
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/8d658794-56d7-3b38-8373-803b9414aa8b.roa
File: 8d658794-56d7-3b38-8373-803b9414aa8b.roa (raw, json)
Hash identifier: BtmNXfHmD3+I9GB1wKWf9TMzTE5/R+vIUuoCnHxUtRg=
Subject key identifier: AF:4B:40:AF:26:60:40:87:E1:05:E5:D7:A4:4B:4D:8D:C6:D5:25:BA
Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial: 010D0C9F4328584E5A49F67532FE07AD63AA0600
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/8d658794-56d7-3b38-8373-803b9414aa8b.roa
Signing time: Wed 01 Jul 2026 09:00:12 +0000
ROA not before: Wed 01 Jul 2026 09:00:12 +0000
ROA not after: Tue 29 Sep 2026 09:00:12 +0000
asID: 20473
IP address blocks: 8.9.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 22 Jul 2026 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:5a:49:f6:75:32:fe:07:ad:63:aa:06:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Validity
Not Before: Jul 1 09:00:12 2026 GMT
Not After : Sep 29 09:00:12 2026 GMT
Subject: CN=5532421c-dfdd-477f-83c9-b60520691f6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a8:0c:13:3c:7a:d5:a5:e3:aa:f5:1f:83:48:
11:07:48:19:42:2e:e8:95:36:10:67:30:e4:59:5b:
63:8e:ca:0a:62:0a:f2:49:be:e5:40:d5:3d:cc:b5:
67:ba:6e:6a:ff:7f:ec:9c:28:96:83:40:c3:fa:14:
94:66:64:4f:2f:5b:3e:10:f5:0e:bf:d1:38:98:04:
58:43:76:b8:41:a5:ff:67:5c:07:45:81:17:8d:f0:
d7:9a:38:a6:92:fc:16:fb:f1:93:c0:22:d3:17:5a:
0f:74:88:f5:0e:45:2b:06:d4:9b:6a:12:56:37:d3:
24:c9:c8:14:6a:3c:50:c1:e1:6f:ac:54:fd:7b:5b:
90:b2:d7:64:50:46:d8:e0:cf:d3:fd:9a:7f:38:28:
a9:c9:c5:5b:a8:67:4e:5f:ae:a4:f9:78:f5:2b:df:
a3:8d:b1:af:f7:46:03:48:be:a0:86:a9:84:4b:6a:
71:6c:d7:2d:e9:9f:47:86:e3:12:44:26:1a:48:f0:
ce:1d:f4:24:3d:3f:2e:8a:79:c6:0c:f3:c8:7e:9e:
c9:81:4e:0e:60:4a:fd:cf:d1:f3:3b:e4:a6:8d:73:
f0:09:5c:56:a6:cf:c8:82:bc:0f:a7:3e:2a:f8:c1:
4e:17:a5:01:69:bf:77:1c:ae:ce:a5:4c:3a:a1:a5:
90:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:4B:40:AF:26:60:40:87:E1:05:E5:D7:A4:4B:4D:8D:C6:D5:25:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/8d658794-56d7-3b38-8373-803b9414aa8b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
X509v3 Authority Key Identifier:
keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
sbgp-ipAddrBlock: critical
IPv4:
8.9.5.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:83:5a:e6:3a:7b:24:80:44:e2:3a:fe:39:3c:58:d3:c2:a7:
87:79:65:56:dd:cb:1a:57:4e:bb:12:cf:f6:7b:12:4a:18:a5:
8b:a8:81:c4:9a:cb:e7:56:50:e7:62:59:5b:60:c2:13:f8:ac:
22:6c:08:db:f7:03:68:3b:0d:29:df:eb:0d:44:2d:73:85:0f:
db:f4:e5:91:ff:40:35:e9:6c:a5:84:de:87:77:e3:b7:26:0b:
90:71:08:f7:12:5f:e5:ef:43:43:89:15:b0:fe:88:25:04:33:
e3:be:f7:69:10:f4:10:26:04:a3:86:d1:b7:1f:a1:a4:48:7b:
53:be:58:3f:29:68:89:7f:70:a9:1f:90:d5:c6:58:3a:44:bf:
55:e8:c0:c6:dc:c5:80:2a:44:74:d5:e7:bb:27:e4:13:02:34:
50:bb:44:3f:19:0f:b6:b4:a3:1c:fd:85:b4:c6:47:db:b2:ca:
74:cb:a1:49:24:78:59:a1:69:a7:7d:ee:b6:2a:6a:29:31:b6:
5e:0b:52:e0:8a:87:3e:41:e8:68:30:0e:4f:fa:df:6b:2d:8c:
e3:a8:d8:4e:d7:44:f9:96:91:30:6d:2a:dd:6f:7f:71:9d:60:
0e:bc:c6:ed:d3:26:92:aa:cc:b8:e9:33:ec:1c:67:51:7a:82:
ef:7d:6d:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:15:17 2026 by rpki-client