
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1384adb3-843b-4d6e-a2b4-6dc37093dfe1/afcec47f-0abd-3455-98e1-1c658eec0eb8.roa
File: afcec47f-0abd-3455-98e1-1c658eec0eb8.roa (raw, json)
Hash identifier: h4g6UJ8T5KTdATf9SrjCtBGaDnRUd/LDot43bhYPSBk=
Subject key identifier: E0:88:A5:A1:07:71:B7:CD:C5:FE:CE:E0:52:CE:BB:F7:63:B6:E3:68
Certificate issuer: /CN=1384adb3-843b-4d6e-a2b4-6dc37093dfe1
Certificate serial: 010D0C9F4328584E9D4A6FC86C16B520F2578780
Authority key identifier: 53:8D:5C:B5:18:DE:88:4A:47:5D:75:DC:5E:34:E8:DB:6F:C6:6F:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1384adb3-843b-4d6e-a2b4-6dc37093dfe1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1384adb3-843b-4d6e-a2b4-6dc37093dfe1/afcec47f-0abd-3455-98e1-1c658eec0eb8.roa
Signing time: Sat 25 Jul 2026 09:00:11 +0000
ROA not before: Sat 25 Jul 2026 09:00:11 +0000
ROA not after: Fri 23 Oct 2026 09:00:11 +0000
asID: 399392
IP address blocks: 23.175.112.0/24 maxlen: 24
2602:fcb6::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1384adb3-843b-4d6e-a2b4-6dc37093dfe1/1384adb3-843b-4d6e-a2b4-6dc37093dfe1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1384adb3-843b-4d6e-a2b4-6dc37093dfe1/1384adb3-843b-4d6e-a2b4-6dc37093dfe1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1384adb3-843b-4d6e-a2b4-6dc37093dfe1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:9d:4a:6f:c8:6c:16:b5:20:f2:57:87:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1384adb3-843b-4d6e-a2b4-6dc37093dfe1
Validity
Not Before: Jul 25 09:00:11 2026 GMT
Not After : Oct 23 09:00:11 2026 GMT
Subject: CN=12ecc5da-86a0-48f8-b455-383b04d925bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:8f:2f:a3:9f:f2:19:cb:a4:ec:f5:08:00:fa:
b3:c8:8d:ec:c3:c0:6c:d2:8f:92:e7:5d:52:e2:ca:
80:ce:f9:2a:e8:f3:62:a1:49:ed:14:e9:9a:e4:38:
1b:2f:eb:0a:b4:fd:7b:69:b8:61:86:5b:2e:32:cd:
71:19:fa:cc:66:f2:cc:41:56:1e:c3:6c:fe:f9:ce:
b9:7e:68:75:f3:a0:57:6c:c7:d7:61:55:9f:c8:57:
61:60:68:71:f3:95:d8:8b:6a:d1:77:6c:01:f9:9f:
df:69:13:55:6a:4c:8c:52:09:1f:12:3a:0c:52:c5:
79:4e:e1:f6:97:bd:04:37:fd:98:88:8b:de:9d:ab:
3e:6c:3a:f0:78:34:ed:22:4f:30:5c:b8:e5:a0:6b:
4f:fd:6d:e6:27:26:ef:79:bd:0c:31:8a:28:d2:81:
dc:a1:04:a9:6d:82:0b:7b:27:ae:41:1b:26:9f:99:
f5:c4:26:e6:77:e1:80:89:4f:d1:7c:79:5e:fa:76:
07:11:53:e2:fe:31:ce:48:61:0b:26:bb:d2:ef:ad:
ba:30:05:1f:38:70:51:57:c6:86:b2:ab:3f:90:f5:
46:3e:c8:33:09:b4:26:61:9a:87:35:98:4a:ca:9e:
cb:cc:d0:9f:f3:b9:ec:4d:d8:04:98:59:b8:70:4e:
50:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:88:A5:A1:07:71:B7:CD:C5:FE:CE:E0:52:CE:BB:F7:63:B6:E3:68
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1384adb3-843b-4d6e-a2b4-6dc37093dfe1/afcec47f-0abd-3455-98e1-1c658eec0eb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1384adb3-843b-4d6e-a2b4-6dc37093dfe1/1384adb3-843b-4d6e-a2b4-6dc37093dfe1.crl
X509v3 Authority Key Identifier:
keyid:53:8D:5C:B5:18:DE:88:4A:47:5D:75:DC:5E:34:E8:DB:6F:C6:6F:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1384adb3-843b-4d6e-a2b4-6dc37093dfe1.cer
sbgp-ipAddrBlock: critical
IPv4:
23.175.112.0/24
IPv6:
2602:fcb6::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:30:8f:9a:f9:da:c1:9a:5e:fb:a6:8e:aa:61:1e:d9:53:b0:
81:54:b6:1e:9d:28:a7:85:92:70:bc:13:53:df:07:39:44:22:
e1:45:79:e8:28:3b:25:e0:66:84:bb:13:d8:f6:3f:9b:df:b5:
e4:14:9c:71:3c:b2:3e:12:a0:60:6c:92:81:75:a9:f5:08:37:
c4:a3:20:a9:ed:43:62:b4:fb:c6:68:a0:3c:48:07:a7:e6:2a:
94:59:3d:16:a8:26:59:94:17:3c:b3:a9:53:98:5a:8f:49:cb:
e2:0b:66:00:06:a2:b1:9a:ea:86:c2:ff:2d:c9:c5:6b:24:79:
5f:de:40:46:3a:27:3b:cb:4f:d5:0f:70:30:9c:16:d5:35:ce:
57:e2:f2:76:bf:4c:c3:2a:15:c9:58:77:b9:3d:87:35:34:e4:
b5:bb:9b:70:51:31:e7:c1:d1:0e:29:d0:70:70:db:ab:f1:a9:
5b:72:c1:73:0a:79:59:90:32:c4:82:8d:eb:e4:cf:e2:19:71:
33:14:c7:9a:eb:f6:f9:51:76:a5:0a:dc:e4:b4:5d:eb:fa:50:
73:3b:db:3e:12:3b:ba:f1:f7:c7:a2:96:19:05:37:47:5d:0a:
f8:40:ec:08:27:6b:28:ff:6d:d3:4c:50:0f:2d:29:86:73:41:
9d:32:a7:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:50:35 2026 by rpki-client