
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b7c1ab35-d3f2-44da-8a41-717b538ab7e5/8aad0e5a-8116-38d5-8d89-1d1ec4bf3a53.roa
File: 8aad0e5a-8116-38d5-8d89-1d1ec4bf3a53.roa (raw, json)
Hash identifier: Cz6syh72JbALknVPYABG1qm+/KIb543BMNOj06t9vK0=
Subject key identifier: A1:74:7C:D9:A2:8B:47:64:98:48:54:3A:F4:CF:ED:12:A0:5E:2F:76
Certificate issuer: /CN=b7c1ab35-d3f2-44da-8a41-717b538ab7e5
Certificate serial: 010D0C9F4328584EF2E784BD22EEC45E34A15940
Authority key identifier: 05:A1:DC:9A:A7:39:EA:4A:18:E0:FF:87:6A:FF:43:44:A9:04:AE:22
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b7c1ab35-d3f2-44da-8a41-717b538ab7e5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b7c1ab35-d3f2-44da-8a41-717b538ab7e5/8aad0e5a-8116-38d5-8d89-1d1ec4bf3a53.roa
Signing time: Tue 25 Aug 2026 01:00:12 +0000
ROA not before: Tue 25 Aug 2026 01:00:12 +0000
ROA not after: Mon 23 Nov 2026 02:00:12 +0000
asID: 26337
IP address blocks: 23.91.64.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b7c1ab35-d3f2-44da-8a41-717b538ab7e5/b7c1ab35-d3f2-44da-8a41-717b538ab7e5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b7c1ab35-d3f2-44da-8a41-717b538ab7e5/b7c1ab35-d3f2-44da-8a41-717b538ab7e5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b7c1ab35-d3f2-44da-8a41-717b538ab7e5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:f2:e7:84:bd:22:ee:c4:5e:34:a1:59:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7c1ab35-d3f2-44da-8a41-717b538ab7e5
Validity
Not Before: Aug 25 01:00:12 2026 GMT
Not After : Nov 23 02:00:12 2026 GMT
Subject: CN=e9c56419-3041-4a2b-ba22-0e97810707c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a5:58:a2:35:0b:93:6a:45:79:80:93:70:f9:
41:88:88:ca:56:ad:0f:1b:2a:79:76:11:0c:80:e8:
79:f4:21:b3:f2:8b:b0:fe:da:62:0a:ff:8d:54:bc:
65:7d:76:54:5c:1e:cf:2c:03:bd:c8:7a:21:65:54:
14:ed:3e:7c:09:27:e6:ea:5d:c8:17:48:66:dc:50:
18:48:31:64:4f:d8:43:14:1b:5f:96:c0:60:51:ce:
00:bb:fa:62:ae:3f:b9:11:2a:cb:a0:de:da:c6:90:
e0:43:4c:ba:52:43:f0:0c:e7:d3:9d:b3:fd:8a:86:
4e:cd:dc:9b:af:04:a6:1d:2b:22:90:72:46:b8:6c:
c6:9e:32:0c:2f:29:81:40:81:0f:cf:f1:ae:b5:eb:
7d:01:1f:e3:bc:3c:fe:f9:e7:57:22:55:a7:4e:a5:
dd:2d:6d:aa:3a:aa:ad:94:2d:71:04:b2:5a:44:81:
70:0b:6c:9f:dc:29:9a:60:38:f6:cc:45:0b:d8:3b:
e9:2f:73:5b:1d:7b:5b:4c:31:68:b7:96:24:a1:3d:
4a:ad:25:6d:0c:95:89:18:73:37:78:07:3f:6f:bc:
7f:27:aa:8a:79:0b:a9:4d:04:e0:c3:ce:a0:0d:a5:
28:f6:77:00:2f:db:5d:e8:b4:70:65:3b:d3:bb:4e:
7f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:74:7C:D9:A2:8B:47:64:98:48:54:3A:F4:CF:ED:12:A0:5E:2F:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b7c1ab35-d3f2-44da-8a41-717b538ab7e5/8aad0e5a-8116-38d5-8d89-1d1ec4bf3a53.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b7c1ab35-d3f2-44da-8a41-717b538ab7e5/b7c1ab35-d3f2-44da-8a41-717b538ab7e5.crl
X509v3 Authority Key Identifier:
keyid:05:A1:DC:9A:A7:39:EA:4A:18:E0:FF:87:6A:FF:43:44:A9:04:AE:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b7c1ab35-d3f2-44da-8a41-717b538ab7e5.cer
sbgp-ipAddrBlock: critical
IPv4:
23.91.64.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:a0:d9:8c:0b:aa:ae:26:82:c5:a5:2f:8b:db:9d:32:51:50:
88:c1:cf:91:4a:3c:eb:6a:1b:a5:f6:a3:dd:87:13:35:99:ef:
b0:ed:59:e0:03:a3:6e:64:bf:7c:84:e5:af:a5:ce:fd:1b:51:
33:d1:ab:12:64:8f:2f:25:7a:aa:ff:9e:de:b7:f4:68:7f:4a:
f6:54:89:59:ab:e3:56:0e:28:c9:d9:a5:6a:29:07:b7:5f:b6:
80:09:dd:02:f6:45:c8:82:fb:db:c3:f0:89:d6:f6:85:61:0d:
ec:c4:d9:85:40:e4:a4:68:0a:35:3f:05:40:5c:36:67:54:99:
8f:10:17:ca:d7:f7:cd:28:30:74:ea:a6:de:88:d4:64:57:fe:
a4:47:01:63:26:b0:89:d6:8f:97:44:5f:db:05:5f:8b:10:0e:
ff:dc:b4:48:7d:4c:ea:f8:6f:34:47:7a:a1:1d:11:1c:0d:93:
c4:e0:0f:4e:aa:10:0a:4a:64:49:7b:55:f3:0e:2b:04:a6:50:
c4:b1:10:c5:71:8f:d0:71:96:0d:97:ff:e5:1f:cb:00:b9:15:
a1:45:f6:a5:88:b3:e1:ba:a9:de:f2:9f:6f:d9:69:85:d6:21:
b4:08:9e:47:73:89:15:13:4d:b4:c8:5f:c7:4e:de:b4:74:84:
cf:7f:33:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 11:07:38 2026 by rpki-client