
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/324596f5-1cf7-4d92-9c68-ecfb27205d68/597f4a4b-40a9-3c25-9e38-fe485186c510.roa
File: 597f4a4b-40a9-3c25-9e38-fe485186c510.roa (raw, json)
Hash identifier: KX3BZYbYMQLIc+0l9Rokqy7kUwtbhzjwlku9D3yhJNc=
Subject key identifier: CD:0D:46:BF:55:34:1B:44:A6:22:79:7E:FF:08:55:1B:3A:8D:34:66
Certificate issuer: /CN=324596f5-1cf7-4d92-9c68-ecfb27205d68
Certificate serial: 010D0C9F4328584E4AEF4FBD16CC6CC9BE676680
Authority key identifier: A7:F2:5A:3A:50:B8:87:85:17:91:C0:9A:33:22:29:38:EC:E5:23:90
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/324596f5-1cf7-4d92-9c68-ecfb27205d68.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/324596f5-1cf7-4d92-9c68-ecfb27205d68/597f4a4b-40a9-3c25-9e38-fe485186c510.roa
Signing time: Thu 25 Jun 2026 21:00:12 +0000
ROA not before: Thu 25 Jun 2026 21:00:12 +0000
ROA not after: Wed 23 Sep 2026 21:00:12 +0000
asID: 400115
IP address blocks: 23.130.152.0/23 maxlen: 23
23.130.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/324596f5-1cf7-4d92-9c68-ecfb27205d68/324596f5-1cf7-4d92-9c68-ecfb27205d68.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/324596f5-1cf7-4d92-9c68-ecfb27205d68/324596f5-1cf7-4d92-9c68-ecfb27205d68.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/324596f5-1cf7-4d92-9c68-ecfb27205d68.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 10 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:4a:ef:4f:bd:16:cc:6c:c9:be:67:66:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=324596f5-1cf7-4d92-9c68-ecfb27205d68
Validity
Not Before: Jun 25 21:00:12 2026 GMT
Not After : Sep 23 21:00:12 2026 GMT
Subject: CN=98d113a3-8085-4926-89c3-652ff25a4e86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5f:af:f7:14:ed:cb:06:72:3c:86:3a:28:9b:
13:04:0e:1b:f1:f6:de:d9:98:6b:f6:35:a7:e7:22:
4e:8d:a6:24:d2:cb:04:19:1b:1f:ca:d7:ed:96:8a:
0b:f2:62:25:3f:11:dd:ff:43:e4:51:82:1b:b2:68:
a8:37:14:20:33:76:15:4b:62:e9:87:69:98:4e:d3:
4a:27:13:4d:b3:65:a5:ba:69:f8:be:7d:de:d4:eb:
c1:e0:66:52:a5:ce:29:ad:fd:5d:ab:8d:11:21:dd:
e6:00:26:1b:1c:d8:51:62:e6:b6:7f:23:4c:31:1f:
fa:63:ea:25:0c:8f:e9:8f:c4:e8:7e:7a:35:e5:f3:
5f:14:ac:d7:00:28:ea:a6:d6:e7:61:94:9d:1c:24:
40:5e:2a:82:0a:b3:e5:ca:9e:c0:64:0f:cf:19:cf:
1d:46:1a:36:e5:ab:a0:0f:45:4f:17:a1:20:fc:72:
01:d7:e9:22:09:dc:b7:92:91:88:69:40:e7:18:d5:
7a:8a:e6:50:0b:a2:83:d4:05:ab:3f:12:98:7a:56:
84:69:04:33:ca:1b:35:fa:6b:b0:0e:a4:9e:08:c0:
14:c4:71:90:e1:8a:d1:af:5d:72:95:09:a7:ba:01:
90:87:81:87:df:7f:3e:c5:e4:60:bd:f3:41:5b:df:
57:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:0D:46:BF:55:34:1B:44:A6:22:79:7E:FF:08:55:1B:3A:8D:34:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/324596f5-1cf7-4d92-9c68-ecfb27205d68/597f4a4b-40a9-3c25-9e38-fe485186c510.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/324596f5-1cf7-4d92-9c68-ecfb27205d68/324596f5-1cf7-4d92-9c68-ecfb27205d68.crl
X509v3 Authority Key Identifier:
keyid:A7:F2:5A:3A:50:B8:87:85:17:91:C0:9A:33:22:29:38:EC:E5:23:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/324596f5-1cf7-4d92-9c68-ecfb27205d68.cer
sbgp-ipAddrBlock: critical
IPv4:
23.130.152.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:d0:17:ed:13:71:0d:54:ac:1c:21:1c:7a:ea:26:ee:d5:b4:
b6:a9:b1:4d:4b:45:17:70:db:03:d5:48:68:e0:16:ff:be:d7:
f1:57:ff:c3:72:6e:db:0b:42:bd:60:56:1f:c1:ea:1f:a4:7c:
10:e9:4d:d0:b7:e6:8f:fd:0f:b9:c5:c9:d3:42:b6:e2:3c:cb:
96:f9:8d:d9:ff:e6:89:85:e4:dc:d2:15:6d:34:d8:bc:77:b3:
ed:46:c3:d4:8e:26:58:d7:fe:a1:24:16:7f:02:6a:01:c7:97:
7f:f1:02:19:87:25:c7:45:e9:2d:b0:f4:cd:dd:f8:67:b8:87:
87:25:2b:3c:6e:73:75:82:71:12:d9:7b:0d:25:4b:14:e5:87:
06:33:7f:96:8e:3e:15:85:30:48:c7:d8:80:fe:28:38:23:3a:
84:11:18:b0:62:89:40:71:e3:c1:a2:90:af:06:77:38:4d:ae:
e8:2d:2d:30:17:fe:8d:cf:3d:6a:ca:d9:ab:4c:75:c7:21:16:
dc:eb:f9:55:1e:7d:4b:a1:53:e1:7c:a5:9b:72:c7:e4:a3:98:
94:90:3b:38:3b:04:1d:ef:9e:61:92:6f:6a:21:e4:d1:eb:5e:
bf:45:bf:7f:40:21:81:4b:a7:9b:f7:4c:21:59:42:a7:91:a3:
d9:b2:bd:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 9 10:19:51 2026 by rpki-client