
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/aab7b42d-fa7a-3ddf-852b-515f2ce48610.roa
File: aab7b42d-fa7a-3ddf-852b-515f2ce48610.roa (raw, json)
Hash identifier: XT87d+X3tJQ5RtmDUstid7mOZO9HXb6GUdWFxdUfRNs=
Subject key identifier: BD:B2:4A:4D:E8:47:D4:8B:F2:F6:6F:8A:B7:28:69:1D:92:FF:D5:C4
Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial: 010D0C9F4328584E9BE52FCEDF821E635D095A00
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/aab7b42d-fa7a-3ddf-852b-515f2ce48610.roa
Signing time: Fri 24 Jul 2026 21:00:12 +0000
ROA not before: Fri 24 Jul 2026 21:00:12 +0000
ROA not after: Thu 22 Oct 2026 21:00:12 +0000
asID: 400866
IP address blocks: 23.251.53.0/24 maxlen: 24
23.251.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:9b:e5:2f:ce:df:82:1e:63:5d:09:5a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Validity
Not Before: Jul 24 21:00:12 2026 GMT
Not After : Oct 22 21:00:12 2026 GMT
Subject: CN=872c6352-33d5-4730-912b-33dc7314d92f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:4b:42:3c:8c:bd:fa:98:ed:56:cc:8d:71:58:
53:46:7c:e0:4a:1c:ed:c2:11:d7:5d:8b:8a:2c:ef:
06:ef:c3:53:b6:23:d5:b8:f1:64:ab:60:63:98:f9:
b8:07:f5:b9:6a:c7:f1:36:15:d0:c8:ae:1a:f4:31:
60:dc:70:4f:b5:e4:6a:bf:12:13:ad:e4:81:9c:cb:
af:0c:2a:55:30:49:02:08:05:b6:fa:70:f1:3e:48:
bb:28:0c:1b:24:38:cf:8f:74:a9:2f:73:03:f1:b8:
58:3e:f7:9c:18:94:04:cf:d6:65:ad:5b:54:b8:2d:
5e:56:f7:ee:d3:be:05:8f:a0:78:4d:42:7e:8d:02:
02:3e:b0:bb:5d:73:34:92:24:d7:12:f7:7b:46:8d:
58:53:49:f7:45:ee:d3:6f:57:65:bd:87:77:66:d9:
76:94:24:dd:dc:15:57:a0:7d:9f:a0:97:e2:aa:14:
4b:13:d7:43:88:f8:b7:6e:dc:30:dc:84:eb:5b:a3:
f1:1a:ec:84:ed:39:40:79:11:8e:73:76:14:93:44:
03:a9:a1:f7:66:5e:97:b2:50:06:96:78:fd:ca:6a:
ce:b2:9a:3d:14:61:c3:2a:d8:ef:f9:6a:d0:5e:dc:
2f:9f:6b:de:c4:a0:ed:b9:12:97:f0:78:13:77:33:
14:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:B2:4A:4D:E8:47:D4:8B:F2:F6:6F:8A:B7:28:69:1D:92:FF:D5:C4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/aab7b42d-fa7a-3ddf-852b-515f2ce48610.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl
X509v3 Authority Key Identifier:
keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
sbgp-ipAddrBlock: critical
IPv4:
23.251.53.0-23.251.54.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:5c:a9:0c:29:65:a7:39:a7:cc:1b:87:5b:63:e2:96:ba:14:
11:0a:7f:89:e5:5f:34:c4:5d:97:15:39:b9:17:b7:0b:a3:0d:
43:d2:be:12:87:55:f3:52:da:57:00:49:5d:ea:cd:ec:50:a2:
3c:8e:74:4e:73:90:53:bb:d6:31:8c:99:59:77:33:77:a5:6d:
9e:60:3b:cd:d6:fc:8b:f2:ae:69:b9:65:81:e4:a3:b0:5a:ae:
d7:22:bb:c1:00:b3:eb:66:64:cb:bb:85:97:3c:d7:ec:fd:ac:
f3:b1:9c:29:1a:59:76:27:a2:a7:9f:2c:fd:de:08:78:14:0b:
eb:32:27:fc:ae:30:ea:d2:e6:0e:05:25:2f:7a:0c:f0:16:ab:
d7:0c:f6:c2:6d:bc:77:1e:a5:fd:74:01:51:e3:69:b9:8c:c3:
02:49:b5:4a:54:39:3c:7a:69:7f:04:af:bb:40:f6:a5:70:3c:
3a:a4:c3:ef:46:25:27:57:65:41:46:13:08:17:49:be:eb:04:
99:f9:3a:3e:2a:a8:88:e8:97:fd:19:cf:1a:e8:0f:b6:2e:c6:
90:1e:59:df:87:f9:75:c9:58:75:d8:12:16:0c:f8:8c:ee:61:
f2:0a:c6:a7:1f:d4:b7:4c:ff:10:c0:34:45:59:fe:ae:e5:e8:
44:d4:d6:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:02:53 2026 by rpki-client