
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/1629bdf7-f64f-3f3e-a254-435746f6fcb7.roa
File: 1629bdf7-f64f-3f3e-a254-435746f6fcb7.roa (raw, json)
Hash identifier: +7RHMbT3yW8I5V0uQHC8GrhQ5NQWHdUqMU3m6/2wFoo=
Subject key identifier: 35:09:1A:21:3F:47:53:00:8A:D0:41:59:C6:1D:63:93:BE:D5:46:E5
Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial: 010D0C9F4328584FA1633178162255E4AA067200
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/1629bdf7-f64f-3f3e-a254-435746f6fcb7.roa
Signing time: Mon 26 Oct 2026 13:00:14 +0000
ROA not before: Mon 26 Oct 2026 13:00:14 +0000
ROA not after: Sun 24 Jan 2027 14:00:14 +0000
asID: 30058
IP address blocks: 23.237.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 29 Oct 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:a1:63:31:78:16:22:55:e4:aa:06:72:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
Validity
Not Before: Oct 26 13:00:14 2026 GMT
Not After : Jan 24 14:00:14 2027 GMT
Subject: CN=1aef2c6a-2ea6-44f8-9e82-dccc97a45091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ba:39:da:5f:9a:b3:89:e0:c7:11:1f:67:e2:
00:a6:13:8f:0a:b2:3c:63:fb:30:c3:b1:bf:b3:68:
f8:6f:bd:62:56:4a:2c:3b:af:39:3c:92:ca:2f:12:
44:45:dd:3d:c6:3c:c0:5e:7f:9a:94:5a:6e:ca:c0:
7f:92:06:0b:4c:47:01:6f:bf:b3:1a:ce:c8:55:49:
4a:fb:fb:d2:d4:54:84:b5:ff:54:43:86:d6:2a:e2:
08:a1:58:3c:01:69:67:bf:c3:35:b4:ed:47:78:6f:
e7:b1:c0:f0:90:b9:88:a8:fc:8d:b4:45:ab:8d:b0:
94:5f:b7:a9:3a:05:ad:24:8b:e4:85:bc:65:cf:08:
42:26:cf:a3:31:64:40:b1:cb:6b:80:8b:ca:0d:f7:
ba:65:ee:70:8a:6e:c3:e9:5b:1e:b9:b0:1f:44:3c:
b4:6b:b8:6e:8d:0a:fd:11:ab:04:ca:bd:b4:c6:27:
6e:20:92:38:22:67:5d:25:b0:a4:96:29:ee:e0:3f:
83:7e:ef:4f:dd:ef:75:2b:fa:74:9c:4f:f9:97:bb:
cb:3b:66:35:1b:2f:06:98:2d:58:cd:60:76:ab:12:
8c:4b:86:af:db:d1:a3:d6:a3:c7:7a:10:d4:29:e4:
97:e1:f4:e0:17:92:9a:09:fe:e1:95:b3:25:dc:65:
21:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:09:1A:21:3F:47:53:00:8A:D0:41:59:C6:1D:63:93:BE:D5:46:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/1629bdf7-f64f-3f3e-a254-435746f6fcb7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
X509v3 Authority Key Identifier:
keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
sbgp-ipAddrBlock: critical
IPv4:
23.237.147.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:88:40:d8:e1:ed:92:9d:87:cb:30:a0:52:21:d5:9c:e3:7a:
21:60:da:9c:bc:29:b4:ad:7a:3c:0c:9c:2c:9f:3b:fd:aa:da:
92:9a:d6:bb:c3:49:b2:90:2e:6c:39:4a:7f:fb:a1:2b:8f:3e:
6a:96:ee:e0:c4:7c:cb:e4:76:28:31:d3:d5:02:47:da:d3:b2:
82:9d:30:12:4a:ed:85:b6:35:1d:ac:be:ff:cf:d2:9a:a9:06:
f7:97:19:11:76:a3:cc:3f:4f:89:19:f2:28:25:52:ff:85:fc:
a4:45:82:8c:1c:27:19:52:b3:3a:a3:ed:98:c8:f9:a4:fd:34:
45:06:e6:13:01:9b:bb:d9:be:4b:b2:8d:b0:3a:d4:ed:eb:d1:
c8:6f:18:15:24:12:9f:3d:60:44:56:1a:24:a6:b3:2a:02:e2:
8f:49:41:1e:f0:f1:21:61:b1:c7:66:c2:fa:08:58:23:3c:05:
ee:d7:cb:2d:48:b1:35:71:1f:89:94:25:d0:c2:51:11:ba:1b:
a2:0a:a3:02:f5:e2:a2:8d:f9:a7:c0:1c:53:9c:14:70:42:5e:
bb:42:78:38:5e:29:aa:87:fd:17:48:ca:9b:75:19:d9:34:e1:
0e:50:a8:88:2e:d4:c3:77:e6:45:39:94:c2:89:a7:9a:66:de:
d9:5c:fd:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 22:29:52 2026 by rpki-client