9:27:7a:68:02:23:d7:9c:
13:65:14:ef:9a:b3:bb:12:46:84:5e:6f:44:15:57:
74:51:0e:70:81:c1:cc:16:03:c6:3f:3d:a3:f8:91:
8e:45:87:09:67:28:bc:6c:84:5b:4a:3b:48:03:1f:
55:ae:62:e5:ad:01:d5:2d:d7:09:f0:20:12:12:6e:
7d:0d:c4:f8:c9:60:18:f1:e5:05:77:a0:4f:ce:ff:
04:a2:e7:76:3f:7d:28:41:b7:78:5c:a1:d6:f0:c9:
75:b9:95:ee:fe:3e:08:2a:3c:81:eb:9e:92:50:3a:
40:02:8a:ae:58:04:79:0d:13:ee:5b:84:a4:31:fd:
00:ba:7a:8e:b5:59:08:a6:96:67:3c:7f:ec:e2:e2:
d1:d7:9f:31:48:b3:6f:d9:d7:8f:75:26:6c:01:0d:
2b:3c:e5:87:91:87:62:92:80:ba:a4:09:4c:fd:0f:
6e:26:4e:79:a4:d1:1f:04:8c:df:8f:65:db:79:a7:
72:18:1e:e5:fd:a9:6b:22:8c:fc:e5:ec:e2:50:16:
6c:0a:43:fe:12:ae:89:df:88:e8:53:98:04:c1:48:
47:f0:e9:c7:51:68:67:e4:61:06:c2:ed:0f:43:9b:
a1:57:7d:95:3c:78:f0:a8:db:f4:1f:e5:01:8f:0b:
7b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:DD:4D:14:E8:09:EE:79:67:64:C9:EB:40:5B:F4:68:C1:B5:20:BD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cfaaed90-ce68-4e22-870b-7b7d86e949e0/eb089fd3-de83-32fc-94eb-491970ba886f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cfaaed90-ce68-4e22-870b-7b7d86e949e0/cfaaed90-ce68-4e22-870b-7b7d86e949e0.crl
X509v3 Authority Key Identifier:
keyid:43:57:76:F1:A0:91:41:12:89:EA:7C:30:5A:AD:E0:81:03:40:5E:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cfaaed90-ce68-4e22-870b-7b7d86e949e0.cer
sbgp-ipAddrBlock: critical
IPv4:
23.142.12.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a8:09:40:57:d2:d2:f0:51:4e:9e:e3:fa:1c:15:7a:26:6d:88:
23:d3:af:62:f0:86:37:92:31:a8:42:ab:24:c4:dd:dc:93:7c:
07:6f:71:bd:7f:c9:b7:84:7c:16:4e:0b:18:af:91:4b:50:27:
cd:4c:5a:73:58:7a:ab:a4:17:94:2f:91:ad:b2:4c:60:b3:8c:
f9:8e:96:62:28:aa:d5:47:e5:4d:41:d2:06:75:08:8d:20:25:
97:08:15:6c:3c:8c:3b:98:d6:9f:e2:b0:0f:e3:68:ea:1b:c3:
04:c9:7f:62:13:4d:b1:99:a2:1b:4a:97:52:15:01:c5:be:24:
df:1b:b1:a0:e9:20:4d:2e:b1:cc:8a:55:ce:ce:98:bd:87:b3:
90:dd:05:2b:24:b3:a4:e3:f9:43:f5:4d:b8:76:1f:98:77:e4:
fa:bb:16:8e:c2:e9:b9:59:0b:b0:3d:0a:74:35:71:1a:20:ab:
4b:10:46:7e:b5:22:23:cd:b1:f0:84:fc:73:fb:42:12:80:c0:
96:ad:79:e5:a7:2b:b5:40:62:18:28:ee:a7:44:6b:5e:92:9a:
15:1d:6e:81:eb:e3:0b:3f:dd:7e:d0:12:34:b0:28:12:3c:36:
83:f5:c0:4d:a3:04:7c:2b:7c:e8:20:95:aa:9a:16:8f:cd:c8:
7d:2f:ea:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:24:50 2026 by rpki-client