
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3f5f9855-5e8e-495a-9caa-dee2f22bdbc6/8ef476d3-edc2-3506-81f5-1587e7fa2787.roa
File: 8ef476d3-edc2-3506-81f5-1587e7fa2787.roa (raw, json)
Hash identifier: x+nzt1RZO45v3S2XNMkyhf/Hpvck6P3/ME+dzRHAMgc=
Subject key identifier: D4:23:70:43:10:91:72:3C:31:D8:9C:5E:41:E9:B1:A9:AD:E6:0C:3D
Certificate issuer: /CN=3f5f9855-5e8e-495a-9caa-dee2f22bdbc6
Certificate serial: 010D0C9F4328584EE4F1FDB6C67C486DF47D2010
Authority key identifier: CE:04:33:09:CA:13:55:30:CB:8E:7E:93:C8:41:FC:57:75:8F:AE:0A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3f5f9855-5e8e-495a-9caa-dee2f22bdbc6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3f5f9855-5e8e-495a-9caa-dee2f22bdbc6/8ef476d3-edc2-3506-81f5-1587e7fa2787.roa
Signing time: Thu 20 Aug 2026 01:00:12 +0000
ROA not before: Thu 20 Aug 2026 01:00:12 +0000
ROA not after: Wed 18 Nov 2026 02:00:12 +0000
asID: 13974
IP address blocks: 23.176.200.0/24 maxlen: 24
131.143.180.0/22 maxlen: 24
179.253.224.0/19 maxlen: 24
179.255.96.0/19 maxlen: 24
179.255.128.0/19 maxlen: 24
191.222.208.0/20 maxlen: 24
191.223.208.0/20 maxlen: 24
2602:f91a::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3f5f9855-5e8e-495a-9caa-dee2f22bdbc6/3f5f9855-5e8e-495a-9caa-dee2f22bdbc6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3f5f9855-5e8e-495a-9caa-dee2f22bdbc6/3f5f9855-5e8e-495a-9caa-dee2f22bdbc6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3f5f9855-5e8e-495a-9caa-dee2f22bdbc6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 06 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:e4:f1:fd:b6:c6:7c:48:6d:f4:7d:20:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f5f9855-5e8e-495a-9caa-dee2f22bdbc6
Validity
Not Before: Aug 20 01:00:12 2026 GMT
Not After : Nov 18 02:00:12 2026 GMT
Subject: CN=e3f814ab-59b3-4e7b-9d52-0084c8c3d25d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:12:bf:b8:9a:83:26:0b:8f:c2:84:ae:1a:c6:
be:76:43:ca:ce:ea:d6:4d:52:3b:e3:d6:a8:fb:fd:
24:f5:e8:50:dd:d0:3b:0d:02:2a:8a:bd:3f:21:c5:
35:13:ab:74:53:ae:8c:75:73:6a:7f:2a:b1:f8:e4:
48:98:0d:d3:14:70:b1:c1:d9:3c:3b:2a:af:1b:9a:
3c:3f:0e:55:30:09:41:91:3c:3d:a9:1b:c1:46:22:
88:56:af:30:a6:f0:89:3a:30:b1:d1:db:6f:bf:03:
12:43:a6:a8:d5:19:a2:5d:0d:41:27:79:55:70:55:
2a:a7:4d:82:7d:95:f9:3c:e7:b3:2d:c5:fb:3d:20:
d7:ac:c7:4d:6c:15:71:ec:57:2c:f3:6e:70:c7:a5:
25:e3:bc:66:a5:3c:bb:73:85:a7:42:90:db:98:9e:
2f:f6:73:49:e1:b4:5a:4b:f3:b4:79:ac:28:1d:e6:
e4:74:93:65:94:fc:7f:8f:e4:12:3c:66:8b:c4:8e:
83:59:c4:cc:a7:a0:ef:19:87:6f:62:38:28:f0:e2:
3c:5d:30:5c:dd:29:21:3d:5f:61:bd:d5:d5:e4:04:
75:07:82:f7:5d:a2:68:b5:df:4f:c7:85:4c:28:d8:
0c:5d:88:e0:e1:34:10:dd:5a:9b:7f:a5:48:34:a8:
a1:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:23:70:43:10:91:72:3C:31:D8:9C:5E:41:E9:B1:A9:AD:E6:0C:3D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3f5f9855-5e8e-495a-9caa-dee2f22bdbc6/8ef476d3-edc2-3506-81f5-1587e7fa2787.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3f5f9855-5e8e-495a-9caa-dee2f22bdbc6/3f5f9855-5e8e-495a-9caa-dee2f22bdbc6.crl
X509v3 Authority Key Identifier:
keyid:CE:04:33:09:CA:13:55:30:CB:8E:7E:93:C8:41:FC:57:75:8F:AE:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/3f5f9855-5e8e-495a-9caa-dee2f22bdbc6.cer
sbgp-ipAddrBlock: critical
IPv4:
23.176.200.0/24
131.143.180.0/22
179.253.224.0/19
179.255.96.0-179.255.159.255
191.222.208.0/20
191.223.208.0/20
IPv6:
2602:f91a::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:f6:44:77:7d:c0:76:39:da:14:2a:70:01:1c:59:8a:9d:60:
96:bc:f6:9e:21:2b:d3:a6:10:60:d1:70:cf:e0:ed:8c:39:de:
51:d5:78:d3:4d:79:da:56:91:96:72:75:c1:e7:7f:ef:23:0b:
05:1e:0a:82:fa:cb:3e:ae:21:2d:3d:34:c5:6a:77:09:15:50:
dd:dd:72:6c:e5:6d:9d:dc:75:f8:df:7e:32:54:e2:25:13:cb:
24:af:a1:41:90:61:ac:a1:ee:92:59:db:c9:c4:8c:ea:a8:d1:
e5:ed:13:b5:0c:2d:e8:88:65:6d:41:cd:d6:94:0e:12:ba:05:
8b:be:27:24:88:cd:67:c0:a4:4f:83:ef:ba:2c:78:3c:9f:e1:
1d:ee:72:70:ec:c4:9d:15:12:77:ac:b8:54:b9:ad:01:e4:61:
d7:a5:81:8f:2d:c4:be:48:47:3b:44:91:cc:ae:2c:c4:1b:12:
ee:9b:26:95:d9:fa:3a:8c:41:cc:3c:a0:05:0f:4c:a4:63:84:
e5:03:8f:96:8e:6b:87:93:9d:c1:9d:a4:c4:c0:b3:03:d1:b2:
11:2f:bf:a7:66:f9:3b:70:1d:35:4f:2c:94:ea:df:df:2a:b7:
13:81:93:2b:39:2b:94:e3:1a:66:ef:86:7a:96:d0:15:64:97:
7d:8a:b9:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:56:44 2026 by rpki-client