
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/ebf4a167-6c73-3edd-af45-23d53c1ff0f1.roa
File: ebf4a167-6c73-3edd-af45-23d53c1ff0f1.roa (raw, json)
Hash identifier: 15VFD9amiz9JGBg0lJqxxK8Tly+VxFe5/jyOee8dbmI=
Subject key identifier: 45:FD:3E:B3:04:25:7C:D5:44:3A:A1:34:80:4B:C7:0F:F5:26:B7:A3
Certificate issuer: /CN=eff73345-b771-45fd-be81-1f41a7f777ec
Certificate serial: 010D0C9F4328584EA79430FE17F71C17020461A0
Authority key identifier: 9A:65:3F:69:7C:72:6A:FD:22:B4:20:19:C1:45:30:96:4D:15:72:46
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/ebf4a167-6c73-3edd-af45-23d53c1ff0f1.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 36168
IP address blocks: 23.175.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/eff73345-b771-45fd-be81-1f41a7f777ec.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/eff73345-b771-45fd-be81-1f41a7f777ec.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:94:30:fe:17:f7:1c:17:02:04:61:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eff73345-b771-45fd-be81-1f41a7f777ec
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=852d99c8-3543-4494-b6ac-761bd69c3853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fb:b8:2b:b3:bc:c3:fb:8a:8b:2e:23:e3:49:
ff:e1:a2:2a:92:27:04:88:64:45:3e:a0:36:67:a1:
04:69:7d:e9:a5:c2:73:33:a5:2f:27:3c:e7:43:ad:
d4:58:e1:5a:d1:4a:cd:24:89:d1:60:a1:9d:c8:21:
ac:2f:f8:32:78:f9:81:a3:33:6d:74:82:fc:e5:0f:
2b:fa:38:30:db:85:6a:b4:b4:90:4a:29:75:00:53:
2a:d8:9b:81:9d:c7:4d:19:81:d7:e3:a5:2a:b5:0f:
21:c2:b9:9f:c5:35:a7:d8:bd:63:a1:87:14:7a:43:
38:fc:81:c8:44:b0:72:3a:aa:34:aa:c6:5b:5d:95:
c3:35:71:fb:19:a5:15:9a:20:42:33:27:f5:89:de:
57:10:ec:48:29:b1:ee:e9:be:db:7b:0e:3a:f2:4c:
c7:81:9f:cf:7d:f6:66:a6:29:a9:28:a8:26:72:5d:
3c:49:0b:19:00:b0:9d:a1:e2:c0:2a:4b:d1:2d:cf:
e5:e2:3d:4c:09:f6:f1:6c:37:63:41:06:2d:9b:2d:
59:26:be:df:23:96:77:4d:b8:2d:b3:c3:15:9f:7c:
59:24:d1:11:3a:42:4f:2c:82:b6:17:61:87:4a:b0:
fa:af:12:da:c2:09:b9:1f:d5:20:4d:65:2b:f8:d7:
ca:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:FD:3E:B3:04:25:7C:D5:44:3A:A1:34:80:4B:C7:0F:F5:26:B7:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/ebf4a167-6c73-3edd-af45-23d53c1ff0f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec/eff73345-b771-45fd-be81-1f41a7f777ec.crl
X509v3 Authority Key Identifier:
keyid:9A:65:3F:69:7C:72:6A:FD:22:B4:20:19:C1:45:30:96:4D:15:72:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/eff73345-b771-45fd-be81-1f41a7f777ec.cer
sbgp-ipAddrBlock: critical
IPv4:
23.175.120.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:0e:a2:6b:5e:d3:3c:05:20:39:55:35:72:82:7b:78:08:b9:
17:99:03:f5:86:77:5d:e6:67:99:48:d0:40:bf:3d:f9:bd:f2:
3b:71:02:86:a0:4f:82:a0:b2:7c:32:d2:3d:a0:44:ca:6b:c1:
4f:81:18:82:e1:26:55:ef:32:bd:20:25:ee:cc:b7:ac:c1:cf:
0f:09:b8:83:e8:0e:25:0a:31:4c:2e:02:2b:a5:e9:f7:35:3c:
34:aa:61:99:71:94:91:0b:62:e4:97:ae:90:46:81:c6:91:c0:
f5:c3:5c:be:52:86:07:51:3e:7b:37:a9:7b:86:7f:5b:f9:43:
3b:0a:9c:f8:07:94:e2:f0:eb:a6:fa:50:31:d3:7f:ac:ee:8d:
e3:5b:aa:fc:a8:57:f1:51:7e:f1:13:f7:0f:99:d5:1e:94:8c:
f0:b9:6b:a0:fc:1f:15:6d:89:a8:e9:97:d9:54:63:50:32:48:
01:5d:59:c7:43:81:07:69:77:e2:bc:e2:3e:34:be:e0:9e:06:
e4:d4:cc:98:ad:49:67:75:84:c2:cc:b8:f0:25:0c:4b:e7:2a:
26:1e:97:07:0f:37:e2:3d:83:c3:8a:f2:79:18:b7:9e:57:b9:
ab:b2:72:d4:dc:2f:b1:7b:b2:85:46:2f:61:ac:82:5d:c0:a1:
73:18:38:f0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nlDD+F/ccFwIEYaAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWZmNzMzNDUtYjc3MS00NWZkLWJlODEtMWY0MWE3Zjc3
N2VjMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
ODUyZDk5YzgtMzU0My00NDk0LWI2YWMtNzYxYmQ2OWMzODUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvu4K7O8w/uKiy4j40n/4aIqkicEiGRFPqA2
Z6EEaX3ppcJzM6UvJzznQ63UWOFa0UrNJInRYKGdyCGsL/gyePmBozNtdIL85Q8r
+jgw24VqtLSQSil1AFMq2JuBncdNGYHX46UqtQ8hwrmfxTWn2L1joYcUekM4/IHI
RLByOqo0qsZbXZXDNXH7GaUVmiBCMyf1id5XEOxIKbHu6b7bew468kzHgZ/PffZm
pimpKKgmcl08SQsZALCdoeLAKkvRLc/l4j1MCfbxbDdjQQYtmy1ZJr7fI5Z3Tbgt
s8MVn3xZJNEROkJPLIK2F2GHSrD6rxLawgm5H9UgTWUr+NfK9wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEX9PrMEJXzVRDqhNIBLxw/1JrejMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lZmY3
MzM0NS1iNzcxLTQ1ZmQtYmU4MS0xZjQxYTdmNzc3ZWMvZWJmNGExNjctNmM3My0z
ZWRkLWFmNDUtMjNkNTNjMWZmMGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZWZmNzMzNDUtYjc3MS00NWZkLWJl
ODEtMWY0MWE3Zjc3N2VjL2VmZjczMzQ1LWI3NzEtNDVmZC1iZTgxLTFmNDFhN2Y3
NzdlYy5jcmwwHwYDVR0jBBgwFoAUmmU/aXxyav0itCAZwUUwlk0VckYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9lZmY3MzM0NS1iNzcxLTQ1ZmQtYmU4MS0xZjQx
YTdmNzc3ZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF694MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADQOomte0zwFIDlVNXKCe3gIuReZA/WGd13mZ5lI0EC/Pfm98jtxAoag
T4Kgsnwy0j2gRMprwU+BGILhJlXvMr0gJe7Mt6zBzw8JuIPoDiUKMUwuAiul6fc1
PDSqYZlxlJELYuSXrpBGgcaRwPXDXL5ShgdRPns3qXuGf1v5QzsKnPgHlOLw66b6
UDHTf6zujeNbqvyoV/FRfvET9w+Z1R6UjPC5a6D8HxVtiajpl9lUY1AySAFdWcdD
gQdpd+K84j40vuCeBuTUzJitSWd1hMLMuPAlDEvnKiYelwcPN+I9g8OK8nkYt55X
uauyctTcL7F7soVGL2Gsgl3AoXMYOPA=
-----END CERTIFICATE-----
Generated at Wed Jul 29 10:56:44 2026 by rpki-client