
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0927227-fbc8-4924-89af-1885637cb07c/e3f5a1d7-6a6c-316c-83fd-4366d98ca9a9.roa
File: e3f5a1d7-6a6c-316c-83fd-4366d98ca9a9.roa (raw, json)
Hash identifier: 7EthJWKt+HPJUcEokZXHj1icI5KkX1DHBJ8esGesfBE=
Subject key identifier: 50:01:16:7E:F2:38:1D:0C:C9:58:77:9C:BD:09:78:AF:82:D6:FA:D3
Certificate issuer: /CN=e0927227-fbc8-4924-89af-1885637cb07c
Certificate serial: 010D0C9F4328584E8C8A4726D314E1DE8573DDC0
Authority key identifier: 42:D4:C0:D6:AB:19:EE:81:22:57:BD:C2:B6:88:1C:A1:71:C0:7F:CC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0927227-fbc8-4924-89af-1885637cb07c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0927227-fbc8-4924-89af-1885637cb07c/e3f5a1d7-6a6c-316c-83fd-4366d98ca9a9.roa
Signing time: Sun 19 Jul 2026 09:00:11 +0000
ROA not before: Sun 19 Jul 2026 09:00:11 +0000
ROA not after: Sat 17 Oct 2026 09:00:11 +0000
asID: 35280
IP address blocks: 23.158.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0927227-fbc8-4924-89af-1885637cb07c/e0927227-fbc8-4924-89af-1885637cb07c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0927227-fbc8-4924-89af-1885637cb07c/e0927227-fbc8-4924-89af-1885637cb07c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0927227-fbc8-4924-89af-1885637cb07c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 23 Jul 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:8c:8a:47:26:d3:14:e1:de:85:73:dd:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0927227-fbc8-4924-89af-1885637cb07c
Validity
Not Before: Jul 19 09:00:11 2026 GMT
Not After : Oct 17 09:00:11 2026 GMT
Subject: CN=91cd0668-1bf2-4297-8715-49e0c4faeb8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:31:15:99:20:db:cc:10:c6:7c:12:ac:b6:c4:
91:81:e7:56:b9:0d:bb:5f:1e:90:75:55:a3:d3:bb:
75:cc:0c:30:84:41:25:36:26:8f:ac:1d:9d:1f:fb:
1d:6a:ef:11:18:c7:89:80:c1:1d:b1:71:0d:64:c5:
b7:86:89:92:8c:28:06:0f:e1:0c:19:68:36:bf:6c:
c5:88:48:42:12:62:7a:0d:70:a5:69:61:7e:a4:f2:
70:0d:6b:ad:b1:a8:e5:e3:ca:fc:d7:14:11:15:13:
6d:36:f7:42:40:ba:e1:10:ee:3f:cc:74:a9:75:9b:
e7:bd:36:8c:40:3c:3e:ff:14:8f:a0:52:22:da:06:
c8:bc:a5:65:80:16:dd:43:73:f8:18:51:7b:fb:43:
05:78:54:b7:3d:9e:8e:3e:e4:50:e7:98:94:53:d4:
9b:05:f9:03:3f:81:8f:d0:a5:97:f8:8f:2e:aa:6b:
52:56:0a:d6:fd:47:7f:3d:85:64:47:45:20:7c:49:
f9:d5:a5:85:3d:24:a1:a6:68:87:3d:53:73:0b:db:
28:af:27:6f:d0:9c:b3:18:18:cb:85:22:00:8e:57:
58:bb:c3:49:28:16:b4:32:a5:18:db:67:ff:0f:4d:
e6:1b:3a:af:98:0d:d5:6b:30:88:b0:1f:b8:85:2c:
0d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:01:16:7E:F2:38:1D:0C:C9:58:77:9C:BD:09:78:AF:82:D6:FA:D3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0927227-fbc8-4924-89af-1885637cb07c/e3f5a1d7-6a6c-316c-83fd-4366d98ca9a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0927227-fbc8-4924-89af-1885637cb07c/e0927227-fbc8-4924-89af-1885637cb07c.crl
X509v3 Authority Key Identifier:
keyid:42:D4:C0:D6:AB:19:EE:81:22:57:BD:C2:B6:88:1C:A1:71:C0:7F:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0927227-fbc8-4924-89af-1885637cb07c.cer
sbgp-ipAddrBlock: critical
IPv4:
23.158.32.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:1f:da:c1:2a:eb:fa:52:14:2b:fc:58:c4:3f:dd:d3:0d:70:
a7:9a:9e:90:e3:bf:04:50:90:e3:81:d9:6c:9b:73:e1:13:99:
94:fe:cc:0b:06:53:6e:50:19:9d:c0:0a:16:5a:d3:e3:e7:bc:
9c:76:58:fb:ea:1d:44:c7:55:ea:f3:d4:31:ca:28:1f:3d:61:
6c:7c:8a:57:b3:4c:62:7a:81:fa:e4:24:f8:37:35:17:f1:1d:
8b:57:90:69:e5:04:f1:ad:15:49:23:67:51:6a:cc:61:6a:18:
bd:9d:4f:a1:13:b9:1d:d8:bb:72:c4:5e:12:55:68:76:f1:94:
e5:17:e8:b9:49:6a:78:a5:04:e2:10:41:d5:37:08:a7:2b:b9:
a2:b9:05:0b:96:69:3a:b4:fa:f7:b8:ac:82:22:75:91:e4:b6:
b5:e8:ed:59:09:e1:df:68:17:fd:3a:e2:23:c4:11:42:d7:c7:
85:ca:d4:f6:23:9f:83:ac:cf:0d:ba:bc:ae:b7:31:68:4c:94:
ec:1d:a5:2f:d3:5e:43:2b:2a:0e:9e:23:79:4b:1d:e9:74:73:
34:f0:c3:61:d1:a3:66:1d:88:9c:8c:3f:49:9a:f8:09:0b:3c:
eb:48:02:88:73:16:20:03:76:44:9d:31:56:e4:eb:8f:08:62:
ad:5e:58:6a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6Mikcm0xTh3oVz3cAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTA5MjcyMjctZmJjOC00OTI0LTg5YWYtMTg4NTYzN2Ni
MDdjMB4XDTI2MDcxOTA5MDAxMVoXDTI2MTAxNzA5MDAxMVowLzEtMCsGA1UEAxMk
OTFjZDA2NjgtMWJmMi00Mjk3LTg3MTUtNDllMGM0ZmFlYjhiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2DEVmSDbzBDGfBKstsSRgedWuQ27Xx6QdVWj
07t1zAwwhEElNiaPrB2dH/sdau8RGMeJgMEdsXENZMW3homSjCgGD+EMGWg2v2zF
iEhCEmJ6DXClaWF+pPJwDWutsajl48r81xQRFRNtNvdCQLrhEO4/zHSpdZvnvTaM
QDw+/xSPoFIi2gbIvKVlgBbdQ3P4GFF7+0MFeFS3PZ6OPuRQ55iUU9SbBfkDP4GP
0KWX+I8uqmtSVgrW/Ud/PYVkR0UgfEn51aWFPSShpmiHPVNzC9sorydv0JyzGBjL
hSIAjldYu8NJKBa0MqUY22f/D03mGzqvmA3VazCIsB+4hSwNpQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFABFn7yOB0MyVh3nL0JeK+C1vrTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9lMDky
NzIyNy1mYmM4LTQ5MjQtODlhZi0xODg1NjM3Y2IwN2MvZTNmNWExZDctNmE2Yy0z
MTZjLTgzZmQtNDM2NmQ5OGNhOWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZTA5MjcyMjctZmJjOC00OTI0LTg5
YWYtMTg4NTYzN2NiMDdjL2UwOTI3MjI3LWZiYzgtNDkyNC04OWFmLTE4ODU2Mzdj
YjA3Yy5jcmwwHwYDVR0jBBgwFoAUQtTA1qsZ7oEiV73CtogcoXHAf8wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9lMDkyNzIyNy1mYmM4LTQ5MjQtODlhZi0xODg1
NjM3Y2IwN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF54gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADwf2sEq6/pSFCv8WMQ/3dMNcKeanpDjvwRQkOOB2Wybc+ETmZT+zAsG
U25QGZ3AChZa0+PnvJx2WPvqHUTHVerz1DHKKB89YWx8ilezTGJ6gfrkJPg3NRfx
HYtXkGnlBPGtFUkjZ1FqzGFqGL2dT6ETuR3Yu3LEXhJVaHbxlOUX6LlJanilBOIQ
QdU3CKcruaK5BQuWaTq0+ve4rIIidZHktrXo7VkJ4d9oF/064iPEEULXx4XK1PYj
n4Oszw26vK63MWhMlOwdpS/TXkMrKg6eI3lLHel0czTww2HRo2YdiJyMP0ma+AkL
POtIAohzFiADdkSdMVbk648IYq1eWGo=
-----END CERTIFICATE-----
Generated at Tue Jul 21 23:51:01 2026 by rpki-client