
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10fa2500-375d-430f-932e-9e2080243439/696ebd6a-1c65-3757-8b2c-3c47dc4ec827.roa
File: 696ebd6a-1c65-3757-8b2c-3c47dc4ec827.roa (raw, json)
Hash identifier: nNZY3iC4IGaQhBbzSMUg9yVJTJHUU6KUJAvjnOEqMgc=
Subject key identifier: 8A:F6:79:C4:82:2C:D5:67:5E:4A:5F:63:78:02:72:00:76:14:94:4E
Certificate issuer: /CN=10fa2500-375d-430f-932e-9e2080243439
Certificate serial: 010D0C9F4328584F655D810E9F1F159F9FBF4BC0
Authority key identifier: EC:2E:E1:0E:27:6F:DE:AD:2C:F8:2D:F1:A7:18:49:8C:CB:EC:DB:90
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10fa2500-375d-430f-932e-9e2080243439.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10fa2500-375d-430f-932e-9e2080243439/696ebd6a-1c65-3757-8b2c-3c47dc4ec827.roa
Signing time: Mon 05 Oct 2026 01:00:13 +0000
ROA not before: Mon 05 Oct 2026 01:00:13 +0000
ROA not after: Sun 03 Jan 2027 02:00:13 +0000
asID: 23261
IP address blocks: 23.131.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10fa2500-375d-430f-932e-9e2080243439/10fa2500-375d-430f-932e-9e2080243439.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10fa2500-375d-430f-932e-9e2080243439/10fa2500-375d-430f-932e-9e2080243439.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10fa2500-375d-430f-932e-9e2080243439.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 14 Oct 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:65:5d:81:0e:9f:1f:15:9f:9f:bf:4b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10fa2500-375d-430f-932e-9e2080243439
Validity
Not Before: Oct 5 01:00:13 2026 GMT
Not After : Jan 3 02:00:13 2027 GMT
Subject: CN=015b0fbb-5271-4c30-b087-f5b2a1874f9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:b1:a3:ca:06:65:ef:a8:3d:5b:bf:ce:90:92:
3d:9a:ba:4a:e1:1a:e3:b5:6a:90:a2:3b:aa:9a:c6:
7a:dc:3f:4d:7c:b4:be:28:3b:5c:d4:e4:fb:dd:f8:
ae:f6:3a:21:95:a2:11:53:e2:b6:37:d3:fb:79:ef:
46:ee:4c:37:8d:e7:7c:ea:ab:56:c8:7b:30:07:b4:
35:8e:4b:6c:f0:8e:aa:99:9b:85:5e:c9:4e:d1:02:
85:24:2c:4b:66:9d:0f:b5:98:e5:fa:aa:77:b6:3c:
43:9f:e5:89:88:ed:69:b3:fd:78:06:ac:ed:91:89:
cf:21:4e:38:ad:7c:ec:94:4b:fd:55:18:33:60:c9:
60:18:71:0d:4e:11:34:6b:79:80:b1:b4:8a:bb:cd:
ca:9a:41:1b:5a:33:24:36:4a:db:16:7d:07:77:0f:
59:24:5f:b2:5e:82:1e:9b:a1:5f:aa:06:8a:d8:89:
c1:e8:78:d5:5c:df:9d:c4:30:fa:cd:25:07:7f:7d:
56:9d:10:0a:3d:e4:6a:5e:69:4d:79:ea:03:cf:c4:
8d:25:50:19:bc:a6:80:47:8a:18:28:d3:8a:e2:14:
04:eb:60:6e:7e:ad:66:cc:b1:20:11:2c:f3:cc:52:
6c:3d:77:d0:00:98:64:b0:e9:7b:6f:84:da:3d:b5:
36:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:F6:79:C4:82:2C:D5:67:5E:4A:5F:63:78:02:72:00:76:14:94:4E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10fa2500-375d-430f-932e-9e2080243439/696ebd6a-1c65-3757-8b2c-3c47dc4ec827.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10fa2500-375d-430f-932e-9e2080243439/10fa2500-375d-430f-932e-9e2080243439.crl
X509v3 Authority Key Identifier:
keyid:EC:2E:E1:0E:27:6F:DE:AD:2C:F8:2D:F1:A7:18:49:8C:CB:EC:DB:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10fa2500-375d-430f-932e-9e2080243439.cer
sbgp-ipAddrBlock: critical
IPv4:
23.131.112.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:75:21:35:54:ad:b3:5d:e2:34:e0:e1:3e:67:f5:0e:80:c5:
50:aa:c2:47:c0:49:67:96:67:96:d2:72:09:cf:55:7b:24:cc:
59:34:70:6b:46:9e:9d:09:21:0d:fe:21:9b:5a:10:2d:ab:ab:
4b:dc:27:66:49:c0:99:c1:13:05:1b:ca:ef:d5:55:91:c4:65:
fc:7a:b6:e5:44:1a:83:ae:f0:8d:c6:c9:01:b0:6c:d1:7c:0d:
68:6d:15:48:b2:77:e0:4f:8f:cf:3d:81:70:e2:2c:2e:a1:30:
57:38:6b:88:e8:e1:62:02:92:ba:95:9d:9d:00:8c:b8:e0:7d:
51:4c:94:e3:ad:06:6d:13:5b:94:af:d3:d6:08:43:ca:8a:15:
fa:0c:ac:61:94:d7:a3:1e:29:20:fa:c2:95:e3:3f:7c:69:c9:
6c:99:0c:c6:8f:14:a0:01:6f:4a:10:20:8b:8e:b3:e4:d9:e5:
a6:65:4e:e8:dd:6b:9f:1c:cb:ac:61:87:f3:07:ea:d1:06:44:
a3:09:10:16:f7:61:3a:49:a5:4f:e8:08:34:e8:21:3e:13:9c:
e4:d9:ff:db:f9:c8:16:5c:f0:21:f4:5d:ae:80:5b:de:a3:1e:
fe:fe:5b:e3:96:91:c9:7e:7f:5f:32:72:5f:7c:27:1d:f4:5d:
86:19:36:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 08:03:23 2026 by rpki-client