
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f4ecbe8f-8b38-4e68-bcac-0ebae474bb3f/b5390a6e-8f5e-3278-a987-d95fd8b843b3.roa
File: b5390a6e-8f5e-3278-a987-d95fd8b843b3.roa (raw, json)
Hash identifier: hFVz62MwhPHY5lqvPG+BFo29Zm8v1ZaJxi1mLVduJw4=
Subject key identifier: 8B:96:80:BA:6B:E9:A5:4E:C9:DF:65:49:AF:D6:31:9D:7C:8B:C4:E4
Certificate issuer: /CN=f4ecbe8f-8b38-4e68-bcac-0ebae474bb3f
Certificate serial: 010D0C9F4328584EA4450F6B10CCDECE4F3D0A00
Authority key identifier: 7E:A1:A3:48:30:66:8B:7E:61:E9:CC:06:49:B4:5D:82:E1:88:5C:13
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f4ecbe8f-8b38-4e68-bcac-0ebae474bb3f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f4ecbe8f-8b38-4e68-bcac-0ebae474bb3f/b5390a6e-8f5e-3278-a987-d95fd8b843b3.roa
Signing time: Mon 27 Jul 2026 21:00:11 +0000
ROA not before: Mon 27 Jul 2026 21:00:11 +0000
ROA not after: Sun 25 Oct 2026 21:00:11 +0000
asID: 46384
IP address blocks: 23.171.64.0/24 maxlen: 24
23.171.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f4ecbe8f-8b38-4e68-bcac-0ebae474bb3f/f4ecbe8f-8b38-4e68-bcac-0ebae474bb3f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f4ecbe8f-8b38-4e68-bcac-0ebae474bb3f/f4ecbe8f-8b38-4e68-bcac-0ebae474bb3f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f4ecbe8f-8b38-4e68-bcac-0ebae474bb3f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a4:45:0f:6b:10:cc:de:ce:4f:3d:0a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4ecbe8f-8b38-4e68-bcac-0ebae474bb3f
Validity
Not Before: Jul 27 21:00:11 2026 GMT
Not After : Oct 25 21:00:11 2026 GMT
Subject: CN=4b59a11b-2b23-479a-9354-3bc8dea9690e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:5a:0b:df:2e:ba:f8:65:29:ce:4a:a0:36:36:
8c:e3:fa:30:f2:50:6a:a7:f3:97:9d:85:1d:4b:15:
4c:87:60:d2:0a:b2:cf:8e:22:40:7e:ea:a5:42:9a:
00:b7:75:23:9c:58:25:07:18:a7:e7:06:76:c0:8e:
4e:7b:59:88:1f:8b:37:98:5f:29:fa:74:53:33:75:
b1:c3:3d:05:70:cf:25:2a:db:20:fc:8e:99:78:09:
ec:17:bc:15:5d:6b:92:bd:12:ed:9f:45:86:db:10:
70:10:52:df:58:99:dd:8f:d7:0a:e3:7e:cb:1d:e6:
77:75:be:23:ac:7a:45:77:69:37:e6:e4:50:99:7e:
8f:cf:30:53:cf:b8:4a:98:2a:b6:09:aa:b1:df:91:
c7:e4:03:ff:4f:4c:00:93:92:10:9b:fe:d5:5f:8c:
5c:bd:94:62:14:91:59:60:64:79:75:15:1b:a6:87:
f0:d7:79:57:77:7f:d2:b1:a3:4c:67:70:2e:30:58:
ba:54:92:71:4a:a0:ac:4a:57:50:df:8d:fa:6f:67:
d1:a9:f1:ff:1b:20:b6:9d:e7:07:4e:70:21:d2:d4:
cd:e3:d5:8c:07:f1:43:73:f4:2c:5a:c5:f6:7d:48:
84:7b:af:91:18:8e:8f:93:ab:a9:17:c1:32:17:08:
fb:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:96:80:BA:6B:E9:A5:4E:C9:DF:65:49:AF:D6:31:9D:7C:8B:C4:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f4ecbe8f-8b38-4e68-bcac-0ebae474bb3f/b5390a6e-8f5e-3278-a987-d95fd8b843b3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f4ecbe8f-8b38-4e68-bcac-0ebae474bb3f/f4ecbe8f-8b38-4e68-bcac-0ebae474bb3f.crl
X509v3 Authority Key Identifier:
keyid:7E:A1:A3:48:30:66:8B:7E:61:E9:CC:06:49:B4:5D:82:E1:88:5C:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f4ecbe8f-8b38-4e68-bcac-0ebae474bb3f.cer
sbgp-ipAddrBlock: critical
IPv4:
23.171.64.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:66:31:b0:92:a3:a5:de:d9:ee:bb:93:56:f7:0c:7c:8a:ac:
ab:17:a8:ec:fc:cd:c0:bf:19:c8:5a:ca:0a:14:a1:0b:48:df:
1c:0b:3e:be:66:21:fb:f5:3d:fa:2c:b5:70:c7:8d:b3:78:24:
27:db:8f:06:b9:1d:be:9d:13:44:bd:61:d2:06:9d:84:7a:cb:
72:81:77:74:55:4c:a7:45:8d:5c:e4:d2:7f:29:a0:f3:f9:78:
8c:60:58:a7:c3:ac:ee:7b:98:be:8c:49:7e:5a:01:f3:ce:ed:
4c:86:14:9c:37:ef:d8:18:72:98:79:ee:2a:95:94:a9:08:57:
f2:98:4a:ce:08:2e:87:0a:85:8d:b2:d5:f7:b0:10:be:8c:d0:
ca:6b:f3:eb:70:fe:44:54:f8:90:9d:46:bc:af:0d:42:9e:7e:
0e:0e:69:f1:93:32:57:be:d9:05:23:ef:20:6f:e7:8c:a2:64:
02:c8:c1:8d:2a:f3:81:63:e8:4a:fc:2c:77:dd:53:b4:06:65:
71:10:7e:d1:d2:f2:08:ff:2a:ef:9a:75:0c:c4:a4:d2:d9:1b:
fc:0a:0c:05:78:13:bd:5a:26:08:6f:43:0c:f2:ec:95:34:df:
3c:3f:5f:b0:d2:57:61:4b:ea:ba:15:f3:a5:74:5b:73:dc:c4:
16:00:0b:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:41:22 2026 by rpki-client