
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/761d4038-2e12-4354-ba44-f50a79f7d209/dcadadd9-2962-3056-9744-0e8f860cd2f2.roa
File: dcadadd9-2962-3056-9744-0e8f860cd2f2.roa (raw, json)
Hash identifier: K0yWhYLSCeqj7L52xym0bVmYW9PTC9jLE1d8hFfNLe0=
Subject key identifier: 49:A7:3B:BA:65:40:FC:B7:7D:1C:A8:10:68:62:9F:99:AD:52:E0:EA
Certificate issuer: /CN=761d4038-2e12-4354-ba44-f50a79f7d209
Certificate serial: 010D0C9F4328584EA79BA6B095E6648D8762A240
Authority key identifier: 42:D5:52:37:D1:E1:55:24:91:88:61:70:62:AB:06:B5:00:42:83:2F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/761d4038-2e12-4354-ba44-f50a79f7d209.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/761d4038-2e12-4354-ba44-f50a79f7d209/dcadadd9-2962-3056-9744-0e8f860cd2f2.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 21807
IP address blocks: 23.143.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/761d4038-2e12-4354-ba44-f50a79f7d209/761d4038-2e12-4354-ba44-f50a79f7d209.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/761d4038-2e12-4354-ba44-f50a79f7d209/761d4038-2e12-4354-ba44-f50a79f7d209.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/761d4038-2e12-4354-ba44-f50a79f7d209.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:9b:a6:b0:95:e6:64:8d:87:62:a2:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=761d4038-2e12-4354-ba44-f50a79f7d209
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=acb319fe-37d4-4102-a376-c2faeb1e567d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d4:1d:b7:2e:bd:19:48:f0:1f:c3:01:ac:0c:
7b:59:cd:e6:e9:39:bb:13:f2:ea:65:8f:3d:25:13:
20:3d:21:a2:1b:1f:ec:64:3c:fe:2c:42:fa:00:75:
50:04:ee:e2:34:92:41:a5:35:28:f2:28:f4:c0:43:
88:a0:3a:89:8c:ff:35:93:a4:2a:42:e3:63:43:d9:
7f:53:09:e2:fe:c6:07:09:49:96:a0:54:c5:bb:91:
9b:b0:fa:f2:58:44:a4:65:7a:07:6f:6c:5c:07:93:
89:20:4e:b7:0f:86:17:7a:da:0c:f1:a1:68:f4:ec:
13:9f:0c:a6:76:69:b9:a2:df:7d:49:66:3a:98:83:
24:d3:6d:1d:f2:69:79:9b:f8:5e:01:0e:e0:b9:a9:
a3:c8:dc:df:af:9a:10:94:0e:23:1d:b6:2d:6b:6d:
3c:18:be:7f:9e:bb:8e:8a:22:06:b2:8b:49:29:76:
0e:42:f1:fa:ee:d7:7c:a7:6f:a9:1b:9d:50:91:81:
be:ee:b7:95:fd:96:44:75:da:cb:03:25:f4:db:fd:
c8:cc:b1:a4:1f:62:22:c0:5c:22:82:15:52:29:51:
20:af:8f:80:79:14:b0:4d:72:23:7e:2d:ec:fa:43:
89:cc:12:ab:91:c6:25:ac:7d:2d:be:4f:01:2c:88:
d2:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:A7:3B:BA:65:40:FC:B7:7D:1C:A8:10:68:62:9F:99:AD:52:E0:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/761d4038-2e12-4354-ba44-f50a79f7d209/dcadadd9-2962-3056-9744-0e8f860cd2f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/761d4038-2e12-4354-ba44-f50a79f7d209/761d4038-2e12-4354-ba44-f50a79f7d209.crl
X509v3 Authority Key Identifier:
keyid:42:D5:52:37:D1:E1:55:24:91:88:61:70:62:AB:06:B5:00:42:83:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/761d4038-2e12-4354-ba44-f50a79f7d209.cer
sbgp-ipAddrBlock: critical
IPv4:
23.143.172.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:71:a4:58:ae:27:97:1e:3b:7a:8e:54:3c:cf:ff:d8:19:03:
62:02:55:19:d7:ee:f9:68:4f:47:77:f3:ff:9c:45:47:03:2e:
8d:0a:84:9a:d5:61:21:bd:6f:b5:7b:5e:98:63:fc:4b:fa:da:
a6:56:d1:38:f6:a7:19:ca:c2:50:17:c5:39:ab:a4:08:90:2b:
99:5c:a9:11:cb:34:11:44:30:e7:b8:9d:ff:2e:c3:12:20:c4:
28:a7:28:d1:fb:a3:f0:5f:70:4c:6c:a5:3e:b3:11:1c:60:33:
35:b3:e4:7d:89:b2:8c:54:f2:36:92:13:2f:a7:f2:8f:85:68:
3f:e4:cd:76:ee:2a:f5:aa:d8:5a:08:ee:c9:52:f6:6d:5d:82:
e9:2d:57:a4:b4:9b:a4:a7:53:48:49:62:70:91:8a:6e:4b:59:
e1:bb:54:a8:03:b4:c6:fa:1c:d1:20:c3:eb:60:40:17:bf:15:
e2:80:b3:20:51:f1:67:84:72:bf:12:6d:02:06:78:ed:36:55:
53:08:c1:f6:42:05:10:48:c9:d3:1f:61:56:18:e0:11:d6:41:
8d:9c:14:5f:79:74:93:c9:25:a4:10:ef:a5:d2:bd:b7:a5:1a:
e3:18:9f:d0:a3:92:bd:f0:82:30:1c:77:30:2d:cc:94:41:b5:
cc:4b:24:e9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nm6awleZkjYdiokAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzYxZDQwMzgtMmUxMi00MzU0LWJhNDQtZjUwYTc5Zjdk
MjA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
YWNiMzE5ZmUtMzdkNC00MTAyLWEzNzYtYzJmYWViMWU1NjdkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtQdty69GUjwH8MBrAx7Wc3m6Tm7E/LqZY89
JRMgPSGiGx/sZDz+LEL6AHVQBO7iNJJBpTUo8ij0wEOIoDqJjP81k6QqQuNjQ9l/
Uwni/sYHCUmWoFTFu5GbsPryWESkZXoHb2xcB5OJIE63D4YXetoM8aFo9OwTnwym
dmm5ot99SWY6mIMk020d8ml5m/heAQ7guamjyNzfr5oQlA4jHbYta208GL5/nruO
iiIGsotJKXYOQvH67td8p2+pG51QkYG+7reV/ZZEddrLAyX02/3IzLGkH2IiwFwi
ghVSKVEgr4+AeRSwTXIjfi3s+kOJzBKrkcYlrH0tvk8BLIjS2wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEmnO7plQPy3fRyoEGhin5mtUuDqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC83NjFk
NDAzOC0yZTEyLTQzNTQtYmE0NC1mNTBhNzlmN2QyMDkvZGNhZGFkZDktMjk2Mi0z
MDU2LTk3NDQtMGU4Zjg2MGNkMmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNzYxZDQwMzgtMmUxMi00MzU0LWJh
NDQtZjUwYTc5ZjdkMjA5Lzc2MWQ0MDM4LTJlMTItNDM1NC1iYTQ0LWY1MGE3OWY3
ZDIwOS5jcmwwHwYDVR0jBBgwFoAUQtVSN9HhVSSRiGFwYqsGtQBCgy8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC83NjFkNDAzOC0yZTEyLTQzNTQtYmE0NC1mNTBh
NzlmN2QyMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4+sMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEdxpFiuJ5ceO3qOVDzP/9gZA2ICVRnX7vloT0d38/+cRUcDLo0KhJrV
YSG9b7V7Xphj/Ev62qZW0Tj2pxnKwlAXxTmrpAiQK5lcqRHLNBFEMOe4nf8uwxIg
xCinKNH7o/BfcExspT6zERxgMzWz5H2JsoxU8jaSEy+n8o+FaD/kzXbuKvWq2FoI
7slS9m1dguktV6S0m6SnU0hJYnCRim5LWeG7VKgDtMb6HNEgw+tgQBe/FeKAsyBR
8WeEcr8SbQIGeO02VVMIwfZCBRBIydMfYVYY4BHWQY2cFF95dJPJJaQQ76XSvbel
GuMYn9Cjkr3wgjAcdzAtzJRBtcxLJOk=
-----END CERTIFICATE-----
Generated at Wed Jul 29 05:16:28 2026 by rpki-client