
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/3faf2af1-6ac8-3fef-8689-293a2108a805.roa
File: 3faf2af1-6ac8-3fef-8689-293a2108a805.roa (raw, json)
Hash identifier: R0qxaae84ZjgSBCS60Xy/2+Plq4ti1Vt5E/i6lMYGZg=
Subject key identifier: DF:D8:4D:F2:85:07:25:24:66:62:C0:13:9A:90:3D:A6:4C:5D:5F:B3
Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial: 010D0C9F4328584E33A27045952283DB0C3D0300
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/3faf2af1-6ac8-3fef-8689-293a2108a805.roa
Signing time: Wed 17 Jun 2026 12:42:02 +0000
ROA not before: Wed 17 Jun 2026 12:42:02 +0000
ROA not after: Tue 15 Sep 2026 12:42:02 +0000
asID: 402347
IP address blocks: 8.19.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 24 Jun 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:33:a2:70:45:95:22:83:db:0c:3d:03:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Validity
Not Before: Jun 17 12:42:02 2026 GMT
Not After : Sep 15 12:42:02 2026 GMT
Subject: CN=9e7465bc-dc6f-4d0d-8346-21320d688fc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f4:ae:16:32:68:5c:ce:ea:a0:5d:49:fc:d2:
a7:b7:f9:06:31:41:e7:74:e9:94:7b:d5:33:a5:b1:
86:72:ec:ee:89:6e:d3:49:ac:e8:da:73:17:10:93:
ab:30:c1:ba:27:b7:8f:9e:82:af:40:10:71:e5:5d:
1d:ee:63:ff:8a:fb:6d:44:b0:78:33:4c:fa:3f:d3:
da:f1:9e:55:22:b5:62:24:9a:6a:c5:fa:29:cc:51:
78:e6:3b:a0:c3:ce:b2:9f:1b:4d:c9:18:46:7e:54:
15:3c:56:5d:1d:a3:09:2e:ac:d8:65:80:ca:60:25:
71:1e:3f:16:e5:88:9e:86:4a:0e:57:e9:62:07:f4:
93:b0:c8:19:28:73:62:e5:bc:58:25:c1:a2:1b:9b:
79:28:cd:c5:5a:a4:68:6f:aa:43:e4:37:d3:bf:2f:
2d:12:bb:4f:19:25:d1:e4:58:63:fa:ea:90:2f:48:
89:dd:66:d8:8a:42:fa:71:97:91:2d:a3:e8:8e:aa:
dc:53:a2:37:d9:42:7a:3b:35:3c:82:29:ed:41:ba:
3c:43:53:1f:d4:d4:74:5f:03:58:d3:6e:a9:96:46:
38:73:2f:a2:4a:69:d1:60:2f:38:ee:97:ff:cd:81:
20:3d:94:ae:39:4a:83:0d:c0:ff:0c:c6:12:47:bc:
47:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:D8:4D:F2:85:07:25:24:66:62:C0:13:9A:90:3D:A6:4C:5D:5F:B3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/3faf2af1-6ac8-3fef-8689-293a2108a805.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
X509v3 Authority Key Identifier:
keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
sbgp-ipAddrBlock: critical
IPv4:
8.19.251.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:68:b8:6c:b6:08:71:96:71:6f:c3:1c:b2:ec:14:84:6b:01:
88:d1:96:3e:7b:d1:47:d5:2c:2c:85:74:a0:27:5b:a7:ea:69:
41:83:04:1e:6c:e1:c2:e5:72:88:63:7b:e3:6f:ed:48:f7:a0:
b3:78:0c:38:0c:42:e6:22:e4:e8:41:80:10:1b:0a:91:59:c2:
71:ee:86:43:be:b7:bc:bc:82:ca:c7:94:2b:8a:21:38:12:8e:
1d:b1:84:1f:4a:99:96:04:79:db:23:3d:d9:f2:0b:1e:e9:89:
2a:3b:b0:0c:ed:44:cc:2d:95:c8:84:77:bd:9b:14:10:bb:61:
10:c7:20:d3:b4:4c:ae:cd:0a:d2:c3:c1:a7:80:e5:be:55:9d:
c1:68:49:7b:58:42:1f:43:0a:56:ce:bc:b9:e7:4f:6f:78:52:
e0:64:6b:54:d0:bf:97:09:98:2a:83:a9:3b:87:ec:47:29:05:
c1:17:04:b4:d9:65:5b:81:de:b9:fe:a4:c8:51:b7:2e:cd:93:
f7:90:78:7e:b2:68:02:1f:41:24:41:88:53:6d:e6:2a:4a:ae:
cf:98:9b:46:46:fb:a9:ea:be:d7:a2:91:c6:1c:9f:ba:15:cf:
18:30:61:5e:9c:05:af:e4:57:71:53:e4:49:4d:c8:5c:ab:0c:
a0:06:77:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 22 03:30:41 2026 by rpki-client