
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/d0ea46a9-3140-3de2-b792-a1cb38602e36.roa
File: d0ea46a9-3140-3de2-b792-a1cb38602e36.roa (raw, json)
Hash identifier: 8wWt2isME9h6M6JMSfEQj+stLUrq3bzezkjgjTCuUfk=
Subject key identifier: 79:48:DB:49:B6:64:A6:C4:79:14:99:CE:86:D5:48:6B:33:33:C0:46
Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial: 010D0C9F4328584EF1820113E6876184A62C4D80
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/d0ea46a9-3140-3de2-b792-a1cb38602e36.roa
Signing time: Mon 24 Aug 2026 13:00:12 +0000
ROA not before: Mon 24 Aug 2026 13:00:12 +0000
ROA not after: Sun 22 Nov 2026 14:00:12 +0000
asID: 32696
IP address blocks: 8.224.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 29 Aug 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:f1:82:01:13:e6:87:61:84:a6:2c:4d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Validity
Not Before: Aug 24 13:00:12 2026 GMT
Not After : Nov 22 14:00:12 2026 GMT
Subject: CN=f8926dee-2f4d-4ff0-8f3d-24b8d941469f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:7b:65:24:c9:e9:3c:5a:13:ed:65:d2:62:53:
0c:60:3d:15:d8:c2:bd:9e:dd:fa:c5:1f:ec:ee:ec:
c7:ff:63:89:b3:8e:7d:c7:4a:a3:fe:ee:91:5e:25:
ab:0f:17:47:fd:5e:42:54:cd:de:a2:db:21:33:52:
77:2d:dd:ae:50:d8:87:aa:ac:95:c1:de:2d:50:06:
67:37:b5:4d:3d:b4:0f:04:bb:7d:d7:b3:76:1b:43:
b2:04:d8:9c:b5:d0:7b:05:d8:d3:ed:e5:fa:2c:f4:
15:00:13:d4:9c:67:d8:14:d6:d2:0e:0b:35:48:a0:
20:2e:22:bb:50:d3:3a:cc:88:96:99:34:38:a2:4d:
0c:d4:fb:ea:de:43:4d:a0:60:5d:7c:b8:a4:75:37:
ff:49:6a:5b:7f:1d:af:c7:76:3e:e3:4e:1d:6d:1d:
bc:08:5a:c7:aa:de:b9:87:3d:fd:90:8f:23:b5:d7:
b4:12:7d:7a:2a:c5:99:4f:fe:f6:6a:7a:9c:03:2f:
42:7f:79:8c:8a:36:53:cd:5f:07:b8:d8:09:d4:d8:
4b:79:d1:89:a0:47:ba:3b:6d:6e:43:b9:52:f6:43:
15:8e:f2:1a:62:65:ec:c2:78:35:1b:3a:29:a8:04:
2f:24:94:08:00:af:56:38:4a:b9:2f:ec:65:7e:bd:
bc:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:48:DB:49:B6:64:A6:C4:79:14:99:CE:86:D5:48:6B:33:33:C0:46
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/d0ea46a9-3140-3de2-b792-a1cb38602e36.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
X509v3 Authority Key Identifier:
keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
sbgp-ipAddrBlock: critical
IPv4:
8.224.49.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:1f:cb:6b:1b:dc:9a:1a:01:fd:e2:b7:3e:79:1d:fc:9f:16:
ac:9d:a2:b8:82:2f:85:8e:24:89:8e:77:e7:52:34:bb:73:76:
6e:7a:55:79:a9:fb:b7:d3:20:80:fb:a4:c8:89:fb:ba:7a:71:
00:04:b5:ab:53:80:0e:41:57:11:1f:69:ff:c4:ef:0a:16:0c:
09:fb:fa:34:c5:9f:f3:1f:12:be:e3:4b:fb:8b:69:42:03:45:
34:87:97:35:da:4d:e7:2d:a2:78:7f:3c:99:64:93:4a:4a:9d:
ad:59:87:e3:72:4b:ea:43:09:92:33:71:6c:30:05:85:88:34:
c8:65:f6:a7:a4:27:04:62:07:d5:1f:b1:48:ee:30:7b:cb:ff:
2e:19:1a:e8:1f:52:e2:28:ee:c7:39:47:33:7c:2b:b7:62:24:
1c:ba:85:97:cb:40:f1:1c:83:d1:83:ea:8b:10:b3:b9:8f:32:
e1:04:1e:d3:0b:59:55:33:f4:3c:b4:1a:1f:a4:b6:83:ea:ab:
e3:e6:a9:40:92:1c:01:98:6e:45:6c:5b:27:22:62:fa:46:c8:
74:3f:47:8b:9f:f0:ec:7e:c7:90:87:db:19:25:f8:fa:1b:fa:
33:74:dc:6c:50:46:99:3c:c4:0b:69:cd:b9:d7:24:78:f7:d7:
f3:11:41:94
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7xggET5odhhKYsTYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1
MTJkMB4XDTI2MDgyNDEzMDAxMloXDTI2MTEyMjE0MDAxMlowLzEtMCsGA1UEAxMk
Zjg5MjZkZWUtMmY0ZC00ZmYwLThmM2QtMjRiOGQ5NDE0NjlmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgntlJMnpPFoT7WXSYlMMYD0V2MK9nt36xR/s
7uzH/2OJs459x0qj/u6RXiWrDxdH/V5CVM3eotshM1J3Ld2uUNiHqqyVwd4tUAZn
N7VNPbQPBLt917N2G0OyBNictdB7BdjT7eX6LPQVABPUnGfYFNbSDgs1SKAgLiK7
UNM6zIiWmTQ4ok0M1Pvq3kNNoGBdfLikdTf/SWpbfx2vx3Y+404dbR28CFrHqt65
hz39kI8jtde0En16KsWZT/72anqcAy9Cf3mMijZTzV8HuNgJ1NhLedGJoEe6O21u
Q7lS9kMVjvIaYmXswng1GzopqAQvJJQIAK9WOEq5L+xlfr28FQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHlI20m2ZKbEeRSZzobVSGszM8BGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk
YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvZDBlYTQ2YTktMzE0MC0z
ZGUyLWI3OTItYTFjYjM4NjAyZTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm
MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw
NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi
NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACOAxMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACUfy2sb3JoaAf3itz55HfyfFqydoriCL4WOJImOd+dSNLtzdm56VXmp
+7fTIID7pMiJ+7p6cQAEtatTgA5BVxEfaf/E7woWDAn7+jTFn/MfEr7jS/uLaUID
RTSHlzXaTectonh/PJlkk0pKna1Zh+NyS+pDCZIzcWwwBYWINMhl9qekJwRiB9Uf
sUjuMHvL/y4ZGugfUuIo7sc5RzN8K7diJBy6hZfLQPEcg9GD6osQs7mPMuEEHtML
WVUz9Dy0Gh+ktoPqq+PmqUCSHAGYbkVsWyciYvpGyHQ/R4uf8Ox+x5CH2xkl+Pob
+jN03GxQRpk8xAtpzbnXJHj31/MRQZQ=
-----END CERTIFICATE-----
Generated at Fri Aug 28 00:41:23 2026 by rpki-client