
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/b5412b7e-037a-30bf-9e17-79943b597ca0.roa
File: b5412b7e-037a-30bf-9e17-79943b597ca0.roa (raw, json)
Hash identifier: RFmc8BsvdOnen3Mzcfd3FPHn3lh9JesP+Rftjhj6xF8=
Subject key identifier: 7A:BD:56:54:18:D5:AD:81:F3:DD:F0:58:87:46:A2:66:2A:0A:D2:DD
Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial: 010D0C9F4328584DE5808B70FC8A601793845300
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/b5412b7e-037a-30bf-9e17-79943b597ca0.roa
Signing time: Wed 20 May 2026 13:00:31 +0000
ROA not before: Wed 20 May 2026 13:00:31 +0000
ROA not after: Tue 18 Aug 2026 13:00:31 +0000
asID: 26471
IP address blocks: 8.8.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 16 Jun 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:e5:80:8b:70:fc:8a:60:17:93:84:53:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Validity
Not Before: May 20 13:00:31 2026 GMT
Not After : Aug 18 13:00:31 2026 GMT
Subject: CN=9b109d5a-b582-4e61-92d9-3b2927068646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b0:ac:38:ba:90:7c:96:ad:c6:0d:93:99:b7:
ee:48:fe:a3:78:a8:13:6b:92:14:4e:61:19:12:4b:
b3:29:90:61:12:85:03:5d:62:24:e9:65:9f:d8:05:
7d:d0:5f:e3:a5:32:fb:29:47:c4:43:de:ae:f8:97:
69:95:8e:36:68:6c:ae:fc:d5:b9:c2:c7:8f:0c:e6:
20:0a:84:d7:19:fd:13:c0:46:ed:c0:c5:c5:0a:67:
83:0e:01:01:c8:f8:12:d1:22:b6:7e:6d:48:33:7f:
e9:07:6a:f4:ef:aa:27:64:3a:41:c0:be:d9:7f:90:
4b:73:84:25:f4:dc:0a:3e:d7:a9:88:c1:aa:66:73:
b3:52:c5:16:0a:59:99:5c:4e:7f:5b:6c:09:e6:da:
87:45:98:07:03:cd:67:91:19:cb:b0:ee:dc:48:83:
bc:af:44:51:5a:24:b2:e6:8d:b4:e2:be:21:e9:31:
7d:ac:ad:0b:0d:1c:1c:e4:a4:eb:4f:0a:9d:31:c6:
53:c3:7b:b7:a8:a0:a0:fc:b0:ee:46:ca:ff:6b:46:
51:9a:9b:33:2a:b5:84:4f:a9:47:a4:d9:82:2f:4d:
f1:5b:26:61:80:05:5e:6f:9f:22:bc:52:86:86:81:
e2:7e:94:ce:97:1d:4d:9b:dd:9a:8c:ff:e4:93:b6:
c2:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:BD:56:54:18:D5:AD:81:F3:DD:F0:58:87:46:A2:66:2A:0A:D2:DD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/b5412b7e-037a-30bf-9e17-79943b597ca0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
X509v3 Authority Key Identifier:
keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
sbgp-ipAddrBlock: critical
IPv4:
8.8.39.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:91:13:62:c4:82:c7:2e:79:83:9c:df:a6:a2:9e:b6:7a:77:
16:ec:04:f1:33:55:73:1c:f9:cb:f0:cd:61:de:b4:c8:1e:57:
33:ad:30:ee:63:b6:53:8e:63:00:ba:ef:1f:32:37:d6:5c:3b:
57:94:67:85:59:a3:b1:2f:aa:0f:fa:77:94:0a:89:e3:49:ac:
00:fb:85:b1:be:cd:2d:95:14:b4:bb:8a:24:c0:bc:31:70:96:
7e:e2:ce:53:9a:60:82:f5:b2:23:4c:0f:6d:af:e5:b0:2c:44:
ca:74:2b:69:72:7c:70:19:97:94:07:e7:da:e6:3e:62:2e:90:
7e:c6:9f:b4:6b:6d:f9:d9:ae:2a:65:c7:0d:fe:2a:c7:ee:a9:
eb:d6:b9:14:01:70:69:fc:4e:38:96:74:f7:5b:82:6f:c7:f0:
b6:9b:4c:02:91:37:36:d3:17:9b:f5:73:d6:ea:f3:3a:a5:f3:
50:ec:3f:79:00:23:a2:25:5c:75:b5:a9:2d:99:51:96:f1:51:
3a:f4:70:e5:ba:6c:a3:b5:1f:bb:56:7b:88:d8:03:24:a2:57:
54:b6:f9:b1:c7:bf:47:aa:27:96:fc:5a:f7:46:70:cd:2a:f0:
f4:86:0e:75:0f:c6:25:77:0e:6e:14:01:ee:dd:bf:bf:d5:83:
2b:75:0b:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:15:06 2026 by rpki-client