
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1e63fa3c-b623-45ed-bc50-5c5f6ce1eee8/ffa6eba1-18c5-3edf-aa1a-c54cd4005f2e.roa
File: ffa6eba1-18c5-3edf-aa1a-c54cd4005f2e.roa (raw, json)
Hash identifier: 2N8rbLbJ119zcGR0k+ShHh+3IOeiw6wxlJbl6oK0VzM=
Subject key identifier: 63:36:11:4B:1C:49:EE:C7:1C:49:70:57:F6:38:C3:6F:45:65:73:21
Certificate issuer: /CN=1e63fa3c-b623-45ed-bc50-5c5f6ce1eee8
Certificate serial: 010D0C9F4328584EA786E2D46037ABA39E95C940
Authority key identifier: A3:09:D6:17:BA:B5:31:E5:FF:31:15:22:A3:4C:14:52:22:60:53:8D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1e63fa3c-b623-45ed-bc50-5c5f6ce1eee8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1e63fa3c-b623-45ed-bc50-5c5f6ce1eee8/ffa6eba1-18c5-3edf-aa1a-c54cd4005f2e.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 398292
IP address blocks: 23.158.48.0/24 maxlen: 24
169.197.156.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1e63fa3c-b623-45ed-bc50-5c5f6ce1eee8/1e63fa3c-b623-45ed-bc50-5c5f6ce1eee8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1e63fa3c-b623-45ed-bc50-5c5f6ce1eee8/1e63fa3c-b623-45ed-bc50-5c5f6ce1eee8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1e63fa3c-b623-45ed-bc50-5c5f6ce1eee8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:86:e2:d4:60:37:ab:a3:9e:95:c9:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e63fa3c-b623-45ed-bc50-5c5f6ce1eee8
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=be690d89-b0c5-489b-a2a3-420ad3ffd37d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:93:1a:2e:f2:12:22:16:f9:b9:59:8e:09:10:
64:4d:9f:44:02:2c:ee:f4:36:d3:ed:5a:cb:f8:bf:
9f:db:58:96:25:77:61:25:18:e3:17:03:f5:89:4a:
d5:1f:d3:ba:e9:ef:53:5c:a2:66:28:5c:16:74:26:
5b:05:fe:ee:50:6a:0c:cf:02:6e:49:e8:bc:98:95:
8d:b2:ed:78:67:69:89:b7:fd:85:1d:04:48:d3:b3:
e3:b1:34:3c:ec:85:12:6d:ff:cb:64:ef:e8:b1:ee:
1a:b5:9e:fd:b7:3d:21:69:02:f7:83:82:cf:5e:fd:
db:f2:ab:2f:f5:87:8d:32:f0:49:68:9b:43:2c:28:
53:8c:55:da:83:06:f7:86:a4:a0:07:b6:ca:77:c8:
4d:70:e9:f4:26:64:67:75:da:06:ce:df:d6:a3:7c:
ec:d6:03:00:61:a9:d1:e2:43:eb:f6:fc:62:e4:5d:
14:df:a5:36:05:5f:4d:5d:76:bd:25:13:d7:df:1c:
3c:24:ab:75:79:92:1f:21:35:b1:f0:ff:26:b5:fb:
a2:f8:7f:de:b0:39:ea:59:ec:3b:14:aa:0f:70:70:
ba:ad:1c:b7:94:70:2c:ce:b6:02:53:5f:55:6f:73:
63:a0:38:30:bd:55:2a:b9:2d:25:32:04:21:5f:94:
a8:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:36:11:4B:1C:49:EE:C7:1C:49:70:57:F6:38:C3:6F:45:65:73:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1e63fa3c-b623-45ed-bc50-5c5f6ce1eee8/ffa6eba1-18c5-3edf-aa1a-c54cd4005f2e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1e63fa3c-b623-45ed-bc50-5c5f6ce1eee8/1e63fa3c-b623-45ed-bc50-5c5f6ce1eee8.crl
X509v3 Authority Key Identifier:
keyid:A3:09:D6:17:BA:B5:31:E5:FF:31:15:22:A3:4C:14:52:22:60:53:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1e63fa3c-b623-45ed-bc50-5c5f6ce1eee8.cer
sbgp-ipAddrBlock: critical
IPv4:
23.158.48.0/24
169.197.156.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c4:d2:d6:1f:60:2b:f9:5b:22:aa:f3:18:69:3a:1e:fe:84:58:
b0:2b:d1:b5:c0:25:55:ac:dc:b3:37:90:1f:ec:c9:1b:9d:dc:
59:91:37:de:76:9b:5d:4d:11:54:ec:8a:6f:5a:2b:f7:50:ad:
a6:59:ab:6f:97:8b:60:b6:a4:58:bb:f3:c2:f4:49:3e:e0:c1:
fe:2d:dd:5d:0a:e6:0d:45:45:85:69:66:5b:15:cb:9e:e1:e9:
ae:7c:c1:96:94:b6:3a:0c:24:72:98:5e:45:1e:18:85:84:b2:
61:8a:99:75:e4:4f:17:48:60:29:8d:8d:a8:f4:17:6a:ce:a5:
b4:de:42:ee:02:a3:12:c4:ee:88:41:e1:6b:09:4c:5c:20:be:
ab:3b:52:04:76:21:1c:df:66:e1:d9:44:a6:b5:b2:5b:b0:55:
c4:3a:72:33:3a:0c:1e:1d:e4:de:64:d5:93:5e:ca:58:19:19:
a6:89:32:63:25:ee:76:f0:8c:07:e0:97:10:74:3d:fb:95:e8:
fa:a0:62:63:52:5c:1c:b5:6d:ff:1a:90:43:f9:a9:ff:1b:0d:
13:53:f0:cd:81:8e:c2:d1:bc:de:5b:42:4f:13:0b:a0:d1:f4:
c7:58:c9:bf:9b:c2:ae:39:26:2f:9e:9e:10:d6:4b:b3:90:36:
47:fc:56:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:10:37 2026 by rpki-client