
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1/ecbcca25-7e0e-38ab-8329-82e97195bb3e.roa
File: ecbcca25-7e0e-38ab-8329-82e97195bb3e.roa (raw, json)
Hash identifier: AOJoEEhAEVviDtb84tPJHCD94gR8qOHzQzHKuRn+M8o=
Subject key identifier: 7E:B3:CA:4E:FE:47:5C:93:FB:A6:5E:35:76:CB:FC:88:9C:5A:06:FB
Certificate issuer: /CN=f6a15183-2c23-4d0a-9aaa-fee47f7a61f1
Certificate serial: 010D0C9F4328584E6C185A385634F71C4D022C00
Authority key identifier: 5E:7D:66:AB:68:3C:74:74:46:85:34:BA:FB:50:A4:2F:7D:CF:A9:9A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1/ecbcca25-7e0e-38ab-8329-82e97195bb3e.roa
Signing time: Tue 07 Jul 2026 18:04:53 +0000
ROA not before: Tue 07 Jul 2026 18:04:53 +0000
ROA not after: Mon 05 Oct 2026 18:04:53 +0000
asID: 397285
IP address blocks: 23.172.192.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 23 Jul 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:6c:18:5a:38:56:34:f7:1c:4d:02:2c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6a15183-2c23-4d0a-9aaa-fee47f7a61f1
Validity
Not Before: Jul 7 18:04:53 2026 GMT
Not After : Oct 5 18:04:53 2026 GMT
Subject: CN=59f914c6-87a9-413f-b2d4-734867b3d381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:07:fe:c4:dc:a2:68:e8:a8:e0:98:05:bf:a9:
2a:2c:be:14:1a:3c:9d:86:53:76:d6:e9:95:9f:7a:
7c:8f:06:d8:82:1e:00:a0:51:8e:ae:30:d8:8b:36:
f5:49:e4:4e:cb:e6:05:ce:d1:88:f4:9c:8b:ec:e6:
50:7b:2d:78:6b:cf:45:20:de:05:7f:36:ef:16:a2:
f1:d7:e0:b7:9d:46:f7:95:2b:27:c9:2b:f0:ae:11:
ad:e3:a0:e3:1f:eb:3d:46:0e:55:c4:99:00:4a:af:
5d:57:0c:8f:2d:c9:b1:b2:7b:3c:31:ba:ec:f6:14:
0c:1e:39:9f:56:ce:b8:44:7e:36:28:aa:05:18:c1:
37:af:4d:d6:46:44:9d:00:90:d2:16:cb:17:9c:b4:
bf:40:15:25:e3:c9:de:66:e2:6b:f0:97:6d:95:f4:
d2:28:34:4e:47:1c:5f:ed:6b:e9:84:7b:1d:58:91:
12:5f:4e:49:2d:30:32:61:57:b6:79:5c:86:f2:22:
e9:6b:e0:6c:56:e8:e3:a5:83:4d:d7:96:52:9a:8f:
17:97:69:23:21:d4:81:8d:13:4a:cd:f0:24:39:fd:
93:d7:4a:2a:f6:a4:74:e8:ee:43:92:d2:6b:cd:66:
3f:ed:62:c5:df:90:88:db:71:87:d4:74:a4:61:0a:
46:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:B3:CA:4E:FE:47:5C:93:FB:A6:5E:35:76:CB:FC:88:9C:5A:06:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1/ecbcca25-7e0e-38ab-8329-82e97195bb3e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1.crl
X509v3 Authority Key Identifier:
keyid:5E:7D:66:AB:68:3C:74:74:46:85:34:BA:FB:50:A4:2F:7D:CF:A9:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f6a15183-2c23-4d0a-9aaa-fee47f7a61f1.cer
sbgp-ipAddrBlock: critical
IPv4:
23.172.192.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:fa:bc:57:fd:ea:10:8d:76:e1:80:27:50:7a:7a:4d:b6:04:
48:cb:27:cd:8f:11:5f:d3:2b:cb:07:c1:27:f3:0b:6d:dc:79:
f4:69:89:57:c8:3d:7e:37:25:29:99:99:68:f6:fb:66:b6:6a:
ec:7a:bc:f3:3e:31:35:7b:37:cb:8a:f1:c5:ca:53:22:07:dd:
79:a6:b3:d4:6b:c3:69:bd:e1:7a:8b:c0:10:ea:1e:4b:a8:35:
2b:3a:f8:86:a5:6e:7f:de:68:b9:55:a5:6f:03:9c:1d:06:0a:
6d:0b:5e:4f:ea:19:1c:80:d1:8b:9e:a2:f2:79:86:a0:a7:3e:
4e:f0:93:98:23:61:c1:89:04:ed:b3:2b:1c:5e:91:e3:76:fe:
0c:c8:64:b4:fb:68:9e:88:c9:49:38:28:9d:08:3b:cb:c8:f4:
ce:b3:29:3c:06:a8:eb:a1:93:30:ee:bb:5e:d3:5c:c5:82:85:
fd:54:3b:30:5a:9a:ad:ee:60:e1:ce:c5:d2:f7:89:86:7c:fb:
1a:9b:5d:05:cf:3c:aa:34:8f:fc:1b:9e:8b:81:35:ac:ff:02:
07:0e:a8:06:9c:d3:a1:7c:a7:34:4a:73:71:c0:fc:fb:6a:a2:
97:04:92:ec:79:b3:33:ca:d7:9f:de:1e:d0:ce:7e:2d:41:e4:
27:b7:28:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:16:51 2026 by rpki-client