
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39cfcd95-1931-4846-b938-e8a3b993f2a8/da50a8cf-2a79-3e92-9fbf-4cbe7954bb9c.roa
File: da50a8cf-2a79-3e92-9fbf-4cbe7954bb9c.roa (raw, json)
Hash identifier: 5ino0xv26YDOqm2ZtWRSp45oQ8R7BmKUco+xdTR+qoQ=
Subject key identifier: 5B:84:83:1A:37:48:AA:C6:B2:F4:6E:1B:58:21:0F:14:34:2A:E1:5C
Certificate issuer: /CN=39cfcd95-1931-4846-b938-e8a3b993f2a8
Certificate serial: 010D0C9F4328584EA788460A95D08666E6BD5080
Authority key identifier: A6:1B:F9:85:3A:1E:5C:B3:ED:13:85:38:AA:19:47:1F:11:40:E8:39
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39cfcd95-1931-4846-b938-e8a3b993f2a8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39cfcd95-1931-4846-b938-e8a3b993f2a8/da50a8cf-2a79-3e92-9fbf-4cbe7954bb9c.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 63023
IP address blocks: 23.137.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39cfcd95-1931-4846-b938-e8a3b993f2a8/39cfcd95-1931-4846-b938-e8a3b993f2a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39cfcd95-1931-4846-b938-e8a3b993f2a8/39cfcd95-1931-4846-b938-e8a3b993f2a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39cfcd95-1931-4846-b938-e8a3b993f2a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 21 Sep 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:88:46:0a:95:d0:86:66:e6:bd:50:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39cfcd95-1931-4846-b938-e8a3b993f2a8
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=ff4726d2-08e0-431f-9b4a-2298150ab827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:60:b3:f6:48:fa:8b:b8:28:36:37:52:dd:81:
8a:57:b4:a0:da:d6:20:1d:a4:fc:c8:63:5e:14:dd:
aa:d3:d2:8a:eb:98:84:be:0c:c2:3f:af:a4:02:f6:
c0:6e:f3:d7:3c:cc:7c:98:fd:15:7d:86:a0:75:b0:
49:56:df:df:5c:54:af:24:4e:62:3f:5e:04:02:4d:
2b:91:bb:26:06:04:9d:d5:57:40:63:ab:a5:a9:b4:
6b:f3:4f:8e:9c:15:da:37:6e:f4:db:3b:26:15:1c:
35:66:68:71:e6:84:0f:f0:b0:77:cf:a6:8f:23:8e:
12:50:64:2f:73:85:4a:b3:44:70:3c:b4:fd:c0:59:
9f:95:39:19:ff:bc:0e:1d:6b:28:2d:86:ba:93:07:
b1:aa:fe:3a:5f:24:32:99:0c:67:39:1f:c6:d2:81:
51:75:cf:82:b3:d2:26:f5:b1:1c:41:66:7f:f9:4c:
72:df:39:25:df:ae:34:fe:de:40:88:d9:f6:8d:9f:
d8:c9:12:e9:2f:e7:96:b7:87:03:d2:e4:30:34:9f:
11:21:b3:81:d3:74:92:98:db:33:59:52:a3:f3:ce:
5c:4d:32:77:a1:dc:d1:31:67:c0:e0:63:83:cd:bf:
55:82:55:fe:f9:74:b3:3f:c7:38:be:c0:6e:3d:e1:
83:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:84:83:1A:37:48:AA:C6:B2:F4:6E:1B:58:21:0F:14:34:2A:E1:5C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39cfcd95-1931-4846-b938-e8a3b993f2a8/da50a8cf-2a79-3e92-9fbf-4cbe7954bb9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39cfcd95-1931-4846-b938-e8a3b993f2a8/39cfcd95-1931-4846-b938-e8a3b993f2a8.crl
X509v3 Authority Key Identifier:
keyid:A6:1B:F9:85:3A:1E:5C:B3:ED:13:85:38:AA:19:47:1F:11:40:E8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39cfcd95-1931-4846-b938-e8a3b993f2a8.cer
sbgp-ipAddrBlock: critical
IPv4:
23.137.4.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:1c:3a:8f:5a:f8:bc:42:f2:56:94:44:e5:c8:b4:58:45:4d:
63:4c:f4:53:15:64:e0:2c:27:bc:87:31:f5:a1:32:55:4a:3a:
43:f2:40:98:ca:30:a6:07:42:1d:0c:04:bb:bb:b4:c4:76:d1:
1f:dd:63:51:45:e1:e8:e8:a2:85:c0:5c:94:9b:29:f1:b2:1a:
85:f4:56:0d:33:b4:5a:0b:c2:69:53:58:17:44:34:3e:07:f2:
f1:dc:13:e0:cc:d6:22:3a:73:96:1e:b4:0b:75:de:d4:9a:15:
0f:81:77:2b:2b:d7:35:a8:71:4a:9f:ee:6e:b6:74:3b:44:07:
24:7d:63:3a:77:55:a0:7e:ee:2b:cc:d3:be:e1:44:eb:84:f9:
4e:ef:c1:9b:c8:10:56:10:41:77:be:02:26:09:be:95:3b:91:
95:10:86:9e:de:e5:20:f2:3a:e9:ef:aa:c7:cf:84:95:29:ef:
e3:8c:14:1b:ad:3c:5b:4a:48:1d:0f:f7:46:69:cf:09:ab:d8:
b9:e3:ae:a8:c1:22:32:6b:7d:bf:a5:ac:18:a2:49:ad:86:dc:
dd:19:82:39:0b:33:c2:dc:15:52:8f:e7:a4:50:25:f6:31:54:
88:e3:df:28:b9:cd:1e:39:e7:50:5b:6c:c2:1d:15:f9:07:9a:
d2:6d:f0:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 16:19:59 2026 by rpki-client