
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086/aaadd389-a574-39f0-8e79-6f6ddc8f8756.roa
File: aaadd389-a574-39f0-8e79-6f6ddc8f8756.roa (raw, json)
Hash identifier: GV37yGMqt0N2Ote64DIL+eV+lQwc7C05Odj+ajlcvB8=
Subject key identifier: 3B:9B:0A:FE:5C:8B:4F:DC:DB:8E:35:E5:E6:9B:F3:25:ED:79:8E:17
Certificate issuer: /CN=c6bc2da7-5b3b-4ff6-8bc2-59c42c901086
Certificate serial: 010D0C9F4328584EB2B1BFCE1E6D499A77D70640
Authority key identifier: 9D:66:1F:9F:23:E7:C7:B2:21:F2:E8:33:6C:7B:CE:AB:65:97:31:F2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086/aaadd389-a574-39f0-8e79-6f6ddc8f8756.roa
Signing time: Sun 02 Aug 2026 01:00:11 +0000
ROA not before: Sun 02 Aug 2026 01:00:11 +0000
ROA not after: Sat 31 Oct 2026 01:00:11 +0000
asID: 18615
IP address blocks: 23.252.0.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 25 Aug 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:b2:b1:bf:ce:1e:6d:49:9a:77:d7:06:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6bc2da7-5b3b-4ff6-8bc2-59c42c901086
Validity
Not Before: Aug 2 01:00:11 2026 GMT
Not After : Oct 31 01:00:11 2026 GMT
Subject: CN=b87704a1-06da-4ae4-b7e7-1faea29cadb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:3b:ad:98:10:2d:82:1b:f9:4f:bb:f4:60:7e:
db:9f:fe:60:57:15:99:dd:0f:79:be:a5:c9:e2:ef:
67:1d:12:eb:1a:41:a5:40:c7:95:79:0c:f9:81:c9:
d8:8a:c8:e7:ae:9b:8f:ae:a6:58:bb:b1:f4:b4:a7:
66:66:e0:79:41:24:b3:8a:40:a6:5d:20:cc:fe:cf:
b3:1d:20:b9:ce:93:8f:6b:97:70:5b:8a:ea:20:84:
5b:77:80:18:18:e5:d3:1f:57:a3:26:69:62:91:e8:
82:41:84:39:56:ef:09:5b:77:29:e7:15:60:d8:27:
cb:37:dc:87:e1:05:7f:1b:6e:3a:8b:8f:a3:f6:ab:
ac:d9:ad:d7:2b:59:d8:77:ba:80:a3:a1:e7:32:d9:
66:68:9b:af:fa:c8:a9:54:79:a2:20:b7:0c:47:cc:
58:51:1c:bc:83:0d:52:40:8b:a5:96:b9:fa:d6:75:
04:ef:cd:44:a7:92:0c:b4:0c:a2:96:d3:66:69:eb:
11:93:8f:5e:a1:a1:ea:ca:8f:3d:01:f8:26:72:bf:
13:98:a4:d2:e7:47:5a:8d:cf:ec:ba:72:54:09:39:
1d:58:dd:c2:6c:de:d0:65:9f:bb:03:a4:bb:e8:c6:
0a:64:4c:68:c2:5a:88:2f:f2:c3:88:7a:36:7a:ea:
dc:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:9B:0A:FE:5C:8B:4F:DC:DB:8E:35:E5:E6:9B:F3:25:ED:79:8E:17
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086/aaadd389-a574-39f0-8e79-6f6ddc8f8756.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086.crl
X509v3 Authority Key Identifier:
keyid:9D:66:1F:9F:23:E7:C7:B2:21:F2:E8:33:6C:7B:CE:AB:65:97:31:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c6bc2da7-5b3b-4ff6-8bc2-59c42c901086.cer
sbgp-ipAddrBlock: critical
IPv4:
23.252.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:f4:e4:bc:07:83:3c:fa:3d:2f:17:ef:8f:e4:eb:b5:28:ea:
63:99:6f:06:27:00:c3:71:c6:0a:6f:63:cb:c1:4a:71:e5:db:
c9:0b:7d:c0:17:df:24:6b:37:f2:67:d4:58:a3:9b:41:42:55:
a0:02:6b:e9:d5:5c:7e:a8:7b:c0:ab:47:93:d8:b9:6e:26:84:
27:9d:6b:a9:12:8b:0f:57:fa:6e:c4:b1:5a:8b:c4:48:ad:a7:
2f:88:82:04:bd:2e:e3:5a:2d:01:e4:4b:1c:0e:4d:31:a2:f1:
dc:28:5a:e0:9d:c4:f1:15:db:b0:a7:5d:11:e2:a6:b7:c9:74:
73:56:eb:37:aa:89:81:8d:50:fb:8d:00:91:fb:b3:e4:b4:05:
3e:30:6d:c0:18:53:08:38:b9:b2:93:b8:65:1e:82:d5:cc:fa:
8f:90:87:4c:46:0f:92:e5:f0:18:d9:ae:c2:80:71:c7:bb:ef:
86:17:ea:8d:bc:64:66:e4:c8:92:6a:f8:72:4b:86:fc:9a:1e:
72:60:d0:a0:46:40:c4:53:c5:c4:f4:36:4b:d2:b9:f4:fc:e2:
30:ae:b6:77:3f:f5:c5:70:da:57:d0:f4:58:2d:16:a8:35:02:
a4:06:14:5c:18:bc:bd:32:e2:d4:1d:e6:89:69:d0:78:80:34:
eb:dd:fa:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 06:54:04 2026 by rpki-client