
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e73ddb9c-3a32-32f0-a46b-c45154dcd057.roa
File: e73ddb9c-3a32-32f0-a46b-c45154dcd057.roa (raw, json)
Hash identifier: epzlnrr22nGZNq4Sznjoxtp5+Yx3EsekzCPH0jFrTUM=
Subject key identifier: CA:02:29:04:C1:FD:60:87:9C:F7:B3:5C:00:C3:6A:03:51:B8:67:61
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F4328584EA798AE7C723668BB70B54C40
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e73ddb9c-3a32-32f0-a46b-c45154dcd057.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 852
IP address blocks: 23.17.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:98:ae:7c:72:36:68:bb:70:b5:4c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=350a3fc6-2fd4-42b6-b9f2-63de59644bab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:03:86:b9:d8:92:3c:e7:2e:dc:a9:a5:d6:7e:
c0:e0:a7:c1:0e:7e:cb:12:99:d8:36:5f:26:c8:93:
b3:7c:2c:e1:e7:6a:3e:9e:f6:6d:1b:c2:27:e5:fc:
bb:1d:b0:59:e6:4f:b8:6a:62:6e:5a:94:4c:b1:f9:
76:f7:02:6c:12:01:39:f8:7c:50:6a:96:08:46:a8:
96:40:cc:8d:d5:64:63:8c:c5:6a:69:67:20:99:20:
1d:f1:f5:0f:71:1c:e0:ba:67:86:7e:43:5b:05:2a:
ee:c2:ce:d4:0f:be:c1:f3:ee:42:d8:b3:4c:43:82:
81:9c:f2:57:82:07:f1:62:e9:76:ff:30:92:32:21:
18:31:ae:1f:1f:d9:8a:49:da:c5:a0:33:01:3c:7c:
80:53:78:1f:07:fe:24:98:62:8b:ee:47:ef:12:c3:
e6:83:98:61:d0:0e:1b:6c:ae:90:6d:43:4a:5d:8d:
d3:30:7e:61:d5:18:6d:8f:bc:0e:06:31:7e:05:c6:
7a:5d:0f:79:2d:24:81:70:88:30:35:8e:62:44:17:
b9:cc:28:ba:24:37:34:87:8c:47:d7:b5:a7:c8:63:
a8:94:6f:6f:b8:bf:d9:10:d5:fe:06:30:1d:a1:c8:
0e:b7:7c:34:73:2f:5d:04:0b:f2:d0:ed:62:56:9f:
53:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:02:29:04:C1:FD:60:87:9C:F7:B3:5C:00:C3:6A:03:51:B8:67:61
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/e73ddb9c-3a32-32f0-a46b-c45154dcd057.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv4:
23.17.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a9:cb:bd:6a:7e:f9:bd:b2:17:8e:59:e0:76:38:0c:fd:30:ee:
01:1f:4a:40:58:4d:69:68:25:a9:fa:d6:31:87:a7:54:01:98:
ca:e4:7c:51:71:56:13:0b:91:35:35:46:39:55:1a:2c:48:0e:
cc:c1:5f:cf:b7:f4:aa:41:1b:f7:91:a5:a1:fe:07:23:54:2a:
b5:61:7c:da:6d:09:b5:51:5a:b4:1c:97:44:33:c2:a1:c4:d4:
fa:81:f9:ab:e6:7b:50:49:82:68:ff:cd:a9:0c:90:b6:55:df:
39:5b:56:b2:1d:27:9f:4a:7d:b1:05:ff:d3:42:17:44:d1:46:
2b:a2:c5:64:97:f8:ac:4d:24:62:c6:3f:98:87:08:32:c6:7f:
50:bc:42:10:34:0f:55:8c:c1:c4:11:66:65:8f:5b:f4:da:b8:
65:5e:59:80:cb:3f:00:b1:d6:14:8d:32:a8:e5:8b:5f:3d:e2:
cd:ee:3d:24:6b:5f:2d:e6:ab:a8:36:a2:4a:92:3a:05:95:19:
db:8d:3a:4c:4a:b3:52:c9:39:17:1d:a2:ef:7f:fd:53:12:6c:
1e:af:d6:10:6b:1e:a4:02:38:da:60:31:a7:de:90:f9:50:a9:
54:8f:b1:5c:b6:3b:76:c4:5d:fa:76:6c:96:86:96:0a:a9:df:
4b:35:dc:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:23:08 2026 by rpki-client