
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1/e84e8c73-98cf-38e1-8e6f-183acf45c23f.roa
File: e84e8c73-98cf-38e1-8e6f-183acf45c23f.roa (raw, json)
Hash identifier: hTs+jBgMGj7nwQcejFAfpjoZrBhQpoDaOsJNxbnL5dA=
Subject key identifier: 97:E1:AA:C1:92:1F:85:2C:44:3D:63:93:68:9F:C6:10:75:AD:25:AC
Certificate issuer: /CN=dac5cea7-cd25-4a27-9b63-bd82366932b1
Certificate serial: 010D0C9F4328584F0D6CFD905CED8A811846ABA0
Authority key identifier: F8:90:52:1B:08:0F:56:22:0A:C1:68:0A:45:A1:58:77:CB:57:3E:5E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1/e84e8c73-98cf-38e1-8e6f-183acf45c23f.roa
Signing time: Thu 03 Sep 2026 13:00:12 +0000
ROA not before: Thu 03 Sep 2026 13:00:12 +0000
ROA not after: Wed 02 Dec 2026 14:00:12 +0000
asID: 396502
IP address blocks: 23.172.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1/dac5cea7-cd25-4a27-9b63-bd82366932b1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1/dac5cea7-cd25-4a27-9b63-bd82366932b1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 30 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:0d:6c:fd:90:5c:ed:8a:81:18:46:ab:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dac5cea7-cd25-4a27-9b63-bd82366932b1
Validity
Not Before: Sep 3 13:00:12 2026 GMT
Not After : Dec 2 14:00:12 2026 GMT
Subject: CN=c45e94f9-1b9f-4466-8720-c72166b7a145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:20:9a:86:ba:8f:b4:9e:b4:14:49:91:e9:7c:
28:d2:9d:1b:a6:27:e9:46:ff:e7:c9:53:cb:db:51:
c7:ed:67:c0:99:b7:ae:5d:9b:25:09:db:1a:c7:bc:
f5:13:f1:e7:b5:e9:67:2f:b0:e7:c6:2b:86:66:ac:
64:03:b0:ca:86:22:76:03:6d:e3:c3:b6:af:5e:a1:
a7:78:b6:89:27:67:5b:51:52:59:f2:d0:90:fa:49:
74:67:dc:e7:9e:55:e8:fd:57:3e:38:e9:49:02:ec:
0d:4f:ff:f6:0c:25:ed:96:d7:7d:b0:84:4d:51:80:
c8:0e:e9:b9:db:08:a9:fc:5a:2a:c4:b8:92:5e:f2:
ec:1b:21:b3:b8:83:9f:78:ed:32:9b:58:59:73:09:
ac:77:e1:e8:f8:dd:4b:3f:4b:16:b9:33:4e:cb:3e:
a7:aa:46:dc:e2:b9:fa:30:22:f9:ff:bb:e9:55:4d:
a5:fa:d2:5e:d6:d9:22:71:4f:f6:bb:f4:b0:72:97:
2e:ae:4d:24:97:25:6f:0a:1a:34:9e:bd:d7:96:92:
41:4a:6f:5d:13:2c:c5:85:1e:c3:e9:08:f6:bd:66:
ed:7f:5e:42:f3:90:28:0c:48:72:b7:d0:65:09:58:
9f:1f:d8:1b:e9:1c:1f:c9:27:b3:88:2c:e5:cb:af:
fe:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:E1:AA:C1:92:1F:85:2C:44:3D:63:93:68:9F:C6:10:75:AD:25:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1/e84e8c73-98cf-38e1-8e6f-183acf45c23f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1/dac5cea7-cd25-4a27-9b63-bd82366932b1.crl
X509v3 Authority Key Identifier:
keyid:F8:90:52:1B:08:0F:56:22:0A:C1:68:0A:45:A1:58:77:CB:57:3E:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1.cer
sbgp-ipAddrBlock: critical
IPv4:
23.172.65.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:e2:b4:45:42:e4:0d:1d:16:7e:9f:e6:a0:fe:39:20:ed:a7:
df:4b:1f:5c:30:02:fd:a3:7b:e9:f3:93:ac:6a:20:bc:e2:c3:
12:0b:56:10:e6:5e:79:77:9f:81:51:f0:07:71:26:ad:e1:13:
68:48:ad:aa:76:52:1a:7d:2f:dc:da:d5:88:bc:c8:94:7a:5d:
db:96:54:7c:5d:18:95:f9:5b:cb:90:64:80:27:bd:d0:15:d9:
fb:a9:db:72:e1:c8:84:51:1a:fd:b1:dc:5c:81:47:e0:5f:b3:
3b:28:83:34:53:dd:1c:16:da:94:d7:23:a4:3e:36:4e:8c:47:
e5:7c:5c:19:e5:cf:ee:13:4a:07:b1:e5:c0:54:3a:85:29:38:
7f:ec:2e:89:1f:eb:5a:b3:82:20:e5:ce:3b:ca:d2:61:50:62:
ee:67:c7:a0:ec:f0:f2:41:06:ef:03:42:0d:ab:50:60:4f:fb:
57:c3:02:32:a9:55:c3:ab:0b:ee:bf:3a:d0:13:a6:80:d1:f1:
1a:61:5c:66:63:f5:ed:7c:2d:3a:cf:7d:de:ec:95:8e:e5:38:
62:a8:36:34:45:18:9a:b9:ea:d6:e2:8e:5e:a4:49:6e:b2:7b:
1b:1e:db:e8:7b:2e:34:fd:7f:00:08:e9:d3:a7:1d:8f:a6:03:
9e:e1:29:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 16:26:14 2026 by rpki-client