
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/34a15df3-ae78-372e-8160-e71d118b8d2e.roa
File: 34a15df3-ae78-372e-8160-e71d118b8d2e.roa (raw, json)
Hash identifier: VqWfV5KfeJao64whqasDKt5BwIzeGIi8Cv6GF3hzUcU=
Subject key identifier: 72:01:67:F2:36:D4:72:21:66:A7:F7:30:87:89:EB:CE:12:6A:9D:6F
Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial: 010D0C9F4328584ECA6C6FAB2532D101568DBD00
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/34a15df3-ae78-372e-8160-e71d118b8d2e.roa
Signing time: Mon 10 Aug 2026 13:00:12 +0000
ROA not before: Mon 10 Aug 2026 13:00:12 +0000
ROA not after: Sun 08 Nov 2026 14:00:12 +0000
asID: 3356
IP address blocks: 209.224.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 23 Aug 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:ca:6c:6f:ab:25:32:d1:01:56:8d:bd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Validity
Not Before: Aug 10 13:00:12 2026 GMT
Not After : Nov 8 14:00:12 2026 GMT
Subject: CN=ea303fda-a0b9-43a3-ba63-9880fcf16bf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e6:d1:0c:0c:00:99:74:ea:2e:a0:29:4e:24:
15:99:7a:7c:77:e6:c2:71:36:8d:6e:c4:82:79:ad:
e3:58:fc:4d:ad:69:b1:86:32:b0:c1:70:2c:65:74:
c5:5a:8f:60:fa:bc:2a:91:a8:6e:5d:03:e6:f6:c3:
0d:06:51:20:84:b8:0e:52:a1:cf:71:cf:53:4e:14:
4b:7a:9c:f0:e0:db:17:bf:26:2a:d1:ed:38:7f:54:
5c:a1:33:ff:33:f8:62:02:eb:49:9f:ff:5a:a5:96:
35:61:20:de:bd:fa:b1:16:8f:31:96:df:ba:84:18:
8c:64:32:81:3f:96:4d:2c:5a:8f:76:cb:42:f2:02:
9d:b8:c9:10:a3:71:1d:5b:ff:37:79:0f:0c:eb:c6:
11:bf:99:a5:da:d7:30:89:54:78:b5:a5:c9:6a:18:
8a:77:95:e5:d3:47:5a:0a:cc:df:9a:dc:e0:92:5a:
96:f4:b8:04:ae:3e:2c:27:a0:9c:9a:5b:e1:76:ea:
18:3b:cd:cf:91:30:ab:4e:c4:ef:28:8d:7b:0b:49:
f4:ff:41:89:a2:58:1e:60:67:36:d9:86:53:a9:67:
e6:78:ed:dd:75:83:bc:63:f6:00:63:e1:75:bc:bd:
33:bb:0f:4c:f5:9e:39:ab:73:21:e2:bd:cd:79:fe:
17:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:01:67:F2:36:D4:72:21:66:A7:F7:30:87:89:EB:CE:12:6A:9D:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/34a15df3-ae78-372e-8160-e71d118b8d2e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
X509v3 Authority Key Identifier:
keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
sbgp-ipAddrBlock: critical
IPv4:
209.224.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:fb:50:59:4d:fb:f9:36:71:45:c8:e3:bc:66:18:0a:02:c4:
69:14:cc:9c:44:ec:57:dd:7e:98:f8:8a:54:57:52:21:a8:6b:
31:45:2c:f1:04:ab:c1:cb:df:e1:f8:b2:db:f6:2a:eb:d1:86:
ed:1e:f7:bf:d9:97:94:05:1d:b6:31:32:78:76:0a:d0:cc:8c:
0c:10:9b:6c:15:21:7e:82:cb:b0:ea:55:e3:94:a8:a0:61:27:
df:de:d0:b3:95:ab:ef:e4:0f:f4:37:e9:e1:8c:35:27:b1:45:
9f:c9:5b:a8:0b:24:f3:c7:31:be:69:36:72:f4:31:71:12:7e:
fc:15:f3:8e:e5:58:2c:2c:56:54:27:9c:1d:90:76:6a:9e:6f:
94:99:8d:7f:bd:db:a7:c5:65:72:4a:c1:23:d1:8f:c8:72:b4:
82:a2:d7:c6:e1:d2:53:4a:ff:97:c1:66:51:da:cf:22:f0:d6:
bf:b3:7b:76:29:0d:84:a7:90:60:f1:89:d1:a7:2f:7a:85:03:
fe:e5:58:f8:15:c9:b6:bb:d0:87:c0:4b:68:c8:fb:39:64:cc:
91:3d:85:97:d7:0e:66:35:27:e1:de:bf:4d:c3:24:90:4c:56:
17:81:b9:87:33:ba:c8:58:b4:bf:5c:f8:f5:ee:48:52:51:eb:
92:0c:8d:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 03:32:48 2026 by rpki-client