
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/8c3507e9-1d71-3f13-874f-8f331de4a8bb.roa
File: 8c3507e9-1d71-3f13-874f-8f331de4a8bb.roa (raw, json)
Hash identifier: ibAouWopPVVmSOhkBulcfjckdEYS4LKTe+BfL6sHkiA=
Subject key identifier: B7:B2:5C:A6:38:23:08:59:71:65:A3:C0:CC:A2:AB:9A:EB:8F:0D:3C
Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial: 010D0C9F4328584EE0C20336895E9CC615008DD0
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/8c3507e9-1d71-3f13-874f-8f331de4a8bb.roa
Signing time: Tue 18 Aug 2026 13:00:12 +0000
ROA not before: Tue 18 Aug 2026 13:00:12 +0000
ROA not after: Mon 16 Nov 2026 14:00:12 +0000
asID: 393795
IP address blocks: 8.41.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 23 Aug 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:e0:c2:03:36:89:5e:9c:c6:15:00:8d:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Validity
Not Before: Aug 18 13:00:12 2026 GMT
Not After : Nov 16 14:00:12 2026 GMT
Subject: CN=e26d3b2c-da57-4074-ae05-1d04cae9c67e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f5:1a:63:d8:e4:67:ed:36:af:0d:86:f2:4f:
74:4e:cd:2a:0a:e0:fd:7b:2f:0d:b6:5b:64:b1:4e:
c9:66:d6:70:40:d4:45:79:4a:20:74:7d:14:82:8b:
d8:1a:ba:a5:fc:02:22:cd:94:b9:d9:07:17:79:32:
fa:9b:ea:59:ea:73:6a:52:78:12:a6:74:30:fd:21:
a5:c8:f5:38:62:c7:b8:fc:db:7f:6a:43:87:18:d2:
75:e5:71:87:90:81:36:4e:cb:fa:9d:ec:51:5c:a1:
82:f9:07:1f:ac:02:26:a3:08:6a:91:57:97:23:bd:
f8:61:2d:bf:3b:1b:cb:f8:a8:ee:d2:ad:3b:33:59:
ff:05:95:75:d9:46:e4:3f:82:61:d9:7b:0f:35:9e:
b5:14:20:be:31:93:4b:97:36:41:64:8f:71:8f:ae:
d3:57:45:5b:c7:f5:23:9c:c4:89:39:2f:df:63:f1:
a1:ca:9b:2a:4f:5d:7e:48:bd:f6:34:8a:e5:d7:28:
d4:e0:50:2b:97:32:8c:51:95:1a:31:d0:2b:23:0f:
42:c0:98:6e:fc:cb:58:b0:ce:82:12:b7:58:94:d6:
60:89:2f:b9:a3:2a:1b:3c:35:46:0e:25:1e:5a:c6:
ba:91:b1:3d:28:90:aa:82:49:5d:f3:4d:26:23:89:
97:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:B2:5C:A6:38:23:08:59:71:65:A3:C0:CC:A2:AB:9A:EB:8F:0D:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/8c3507e9-1d71-3f13-874f-8f331de4a8bb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
X509v3 Authority Key Identifier:
keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
sbgp-ipAddrBlock: critical
IPv4:
8.41.104.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b8:3a:4f:60:fb:8e:dc:e3:38:0e:66:ae:fc:1e:13:37:61:f8:
96:39:c5:a2:d9:9b:e6:f8:9d:75:b3:ce:b2:f3:1d:25:7d:d1:
1a:36:18:f8:e5:ce:01:70:85:8f:e3:16:ba:4d:9e:6c:03:71:
94:5c:95:c8:7c:e5:20:d7:be:8a:7f:c9:25:fb:ac:cf:03:31:
75:68:d6:0e:28:86:ed:0a:40:af:09:46:07:5a:49:f8:d2:f4:
62:13:08:b2:c5:24:97:d2:8d:40:e4:b7:8c:26:fc:d0:01:88:
d8:bc:8b:7b:91:e7:20:1f:ff:0f:db:e4:8e:77:89:b0:2c:17:
94:d9:10:87:da:40:40:ec:1c:b6:3f:b1:3c:f4:98:4c:9d:f2:
c4:e5:3e:46:76:d8:6e:25:94:d3:32:a0:60:75:d0:74:70:06:
b1:db:3d:aa:2d:da:14:76:d3:ce:85:0d:38:f2:b0:a2:a6:06:
f4:c8:87:15:03:f0:21:4c:2c:83:70:88:26:25:b9:20:19:26:
f9:a3:d3:01:aa:67:c8:6a:38:c2:93:70:3b:d6:b5:49:92:c9:
35:d9:49:b2:19:79:d1:26:90:c2:34:bc:ba:3c:38:14:3a:b1:
6c:a1:69:eb:06:61:81:37:5c:cb:ce:22:2c:cd:54:30:bf:99:
63:d9:36:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 03:33:40 2026 by rpki-client