
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/1cc4c588-ac6f-342e-b7e5-826efa3a27bf.roa
File: 1cc4c588-ac6f-342e-b7e5-826efa3a27bf.roa (raw, json)
Hash identifier: KhpuT97+fEh87aC1OhvyXzHSFsVhOZx6Q1rzXrV68IU=
Subject key identifier: 3F:05:8E:77:86:65:B9:91:D5:F9:EB:12:D7:AA:40:FE:2E:A9:9F:2E
Certificate issuer: /CN=b2959336-6afe-411c-b979-dac0a693f8c4
Certificate serial: 010D0C9F4328584F497699061F9DD03AF6C48500
Authority key identifier: 1C:52:30:32:FE:EB:5B:92:6D:5A:2E:35:E5:7C:80:3B:15:E0:32:73
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/1cc4c588-ac6f-342e-b7e5-826efa3a27bf.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 11870
IP address blocks: 167.23.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 09 Oct 2026 08:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:76:99:06:1f:9d:d0:3a:f6:c4:85:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2959336-6afe-411c-b979-dac0a693f8c4
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=e6034d63-8f7a-4c81-93e1-00f6f03e4ed3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:73:73:23:0c:42:34:17:11:a9:bb:c0:ed:6b:
2a:28:0d:cb:31:04:80:d3:4a:1f:3e:18:ec:d6:43:
c2:d8:7b:db:da:62:34:db:5f:47:b8:79:aa:ae:61:
8c:12:36:92:03:6e:8a:b2:6b:5e:7d:fc:8f:03:d0:
6f:43:ae:30:82:23:5f:da:3b:e9:19:5a:9e:44:e9:
e7:44:e0:c8:2f:82:9a:0c:81:c2:ce:20:63:9c:c0:
7d:f3:7b:14:15:7f:f2:68:4b:3f:e5:51:58:58:36:
32:34:2b:43:92:71:7e:c6:af:dc:29:2b:58:66:10:
04:34:70:21:e8:3c:79:6e:56:ab:42:42:8b:2c:b6:
13:5f:c6:62:c0:9b:33:88:b6:b4:6e:26:4a:c6:be:
a4:99:da:84:34:ae:37:72:69:2f:ff:e7:3e:00:21:
5d:41:e7:90:5e:4b:13:0d:ee:80:61:a1:05:4a:e3:
94:1a:f1:74:5d:02:90:a1:c4:05:59:43:65:30:18:
85:a9:a0:72:80:7d:a5:9e:15:13:b2:59:a1:ef:a6:
76:2d:3e:84:0c:dc:97:f5:87:5f:df:40:18:88:33:
4f:cf:d1:28:fa:5e:a9:29:ef:e8:e3:05:80:ab:e3:
b6:fd:1d:f7:d1:f8:fb:8d:8f:a9:89:20:13:e5:94:
0d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:05:8E:77:86:65:B9:91:D5:F9:EB:12:D7:AA:40:FE:2E:A9:9F:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/1cc4c588-ac6f-342e-b7e5-826efa3a27bf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.crl
X509v3 Authority Key Identifier:
keyid:1C:52:30:32:FE:EB:5B:92:6D:5A:2E:35:E5:7C:80:3B:15:E0:32:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer
sbgp-ipAddrBlock: critical
IPv4:
167.23.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:4e:a2:5b:33:66:a6:cb:81:0e:75:d0:23:2f:af:e4:d9:d6:
d4:00:1e:1e:54:4a:da:04:75:0b:6c:42:d3:4d:81:60:7c:d6:
9d:8a:2e:ec:a4:3e:94:a8:8a:a3:e3:c9:e6:37:9c:34:17:11:
9b:04:3e:86:47:16:9a:fe:c5:1e:20:3a:63:8f:87:f1:5e:00:
8d:e0:46:c0:84:f2:81:10:e3:27:17:e7:bb:a6:04:f5:25:d6:
30:54:33:1e:9a:c3:68:29:6c:c6:37:09:8e:54:15:7f:7a:c3:
f2:df:60:4f:c2:2b:55:03:6b:84:b8:d7:30:5a:ba:24:3a:cc:
20:b6:53:aa:93:bd:92:9c:8a:ba:1b:ff:c1:bf:71:da:80:0a:
b1:5a:28:47:a9:33:8e:30:1d:70:a6:9e:72:c1:11:ff:44:4b:
9d:2f:15:a8:2d:74:26:74:44:75:37:f5:d5:3d:85:64:b3:80:
58:21:a8:2c:1b:07:b5:0c:75:47:7a:48:c9:2f:2e:d7:b5:29:
a9:fd:31:1b:0a:56:8e:40:6c:3a:95:fe:20:5b:3d:9f:4b:72:
7f:4a:d2:f7:03:33:3a:92:7b:c1:f7:1d:dd:e6:d7:ec:b1:2a:
3a:3d:75:33:53:a6:3b:0d:d8:2a:c8:9b:42:50:b6:ae:60:5b:
3c:6c:a8:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 09:25:34 2026 by rpki-client