
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/685b8c27-a767-3702-ae11-c7cb2ff820be.roa
File: 685b8c27-a767-3702-ae11-c7cb2ff820be.roa (raw, json)
Hash identifier: KtFN0KDE60yp93it2Syhijs9g0IH/b7IM+a1jECGK1c=
Subject key identifier: 17:CD:FD:15:9C:A4:0E:A0:93:BA:72:2D:E3:D6:40:39:F4:7E:0A:13
Certificate issuer: /CN=b2959336-6afe-411c-b979-dac0a693f8c4
Certificate serial: 010D0C9F4328584EA79D5B236912D16776CBE5C0
Authority key identifier: 1C:52:30:32:FE:EB:5B:92:6D:5A:2E:35:E5:7C:80:3B:15:E0:32:73
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/685b8c27-a767-3702-ae11-c7cb2ff820be.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 11870
IP address blocks: 167.23.0.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:9d:5b:23:69:12:d1:67:76:cb:e5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2959336-6afe-411c-b979-dac0a693f8c4
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=2da8c8aa-3c62-46d9-b6ea-3bdc0e902618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:67:9e:e5:bc:05:81:4a:1b:6b:a0:fe:a5:37:
21:ec:42:96:d8:81:d4:2d:2b:3f:e5:32:f1:71:e5:
07:4c:62:66:b6:67:70:18:c0:43:09:34:ed:03:f0:
6a:94:02:b1:1f:5b:75:02:33:72:65:bf:80:79:bd:
87:eb:0d:a2:3a:8d:61:aa:13:ec:ee:ff:6a:c5:78:
7f:6b:1f:26:7d:48:31:83:7b:99:9f:c7:f8:9f:d1:
6a:9f:5c:94:e0:c8:66:1f:28:27:b6:63:13:bb:00:
dd:f7:2f:ce:02:64:47:df:81:61:1d:96:62:1f:9f:
8b:9c:49:54:fd:8e:9e:74:0c:0c:e8:aa:17:84:62:
57:64:50:75:9f:be:59:a5:8b:c3:d8:4e:82:98:94:
bd:73:e6:8c:47:6b:13:11:60:66:b8:8b:50:d2:f1:
fe:38:2f:45:6b:c7:6d:14:7c:e1:05:fc:1c:1f:4f:
cd:64:cd:4c:f8:48:61:45:f0:1e:b1:92:73:86:47:
ba:c8:38:89:5e:a0:0c:15:6f:11:e5:e3:19:e9:43:
45:54:15:89:c3:f9:70:86:7f:d5:9d:c2:89:eb:4b:
fa:45:a3:eb:e6:c2:ad:79:14:a9:65:5f:23:c4:fd:
6e:e2:9e:73:6f:05:3e:2e:85:ca:87:1b:9f:27:ef:
d8:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:CD:FD:15:9C:A4:0E:A0:93:BA:72:2D:E3:D6:40:39:F4:7E:0A:13
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/685b8c27-a767-3702-ae11-c7cb2ff820be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.crl
X509v3 Authority Key Identifier:
keyid:1C:52:30:32:FE:EB:5B:92:6D:5A:2E:35:E5:7C:80:3B:15:E0:32:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer
sbgp-ipAddrBlock: critical
IPv4:
167.23.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:c5:dc:1c:1d:44:33:34:16:a5:fd:01:76:d2:ed:8e:97:36:
25:2e:c6:98:4f:31:04:ea:ba:7d:3e:c0:11:6a:1b:2d:31:1f:
46:10:d9:81:55:b9:d5:79:50:a8:bf:35:51:2c:56:9d:79:b1:
fa:a7:09:45:af:ee:68:4d:ca:5d:01:78:06:ac:23:a7:d7:4c:
1b:9f:72:ac:7f:77:2b:8d:fc:4b:8c:ef:5b:d8:4b:2b:50:bb:
d2:f7:db:3d:52:8c:58:78:17:84:b7:e0:04:57:47:3a:a4:16:
38:3b:b7:4c:93:15:01:d1:5c:70:86:9a:e2:da:b3:21:3d:e8:
1a:e2:d2:79:be:03:4b:55:6b:d4:73:ed:88:9d:94:18:d2:c9:
f4:d9:88:a6:e0:7f:60:21:e1:90:d8:dc:2d:05:3b:85:a5:da:
be:a4:c3:e7:14:ab:c2:fc:8c:db:19:97:19:4e:e1:b6:e5:b0:
2e:b7:b5:fa:4e:7f:88:bc:09:b5:05:c2:8c:eb:10:bc:1e:90:
81:60:21:c0:fd:33:c6:62:db:b3:2e:6b:44:0d:56:a6:43:7f:
97:6d:57:1d:d2:24:38:e7:59:6e:25:b1:ad:1a:12:04:cd:68:
90:53:f4:a1:61:ce:3b:f0:aa:87:cc:1b:79:ec:53:a7:2d:4f:
d5:4e:3c:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:35:16 2026 by rpki-client