
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4965f432-2d7f-4618-aa63-bb50ab54c527/4ca70706-d458-3688-b9b2-a4a37ed39384.roa
File: 4ca70706-d458-3688-b9b2-a4a37ed39384.roa (raw, json)
Hash identifier: ecQ8uxadLEVNtO/LPydXJWayNFV4HZaoUC5zDNutGj4=
Subject key identifier: B5:36:AE:59:A5:42:0D:AD:0A:81:FF:8E:16:66:FE:B4:43:D3:72:57
Certificate issuer: /CN=4965f432-2d7f-4618-aa63-bb50ab54c527
Certificate serial: 010D0C9F4328584F31B7B7A54BE67211A4F14980
Authority key identifier: 83:91:CA:D2:85:16:06:2B:BF:FB:D2:3C:77:E7:88:39:B7:5D:9E:09
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4965f432-2d7f-4618-aa63-bb50ab54c527.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4965f432-2d7f-4618-aa63-bb50ab54c527/4ca70706-d458-3688-b9b2-a4a37ed39384.roa
Signing time: Wed 16 Sep 2026 13:00:12 +0000
ROA not before: Wed 16 Sep 2026 13:00:12 +0000
ROA not after: Tue 15 Dec 2026 14:00:12 +0000
asID: 394232
IP address blocks: 23.134.32.0/24 maxlen: 24
2604:d040::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4965f432-2d7f-4618-aa63-bb50ab54c527/4965f432-2d7f-4618-aa63-bb50ab54c527.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4965f432-2d7f-4618-aa63-bb50ab54c527/4965f432-2d7f-4618-aa63-bb50ab54c527.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4965f432-2d7f-4618-aa63-bb50ab54c527.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:31:b7:b7:a5:4b:e6:72:11:a4:f1:49:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4965f432-2d7f-4618-aa63-bb50ab54c527
Validity
Not Before: Sep 16 13:00:12 2026 GMT
Not After : Dec 15 14:00:12 2026 GMT
Subject: CN=b8861b86-d4e1-4d2b-b88e-eb33b6a5f2d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:8e:fc:51:92:ec:bd:e3:fa:cc:e7:97:8d:3b:
a4:cd:b4:27:e8:8b:a8:f7:68:50:51:be:60:28:16:
02:73:04:1a:4b:3f:6c:f7:4d:d1:40:4a:3a:54:4e:
08:8d:12:c9:fb:6e:13:0c:b6:f5:63:aa:65:6d:36:
73:31:dd:b8:0b:7d:57:54:ae:93:8f:12:fa:cf:cb:
43:af:81:ea:07:1c:50:6f:f0:d9:af:85:16:92:fc:
47:18:6a:b9:b6:0f:0c:ea:4d:9e:de:e5:15:69:df:
f1:c7:65:d2:69:59:c6:0b:63:64:a3:f0:7d:21:6c:
d0:69:d7:8c:58:cc:6a:19:56:62:5f:45:da:2d:80:
29:79:fd:bf:76:a7:53:c8:f3:04:0c:c1:c6:c4:14:
fd:01:91:44:74:b5:2c:23:61:31:c7:a4:58:9c:ad:
3b:6b:ee:f9:f8:65:c7:47:f4:1b:b0:03:8d:37:a0:
45:0c:bc:ae:26:8c:69:97:8e:f5:94:c2:8a:8b:89:
43:de:47:66:2a:96:11:54:56:2a:47:1b:04:6a:a2:
aa:19:a6:59:46:8a:3c:fc:b3:7e:eb:7c:d1:9e:97:
64:c4:73:f2:f7:32:94:e5:2a:58:8c:78:b2:8f:fe:
b2:6f:48:25:40:46:aa:a0:b7:60:8d:dd:23:da:36:
3a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:36:AE:59:A5:42:0D:AD:0A:81:FF:8E:16:66:FE:B4:43:D3:72:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4965f432-2d7f-4618-aa63-bb50ab54c527/4ca70706-d458-3688-b9b2-a4a37ed39384.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4965f432-2d7f-4618-aa63-bb50ab54c527/4965f432-2d7f-4618-aa63-bb50ab54c527.crl
X509v3 Authority Key Identifier:
keyid:83:91:CA:D2:85:16:06:2B:BF:FB:D2:3C:77:E7:88:39:B7:5D:9E:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4965f432-2d7f-4618-aa63-bb50ab54c527.cer
sbgp-ipAddrBlock: critical
IPv4:
23.134.32.0/24
IPv6:
2604:d040::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:4d:76:e8:37:e3:03:65:53:8c:28:05:18:2f:d6:6e:58:61:
2f:6a:d2:f4:20:c3:29:f6:cf:ac:72:9e:24:a0:af:08:b5:e0:
1c:d9:cb:69:69:8f:61:55:da:fe:0c:68:ad:8e:c6:75:0f:b2:
ee:14:73:b3:bd:61:e9:c1:04:2e:62:29:75:bd:31:66:57:ef:
00:25:b1:96:9f:dc:2b:61:b0:fd:a4:c8:ec:5b:aa:da:d4:be:
12:29:23:e5:d7:16:1a:5a:78:b6:f9:70:05:d4:ab:08:c7:74:
f9:64:b0:6e:25:40:38:a8:ba:c8:f0:f5:ef:ef:91:24:c1:b5:
be:9c:ac:8b:64:d0:09:67:84:8f:36:cc:15:56:1a:ac:8a:0f:
9c:9a:50:17:9c:c9:47:cc:70:b7:68:70:a8:25:b1:0b:b4:aa:
fc:2e:c8:8d:31:e5:d6:3e:9f:fe:1c:be:f4:9e:0a:53:2c:87:
ca:e6:a8:cb:d0:c4:e6:3e:67:75:47:e0:9a:a7:9e:ee:2c:3b:
5e:5b:42:7c:97:a5:f2:e2:db:93:f3:84:55:9d:36:0a:39:fb:
1b:25:b2:09:e0:88:0b:83:35:23:e2:93:72:e1:65:9d:ea:5a:
f3:b4:ee:fc:36:2f:2f:e7:6e:f2:80:e3:f2:e6:6f:25:b8:f1:
42:d9:62:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 13:43:45 2026 by rpki-client