
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/3598a9a7-9b6c-3188-a0e1-6004914bb3c0.roa
File: 3598a9a7-9b6c-3188-a0e1-6004914bb3c0.roa (raw, json)
Hash identifier: NBZk+ZTQ5wtL6mlfST0O3Vp249jmgwCl07YW/vnussw=
Subject key identifier: C2:BC:75:DA:81:3E:82:00:5D:A1:7E:E1:2D:B2:D8:C2:8D:8B:43:C6
Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial: 010D0C9F4328584DBA3AE7FE88CF0B33D4AE7E88
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/3598a9a7-9b6c-3188-a0e1-6004914bb3c0.roa
Signing time: Tue 05 May 2026 01:00:23 +0000
ROA not before: Tue 05 May 2026 01:00:23 +0000
ROA not after: Mon 03 Aug 2026 01:00:23 +0000
asID: 22898
IP address blocks: 65.77.64.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 11 May 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:ba:3a:e7:fe:88:cf:0b:33:d4:ae:7e:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Validity
Not Before: May 5 01:00:23 2026 GMT
Not After : Aug 3 01:00:23 2026 GMT
Subject: CN=e8ab1c92-4316-492d-9667-ceb0d0247966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b3:09:29:87:e6:92:f2:79:c7:eb:57:e1:07:
bd:0c:e1:8c:7e:e3:eb:c3:03:fc:11:7b:5e:b4:a2:
3a:a0:c4:5b:fa:c8:f2:9f:6d:69:ca:20:89:c6:18:
60:c7:37:d8:63:25:f4:09:47:d7:9b:c2:3f:04:9b:
12:41:a2:eb:64:42:14:e2:09:fc:b2:37:43:e8:15:
59:30:4f:00:c9:6e:cb:f5:44:1e:8a:35:eb:8c:99:
3f:55:c1:1a:6e:75:9d:57:ee:08:33:d3:6b:6a:d0:
84:dc:f0:ea:a8:75:2a:f3:61:b5:96:7f:d1:e0:92:
b9:36:86:ef:bf:5b:87:5b:5e:0c:f2:06:82:ab:df:
97:86:18:f4:57:05:4c:a6:e9:8f:6b:71:a3:d9:d6:
98:b0:60:26:df:7c:c3:77:5f:d6:bc:9e:bc:39:2d:
a6:64:ed:13:b3:00:30:48:d2:ad:44:c1:3a:64:f9:
7c:0d:75:31:6e:8f:a9:e2:55:17:69:dc:7b:cd:4e:
3e:79:0a:5e:ad:66:a9:fa:e0:f4:b2:6a:af:fe:c0:
ce:af:44:c8:07:7f:72:69:32:ae:d7:83:e6:e4:e3:
46:d0:75:52:36:72:48:dc:6a:3d:7b:53:39:c1:1b:
ef:9f:e0:0e:a3:2b:e2:6f:87:dd:de:8a:8d:3a:40:
f8:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:BC:75:DA:81:3E:82:00:5D:A1:7E:E1:2D:B2:D8:C2:8D:8B:43:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/3598a9a7-9b6c-3188-a0e1-6004914bb3c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
X509v3 Authority Key Identifier:
keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
sbgp-ipAddrBlock: critical
IPv4:
65.77.64.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:da:a5:e8:1b:2b:e6:eb:d0:f0:d1:9f:8b:61:0b:4b:6b:61:
33:86:71:aa:7c:1a:7f:b2:9c:0f:cc:00:ec:1e:8e:2c:29:f8:
e8:11:2a:66:43:cc:33:24:8b:35:bb:29:63:82:2a:69:e8:01:
b3:ed:19:bc:14:f2:a2:dc:9c:c7:2d:df:57:2a:b0:a2:f6:06:
d2:24:30:16:af:51:df:df:4f:b8:83:c2:29:a0:0e:e9:76:be:
01:6b:c2:46:46:8b:8d:04:72:39:28:a6:2e:f6:c0:9d:db:a5:
5a:0d:47:95:87:b9:19:7c:e7:15:15:5c:2b:5e:aa:5b:f7:66:
65:72:3e:4d:04:c6:9e:eb:95:7a:71:d5:3a:d4:6c:fe:b5:d6:
30:ef:44:17:b5:b8:b6:59:6a:ef:20:ed:fb:16:88:ba:96:8e:
38:99:3f:ab:55:0e:9f:96:c7:d4:19:ae:b2:21:fb:a7:f4:f6:
1d:c4:f8:dd:75:11:1e:86:e2:f6:46:54:2d:e6:f8:5a:79:6a:
b3:1a:b0:a1:c1:eb:12:6f:c8:24:ad:1e:fa:7f:fb:6b:62:b6:
da:72:4d:56:11:02:8e:0d:e3:f9:d7:94:44:66:be:96:e3:ac:
f8:af:57:df:5c:9d:63:e3:02:32:ca:55:6b:14:d7:1d:19:95:
a4:3d:ae:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 00:41:12 2026 by rpki-client