
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09fb7d57-7876-4e3a-b055-3534010fc6a9/30528c85-cc5e-3c02-b764-0e2ec04f69c6.roa
File: 30528c85-cc5e-3c02-b764-0e2ec04f69c6.roa (raw, json)
Hash identifier: cHSLP3sMsEX5oobYqRsxzLKdiL/YZTe3GCEs/6Mfnxc=
Subject key identifier: 4A:8A:03:E0:27:3A:AE:71:B3:78:5F:92:24:A1:A3:11:65:55:FA:83
Certificate issuer: /CN=09fb7d57-7876-4e3a-b055-3534010fc6a9
Certificate serial: 010D0C9F4328584E104EE5385F64233DDED0B180
Authority key identifier: 96:72:1A:72:B1:9C:B8:2E:77:EF:D4:F4:1C:CD:C8:A0:BC:C9:AC:4E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09fb7d57-7876-4e3a-b055-3534010fc6a9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09fb7d57-7876-4e3a-b055-3534010fc6a9/30528c85-cc5e-3c02-b764-0e2ec04f69c6.roa
Signing time: Thu 04 Jun 2026 21:00:12 +0000
ROA not before: Thu 04 Jun 2026 21:00:12 +0000
ROA not after: Wed 02 Sep 2026 21:00:12 +0000
asID: 133199
IP address blocks: 23.157.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09fb7d57-7876-4e3a-b055-3534010fc6a9/09fb7d57-7876-4e3a-b055-3534010fc6a9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09fb7d57-7876-4e3a-b055-3534010fc6a9/09fb7d57-7876-4e3a-b055-3534010fc6a9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09fb7d57-7876-4e3a-b055-3534010fc6a9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:10:4e:e5:38:5f:64:23:3d:de:d0:b1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09fb7d57-7876-4e3a-b055-3534010fc6a9
Validity
Not Before: Jun 4 21:00:12 2026 GMT
Not After : Sep 2 21:00:12 2026 GMT
Subject: CN=2e42d4d8-ef60-41ef-81c2-871bda56ba77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:59:f6:45:be:0b:dc:ff:6d:84:97:6e:a5:6a:
96:a8:79:d1:1e:ea:75:9b:dc:ff:9c:2e:b7:01:7b:
ff:cb:ba:c2:1a:c9:51:17:b5:82:6f:2d:10:87:53:
d9:8b:dc:c1:f6:1e:91:d6:9f:71:cb:f4:85:80:11:
dd:8c:d7:1d:3c:1c:99:1f:2c:77:6a:d3:0d:94:41:
b8:47:57:0f:4d:69:c1:f7:a0:52:e0:dc:20:5e:31:
54:2a:b0:45:49:a0:18:bc:70:b3:44:b1:cf:6a:ca:
ee:5a:ac:cc:32:c6:c9:2c:7d:b9:7c:c2:e8:17:66:
55:8e:48:b7:74:10:93:f5:f4:35:04:cc:02:9b:dd:
c0:2a:95:8a:8c:5b:2e:5c:29:f2:d4:34:9c:ae:e6:
5a:7e:14:91:80:ae:45:a2:9a:90:87:62:30:06:ce:
4a:74:c5:83:59:da:99:ad:91:a1:4a:08:f0:30:9d:
90:b9:11:63:aa:de:5b:6b:9a:2b:55:b1:08:71:c2:
ce:85:4e:66:d2:0f:f1:d0:a1:08:bf:16:d6:50:f0:
ed:35:05:60:7c:54:c4:db:c7:51:58:0d:d3:0b:82:
c2:12:68:0b:a0:5a:bc:54:51:02:90:7c:79:ce:a7:
e9:bc:d5:42:e9:32:2a:09:1d:39:5f:30:2b:e2:0d:
a2:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:8A:03:E0:27:3A:AE:71:B3:78:5F:92:24:A1:A3:11:65:55:FA:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09fb7d57-7876-4e3a-b055-3534010fc6a9/30528c85-cc5e-3c02-b764-0e2ec04f69c6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09fb7d57-7876-4e3a-b055-3534010fc6a9/09fb7d57-7876-4e3a-b055-3534010fc6a9.crl
X509v3 Authority Key Identifier:
keyid:96:72:1A:72:B1:9C:B8:2E:77:EF:D4:F4:1C:CD:C8:A0:BC:C9:AC:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09fb7d57-7876-4e3a-b055-3534010fc6a9.cer
sbgp-ipAddrBlock: critical
IPv4:
23.157.72.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:8f:84:e2:7f:94:ff:a2:0e:03:cf:a7:a4:62:84:50:e3:e3:
91:4c:35:ba:eb:14:62:c4:1e:1b:d4:b7:63:43:2b:18:ac:3a:
81:c7:7a:10:12:00:41:37:28:fc:45:2d:56:51:db:63:2f:01:
8a:d9:9f:2b:63:9c:cb:8d:72:0a:fc:02:e0:26:8e:a4:e6:3c:
92:77:b4:62:6c:b5:f2:78:b7:90:c8:ba:10:7b:97:34:57:73:
24:69:40:eb:31:b8:5b:c2:88:6d:1f:27:9f:3d:49:36:83:11:
51:3d:6b:85:d1:69:ce:f0:e9:a0:16:b0:ad:a4:d7:8f:07:af:
5e:9c:fd:76:0b:50:25:1b:cf:98:d5:8a:e2:fc:85:65:39:ed:
e9:cd:c0:96:ee:40:77:0d:87:be:11:71:ab:dc:e4:9e:4a:a8:
da:d0:d8:f9:17:60:1d:79:83:04:0e:f3:ae:e7:37:9c:40:45:
c0:bc:8c:76:77:b4:2d:98:fb:23:d0:10:b1:37:5c:e0:0f:fe:
69:90:31:80:78:4b:08:a2:a8:bd:38:64:17:60:98:85:ba:4e:
89:87:69:9d:0b:31:b2:3b:4e:65:38:87:ec:5b:37:9e:58:f8:
42:61:df:aa:28:0a:a6:f2:98:a4:7f:19:d0:cf:f4:65:ba:3d:
ba:43:27:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:28:05 2026 by rpki-client