
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/69494d8e-96f3-3097-9ab3-f5f01f8b4789.roa
File: 69494d8e-96f3-3097-9ab3-f5f01f8b4789.roa (raw, json)
Hash identifier: NFkk/fYCMvkEttOdf+SuP/Jf37mnS0YfT5VuqCv78ug=
Subject key identifier: 65:39:A2:C6:A2:EE:7F:D1:0D:9C:02:F1:9D:11:96:BC:2E:E3:94:37
Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial: 010D0C9F4328584F20F7C0A68B359A5C79DA7F80
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/69494d8e-96f3-3097-9ab3-f5f01f8b4789.roa
Signing time: Thu 10 Sep 2026 13:00:12 +0000
ROA not before: Thu 10 Sep 2026 13:00:12 +0000
ROA not after: Wed 09 Dec 2026 14:00:12 +0000
asID: 3356
IP address blocks: 207.83.32.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 14 Oct 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:20:f7:c0:a6:8b:35:9a:5c:79:da:7f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Validity
Not Before: Sep 10 13:00:12 2026 GMT
Not After : Dec 9 14:00:12 2026 GMT
Subject: CN=1f987b9c-2058-4a90-90ad-50ee8e9f4089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:82:d3:94:46:7d:0e:8e:3d:1a:14:c5:44:68:
7a:81:17:10:16:ae:48:af:9a:05:54:10:d2:3a:ba:
7b:14:d5:97:f6:f7:a2:b7:65:97:4c:a2:cb:a4:b8:
02:e9:16:4c:78:31:1f:de:bc:b6:c9:d6:f3:36:a2:
3a:72:9f:20:19:b1:b0:31:19:52:ea:9f:ff:a5:81:
9b:be:99:f8:4b:aa:94:7c:b6:42:7c:bf:21:d6:64:
4d:3a:4b:f7:c4:ad:c7:50:fa:33:21:5a:06:10:e0:
3d:e2:73:42:61:22:b5:84:cc:9b:16:d9:34:70:c3:
2e:9c:c4:eb:df:85:8d:29:b5:9d:ad:78:dc:58:bc:
7e:5e:e0:72:b6:a5:3b:35:ef:53:1c:8b:fa:1e:4b:
19:87:cc:a7:e9:ce:57:90:e4:a6:70:db:34:50:be:
25:f6:4f:46:70:31:3a:fa:fc:14:7c:74:78:ce:1b:
71:79:8b:e9:19:d6:bd:72:f5:84:e5:32:77:44:69:
ae:95:3c:ae:73:f0:c9:85:57:0a:6f:be:9e:25:df:
96:19:54:18:07:8c:46:bb:d2:59:5f:4e:2e:79:f7:
61:fc:45:f7:ba:19:74:7a:f4:90:10:14:61:89:fb:
85:3e:77:89:3a:70:3f:fb:e7:c8:36:76:c9:34:a4:
6f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:39:A2:C6:A2:EE:7F:D1:0D:9C:02:F1:9D:11:96:BC:2E:E3:94:37
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/69494d8e-96f3-3097-9ab3-f5f01f8b4789.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
X509v3 Authority Key Identifier:
keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
sbgp-ipAddrBlock: critical
IPv4:
207.83.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:f1:03:56:6a:e7:e3:52:34:fa:58:50:3b:f4:e6:9b:7d:e3:
f3:74:37:b8:4a:c5:04:81:20:fb:d4:a2:c7:2f:40:64:0d:78:
7d:4c:98:3c:51:76:cd:03:a3:58:96:3d:dd:d5:c3:93:2a:a8:
88:14:07:da:d0:e7:a2:a8:77:22:62:85:2a:ce:0d:c7:49:27:
93:0f:ff:8f:dd:ab:ee:fb:9a:7e:d5:e6:8e:d3:b0:7f:fb:16:
20:52:e8:fc:5b:bc:64:b7:07:31:9b:7a:05:03:e5:07:d7:12:
85:80:ce:95:65:d3:6d:1b:fa:8a:94:92:9f:3c:ff:9a:35:e2:
db:ad:cf:cd:6e:7c:3a:6e:7d:08:0d:ea:4f:0d:54:11:13:93:
68:56:ff:90:b9:b5:2b:9f:7e:46:e5:82:39:e1:ef:ba:d0:fb:
1e:a2:e2:a6:76:1f:b8:3b:03:36:57:df:89:2a:96:2e:d8:78:
c0:08:54:65:b9:94:5a:dc:1e:cc:29:06:ae:bd:31:d7:88:5c:
85:34:7c:d0:33:10:cc:3f:58:92:c9:8f:c4:73:bc:8e:4f:17:
64:d0:ef:60:dd:92:75:6c:f9:d2:02:e8:4c:3e:20:47:61:de:
ef:31:bb:7d:73:19:c9:90:fc:d5:64:ff:3f:cd:45:85:a2:4e:
b6:be:89:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 00:24:14 2026 by rpki-client