
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/47bffed6-be0f-48ff-a8fe-85a63c9b0e45/acd658b8-634a-338a-a46b-a493a731bb64.roa
File: acd658b8-634a-338a-a46b-a493a731bb64.roa (raw, json)
Hash identifier: qJzABThWFQQ8tTUKrx84lt5mHfinuJYMBN543IByzdw=
Subject key identifier: 79:6A:84:81:87:7F:35:C5:6F:15:C1:BF:71:5C:40:80:DD:E5:70:DC
Certificate issuer: /CN=47bffed6-be0f-48ff-a8fe-85a63c9b0e45
Certificate serial: 010D0C9F4328584F03A79535E1266793B1B2FA40
Authority key identifier: 3B:07:A5:30:1E:F5:42:9A:EC:2D:F9:6F:FC:46:66:97:CE:06:BD:5A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/47bffed6-be0f-48ff-a8fe-85a63c9b0e45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/47bffed6-be0f-48ff-a8fe-85a63c9b0e45/acd658b8-634a-338a-a46b-a493a731bb64.roa
Signing time: Mon 31 Aug 2026 01:00:12 +0000
ROA not before: Mon 31 Aug 2026 01:00:12 +0000
ROA not after: Sun 29 Nov 2026 02:00:12 +0000
asID: 398196
IP address blocks: 23.147.208.0/24 maxlen: 24
23.147.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/47bffed6-be0f-48ff-a8fe-85a63c9b0e45/47bffed6-be0f-48ff-a8fe-85a63c9b0e45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/47bffed6-be0f-48ff-a8fe-85a63c9b0e45/47bffed6-be0f-48ff-a8fe-85a63c9b0e45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/47bffed6-be0f-48ff-a8fe-85a63c9b0e45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 30 Sep 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:03:a7:95:35:e1:26:67:93:b1:b2:fa:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47bffed6-be0f-48ff-a8fe-85a63c9b0e45
Validity
Not Before: Aug 31 01:00:12 2026 GMT
Not After : Nov 29 02:00:12 2026 GMT
Subject: CN=8d453dcd-b0ca-4e6f-9895-0232b860e7ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ff:78:75:aa:2e:0d:8e:85:1a:a5:db:28:b5:
06:0e:43:81:e6:6b:08:de:01:7f:90:49:a7:8f:81:
e0:59:3a:36:49:c3:19:ad:5f:e0:50:95:00:4e:df:
44:94:77:9c:9a:25:4c:87:c4:5f:90:4d:e0:1f:d1:
7e:83:83:ae:ea:b1:d2:0f:d8:87:85:c7:8c:46:6d:
5c:65:51:15:9b:59:2f:c5:77:62:14:6f:e5:af:19:
6a:76:b1:0f:75:6c:1c:96:13:2b:58:e6:3a:96:c9:
16:bd:98:86:f0:57:91:c5:d0:c8:8e:67:88:67:3b:
a0:c0:4d:63:65:af:ba:f6:4e:48:46:9f:21:2c:5f:
50:dd:d3:51:41:03:40:fe:ed:3d:fd:a6:89:ad:f3:
73:60:02:06:df:4c:6a:48:4b:35:5c:b7:d1:fc:58:
d7:33:d4:93:da:e2:09:3f:c2:9c:74:6f:c8:e4:c3:
77:c4:d3:2c:44:ea:dc:d3:48:b2:2e:30:e5:28:5a:
61:24:9b:42:36:0c:16:4b:27:16:e3:b8:cb:c4:9c:
48:45:5b:46:6e:96:e4:08:e9:6b:8d:15:03:09:8e:
b5:40:16:af:0a:6f:c4:cb:18:bf:ff:a8:68:61:98:
84:3d:5e:0b:68:67:a0:73:be:04:ed:4a:50:22:7c:
41:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:6A:84:81:87:7F:35:C5:6F:15:C1:BF:71:5C:40:80:DD:E5:70:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/47bffed6-be0f-48ff-a8fe-85a63c9b0e45/acd658b8-634a-338a-a46b-a493a731bb64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/47bffed6-be0f-48ff-a8fe-85a63c9b0e45/47bffed6-be0f-48ff-a8fe-85a63c9b0e45.crl
X509v3 Authority Key Identifier:
keyid:3B:07:A5:30:1E:F5:42:9A:EC:2D:F9:6F:FC:46:66:97:CE:06:BD:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/47bffed6-be0f-48ff-a8fe-85a63c9b0e45.cer
sbgp-ipAddrBlock: critical
IPv4:
23.147.208.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:45:bc:64:79:fa:68:3b:1f:ad:47:72:4c:12:8a:78:f0:39:
4a:9a:6b:c4:1c:67:4f:31:b9:5a:40:f7:b7:59:1c:74:85:bd:
d2:7a:26:5e:f1:07:bc:41:c7:f1:c6:90:d1:f9:19:16:02:60:
48:57:fc:6c:ae:c8:5d:7b:96:65:34:d8:30:5b:60:e2:4e:69:
0a:12:28:eb:70:49:a9:f3:78:34:9b:ce:5e:cb:9e:1a:f2:bc:
12:5c:00:8b:6b:65:58:5b:35:7c:95:a3:cf:2b:b6:e3:53:c9:
be:ea:3e:ff:f0:f2:9a:5a:54:b4:29:7e:aa:af:89:b9:40:a5:
0a:07:a7:3c:1d:c8:91:b7:d9:dc:0a:fb:13:f1:76:f3:32:b4:
12:09:02:b3:b7:e0:66:a0:34:d5:a0:82:a4:42:ba:36:92:db:
5d:95:7d:c1:4e:69:19:ec:8d:55:47:fe:1b:7a:ae:f8:63:b5:
95:70:f7:b9:9c:56:98:89:3e:5a:c7:0d:46:f6:c7:ac:de:7f:
ea:1f:bd:3f:9f:62:1b:2f:83:8c:7e:c3:4e:b5:99:bd:46:e2:
99:8f:8a:d4:fb:85:2b:a3:aa:99:ac:06:25:b5:d2:22:46:17:
01:d0:49:53:e8:65:ce:82:09:91:fe:b6:81:72:30:4b:de:0a:
ae:89:b5:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 03:53:18 2026 by rpki-client