
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ecb94057-71c7-417c-9140-1014219048c5/fe884f5b-0eac-3a2d-8a5d-5a959dca9414.roa
File: fe884f5b-0eac-3a2d-8a5d-5a959dca9414.roa (raw, json)
Hash identifier: Pi0i+gs6nGtGtASN1RW80DhNhWEhv2RVTvnzs0Vm+es=
Subject key identifier: 3A:E9:BE:EF:AF:B5:BB:81:63:4A:BF:D0:3F:50:CB:1A:98:06:B7:B5
Certificate issuer: /CN=ecb94057-71c7-417c-9140-1014219048c5
Certificate serial: 010D0C9F4328584E7204E2CA77C308BB422AED00
Authority key identifier: 59:EB:C8:2B:38:35:E7:84:CE:FD:9A:3A:C8:E6:0C:2E:66:3B:20:5D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ecb94057-71c7-417c-9140-1014219048c5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ecb94057-71c7-417c-9140-1014219048c5/fe884f5b-0eac-3a2d-8a5d-5a959dca9414.roa
Signing time: Thu 09 Jul 2026 21:00:11 +0000
ROA not before: Thu 09 Jul 2026 21:00:11 +0000
ROA not after: Wed 07 Oct 2026 21:00:11 +0000
asID: 402386
IP address blocks: 23.156.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ecb94057-71c7-417c-9140-1014219048c5/ecb94057-71c7-417c-9140-1014219048c5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ecb94057-71c7-417c-9140-1014219048c5/ecb94057-71c7-417c-9140-1014219048c5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ecb94057-71c7-417c-9140-1014219048c5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 23 Jul 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:72:04:e2:ca:77:c3:08:bb:42:2a:ed:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecb94057-71c7-417c-9140-1014219048c5
Validity
Not Before: Jul 9 21:00:11 2026 GMT
Not After : Oct 7 21:00:11 2026 GMT
Subject: CN=3737cafb-7dc2-4f70-9c92-1b37fdd5ea3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ae:df:33:f3:7b:f9:f0:33:b6:7d:a8:66:b7:
17:66:39:b1:0c:37:fd:e5:2f:fa:02:4e:86:4f:13:
50:4a:bc:41:89:09:6c:4a:21:0c:f8:a8:6d:84:d5:
bc:cf:d4:57:69:3d:38:40:0d:fa:59:09:ac:dd:34:
57:3d:c7:68:73:5e:2c:bd:d4:6f:0d:c2:c7:40:94:
95:65:ff:d0:88:29:3b:d6:16:b1:f5:fd:56:89:05:
1c:a9:66:b6:0e:a9:ef:2a:41:0a:7b:1f:30:4d:3d:
0f:a0:60:84:d1:57:6f:2e:74:ae:44:74:44:49:79:
6e:c2:d9:17:98:98:f5:3b:77:7d:8a:01:d6:f3:2d:
9d:17:08:08:f9:5e:94:b8:c9:92:a4:cf:af:c3:40:
b6:a4:68:fb:6a:2b:38:80:02:20:8e:20:d6:c5:44:
50:b9:f6:9f:86:41:28:ca:86:66:1c:dc:b7:19:e3:
e4:ca:27:c0:7b:b1:a2:6a:a9:34:d2:08:e1:75:1b:
39:b2:a2:87:6a:09:08:a8:a1:57:68:f6:ce:05:64:
55:51:55:ff:8f:1b:de:a2:fb:45:b1:76:14:a1:ad:
f5:43:5e:73:dd:e4:ac:f8:91:b0:50:93:e6:ac:66:
b6:16:54:7c:b8:c7:25:b3:4b:e0:83:10:1a:67:8b:
bf:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:E9:BE:EF:AF:B5:BB:81:63:4A:BF:D0:3F:50:CB:1A:98:06:B7:B5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ecb94057-71c7-417c-9140-1014219048c5/fe884f5b-0eac-3a2d-8a5d-5a959dca9414.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ecb94057-71c7-417c-9140-1014219048c5/ecb94057-71c7-417c-9140-1014219048c5.crl
X509v3 Authority Key Identifier:
keyid:59:EB:C8:2B:38:35:E7:84:CE:FD:9A:3A:C8:E6:0C:2E:66:3B:20:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/ecb94057-71c7-417c-9140-1014219048c5.cer
sbgp-ipAddrBlock: critical
IPv4:
23.156.212.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a7:a2:88:04:b4:2f:b3:87:84:cb:07:14:ee:be:79:b1:89:d5:
c0:89:61:06:40:de:8b:9b:34:61:27:96:5c:0d:be:c0:e0:a9:
20:5f:d1:b1:eb:fd:f6:8c:f3:86:37:da:f1:18:94:4f:a1:35:
ea:f2:81:8d:3f:82:33:ed:a8:4e:e8:9b:b8:2f:e1:cf:95:c2:
09:e1:d4:cd:97:c6:c6:ed:42:36:4c:03:cb:29:4a:dc:dd:f0:
1e:a3:66:dc:d6:23:47:7e:77:4b:4a:eb:8b:de:01:fd:bf:49:
c0:c8:81:20:c1:ec:2a:9e:9e:da:b5:09:e3:c6:5e:de:63:d5:
72:08:7b:fd:55:d0:85:bd:e5:74:27:ef:7a:bc:52:45:31:21:
3f:fe:3d:a9:77:e9:64:dc:7e:86:a5:98:2f:4a:d4:fd:1c:a4:
77:d3:74:f4:db:ef:6c:44:12:91:49:c8:16:51:9a:8b:ab:c6:
32:67:65:0b:bf:af:b2:c3:3e:69:c5:ba:1c:c7:12:61:c6:a3:
34:4e:65:17:2c:c8:7b:f5:5e:0d:e5:dc:8d:9c:95:17:90:0f:
3b:aa:06:a9:b1:18:c1:a4:f1:8a:4c:d7:3f:37:50:bf:3b:9d:
8b:51:c8:61:3f:cf:6f:36:74:d2:f3:32:30:6b:be:f2:ca:88:
0e:86:88:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:41:21 2026 by rpki-client