
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/297a49b5-369a-433a-8895-9036300fdb1c/8da5cd74-1a3c-3619-9dcc-08932eb6adeb.roa
File: 8da5cd74-1a3c-3619-9dcc-08932eb6adeb.roa (raw, json)
Hash identifier: nDhraPANYrYHwv9ctqwofCBFJu4/FBHH+BQ7GzGB4QU=
Subject key identifier: 54:4A:FF:4C:C2:D3:8E:06:16:A7:4E:33:F7:DE:0C:CA:E1:E1:BD:6E
Certificate issuer: /CN=297a49b5-369a-433a-8895-9036300fdb1c
Certificate serial: 010D0C9F4328584F496620B3865A53F32DC3DB20
Authority key identifier: 07:2D:06:46:DA:0D:12:3D:12:2B:F4:55:D1:CE:6A:16:2E:1F:9B:D4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/297a49b5-369a-433a-8895-9036300fdb1c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/297a49b5-369a-433a-8895-9036300fdb1c/8da5cd74-1a3c-3619-9dcc-08932eb6adeb.roa
Signing time: Fri 25 Sep 2026 00:35:14 +0000
ROA not before: Fri 25 Sep 2026 00:35:14 +0000
ROA not after: Thu 24 Dec 2026 01:35:14 +0000
asID: 402994
IP address blocks: 23.164.84.0/24 maxlen: 24
2602:f2e8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/297a49b5-369a-433a-8895-9036300fdb1c/297a49b5-369a-433a-8895-9036300fdb1c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/297a49b5-369a-433a-8895-9036300fdb1c/297a49b5-369a-433a-8895-9036300fdb1c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/297a49b5-369a-433a-8895-9036300fdb1c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Nov 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:66:20:b3:86:5a:53:f3:2d:c3:db:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297a49b5-369a-433a-8895-9036300fdb1c
Validity
Not Before: Sep 25 00:35:14 2026 GMT
Not After : Dec 24 01:35:14 2026 GMT
Subject: CN=3dd16235-a533-4b4e-8edd-2fd93f5938a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:70:e3:d4:45:c5:3d:c0:f5:26:f3:84:0a:88:
3c:a9:28:51:04:ba:16:cf:18:4e:02:da:a9:50:24:
de:5e:09:04:97:ad:17:23:b8:5b:22:d8:c8:c5:55:
56:80:04:53:d2:57:1a:68:95:8d:98:d0:f5:29:e9:
00:87:15:6c:63:bf:aa:66:24:86:9f:38:c6:c9:5e:
98:b6:bf:b3:bb:36:8a:5f:be:30:3f:e0:29:95:fd:
93:1a:be:33:c3:b9:15:78:c9:ae:9b:3c:0c:e4:7c:
35:b5:53:48:79:f0:f3:a0:31:51:de:43:2a:de:18:
6f:da:f1:3b:f6:fa:06:5c:25:73:37:6a:33:ae:00:
82:55:eb:73:8c:c6:81:46:6f:8d:41:22:e9:3d:fc:
21:9b:c1:d6:64:df:d0:2e:e2:0d:da:07:ce:ce:5d:
fb:9b:a5:e3:63:a4:25:ac:65:c9:b9:99:e5:df:44:
95:78:67:51:a8:e8:55:f2:55:ca:e5:fa:4b:c1:e5:
49:b4:20:8e:fe:d1:57:6b:8b:22:c6:e8:69:c7:98:
d6:e9:f5:89:62:61:44:ba:7f:2f:56:3e:c2:54:b6:
5d:49:3a:19:2b:7c:9e:b1:27:56:c0:b4:5b:a6:eb:
54:68:8e:8f:8b:50:c4:5a:d0:25:d6:f1:e1:dc:03:
56:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:4A:FF:4C:C2:D3:8E:06:16:A7:4E:33:F7:DE:0C:CA:E1:E1:BD:6E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/297a49b5-369a-433a-8895-9036300fdb1c/8da5cd74-1a3c-3619-9dcc-08932eb6adeb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/297a49b5-369a-433a-8895-9036300fdb1c/297a49b5-369a-433a-8895-9036300fdb1c.crl
X509v3 Authority Key Identifier:
keyid:07:2D:06:46:DA:0D:12:3D:12:2B:F4:55:D1:CE:6A:16:2E:1F:9B:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/297a49b5-369a-433a-8895-9036300fdb1c.cer
sbgp-ipAddrBlock: critical
IPv4:
23.164.84.0/24
IPv6:
2602:f2e8::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:de:45:58:1c:c7:38:58:8c:7e:75:4d:d9:2a:63:4e:02:93:
50:79:b5:00:c3:c3:28:0c:be:0a:7c:5a:52:50:c4:da:07:4b:
bb:dc:5b:3f:d8:a0:c8:29:fe:58:09:ed:f3:7b:37:eb:97:96:
f6:75:5c:0a:0a:05:39:1a:9e:2e:aa:f7:28:ca:4c:98:6c:23:
24:f6:fc:d5:4a:2c:01:67:ec:e7:67:0e:fa:cd:fb:a7:60:9d:
91:08:bf:f3:e7:3e:df:2d:4e:ec:c9:6f:68:7a:18:a3:26:40:
88:75:7e:95:1e:43:84:39:39:51:a6:f2:06:c6:90:25:fe:5e:
25:56:c3:49:8e:66:6f:cf:6a:84:d9:8a:f3:69:af:7b:10:c3:
70:22:6e:c7:8e:73:85:dc:89:74:63:cc:5e:fd:62:3b:7c:b8:
0a:28:20:aa:fd:ee:b4:b2:f9:58:e9:fd:5e:b3:27:89:13:e8:
79:1c:79:17:ac:24:92:ea:53:03:20:7a:8f:4d:fb:fc:2f:c7:
24:5e:f7:98:bf:87:ce:c8:6a:06:05:07:44:75:f4:15:cb:44:
4f:23:9c:f2:e3:8a:3a:72:38:ea:b9:f0:ea:ef:40:26:d9:5c:
3d:b4:f1:b9:83:2f:66:96:c5:9a:48:b5:6b:ff:de:ff:9c:59:
7a:03:c8:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 14:37:09 2026 by rpki-client