
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5374fee3-bd0b-3e1e-8cca-70a84d6a0ea4.roa
File: 5374fee3-bd0b-3e1e-8cca-70a84d6a0ea4.roa (raw, json)
Hash identifier: w80qTJPi8bhSnFmj0gjo91/qSSarZiVQilyVv45CHpQ=
Subject key identifier: B2:62:5A:28:FA:F4:10:6C:AA:A9:D8:17:E3:36:98:9E:EF:82:BB:C3
Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial: 010D0C9F4328584F067295202696BE9D5392E8C0
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5374fee3-bd0b-3e1e-8cca-70a84d6a0ea4.roa
Signing time: Tue 01 Sep 2026 01:00:12 +0000
ROA not before: Tue 01 Sep 2026 01:00:12 +0000
ROA not after: Mon 30 Nov 2026 02:00:12 +0000
asID: 2856
IP address blocks: 23.27.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:06:72:95:20:26:96:be:9d:53:92:e8:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
Validity
Not Before: Sep 1 01:00:12 2026 GMT
Not After : Nov 30 02:00:12 2026 GMT
Subject: CN=de9d0a31-fd3a-4721-ad3b-b8d121e9f442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:55:d4:11:36:7a:22:14:17:6f:69:1e:be:24:
8c:f5:50:59:9a:7f:f3:0a:83:1f:bf:64:df:af:76:
fc:b5:a6:15:33:84:c3:71:26:82:4e:92:9b:cb:17:
df:29:38:9c:13:96:e6:57:43:a6:32:1e:39:68:6b:
fd:34:e3:dd:94:81:1d:61:a7:36:ab:3e:c4:37:3b:
75:b6:e9:48:75:e1:1e:bc:8e:d1:d2:ea:75:f7:50:
84:4a:92:3d:e7:0f:c6:ff:51:a2:f8:e4:0d:9e:e2:
69:bc:b9:89:2a:4f:32:7b:c6:5f:14:36:37:8d:8a:
89:ed:cb:e4:9e:b5:40:ae:e3:a7:64:45:c4:61:46:
49:b6:23:66:c8:62:f8:9e:ea:fe:8c:c7:07:89:b8:
56:ff:81:13:ad:9a:4a:cf:c7:04:e4:9c:d2:2a:50:
1e:8e:09:b3:c8:9f:1d:2b:2b:d6:cb:32:ba:9a:40:
ff:1f:b9:dd:c5:dd:e1:f9:e8:0d:29:0f:00:73:ca:
92:32:85:e5:54:8c:19:24:33:fc:95:4f:c7:3f:af:
4a:cb:b1:35:d2:d1:45:fc:39:2a:21:0b:56:70:4f:
7a:81:4f:0e:17:1a:31:14:6a:e6:b5:ad:06:92:fe:
65:8c:2f:30:34:7d:e0:68:a7:f3:13:b8:04:86:2f:
74:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:62:5A:28:FA:F4:10:6C:AA:A9:D8:17:E3:36:98:9E:EF:82:BB:C3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5374fee3-bd0b-3e1e-8cca-70a84d6a0ea4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
X509v3 Authority Key Identifier:
keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
sbgp-ipAddrBlock: critical
IPv4:
23.27.108.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:c6:b2:39:03:5d:ad:07:d3:3a:19:11:5b:de:bc:77:8c:3a:
ad:e7:d3:26:3e:dd:f0:ef:6b:1d:29:0b:fa:6a:d6:ba:d8:c7:
e2:11:35:10:8e:64:8c:e4:0b:de:13:8d:1c:59:55:e0:54:24:
f9:25:5a:da:43:c1:82:ff:fe:0b:12:fb:2c:51:41:a0:c6:94:
3f:93:24:b7:13:a2:dc:69:a4:c7:06:0f:1a:5d:bb:c0:8c:2f:
a8:1c:37:56:c0:2e:85:9d:39:3d:0e:f3:1e:d1:74:75:19:69:
f7:ca:41:0e:06:f5:5e:bc:5f:01:b4:cb:79:2f:5a:32:c8:8e:
6d:1c:12:ec:68:93:b0:9c:41:ff:00:58:a4:0f:51:91:0e:b0:
18:4d:81:00:42:2d:12:bf:7e:5f:8d:57:9e:72:3b:ac:79:30:
24:99:0a:10:98:2b:10:9c:70:0a:61:da:61:c2:6b:39:52:b6:
87:87:d4:93:c7:0e:fc:98:47:7a:c6:f0:1e:ed:c8:9b:8b:62:
dd:ae:d3:8f:58:91:96:02:02:2c:f4:13:9e:55:f4:67:a7:b0:
02:9e:25:1a:c1:43:16:c8:4a:fb:78:22:1a:da:36:04:a0:9a:
3d:b8:bd:6f:e7:f6:4f:04:57:5b:ff:d3:fc:11:5b:7e:4b:af:
84:69:20:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:39:26 2026 by rpki-client