
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc1b22a5-f5e2-40d1-8827-a0cf8b8572a5/d79abeda-0936-3a13-9b49-693cf7dce834.roa
File: d79abeda-0936-3a13-9b49-693cf7dce834.roa (raw, json)
Hash identifier: 9O8Z6mRJSZ8WF2cmbznGgWfX6heM1Asxj/lv07KQbsw=
Subject key identifier: 6E:D8:14:CF:84:0F:86:C3:D1:BE:B6:96:3F:13:DC:D6:D9:4F:E0:99
Certificate issuer: /CN=bc1b22a5-f5e2-40d1-8827-a0cf8b8572a5
Certificate serial: 010D0C9F4328584F6AA9C117AF563A3B644BBE00
Authority key identifier: DD:EB:C3:81:75:BE:8F:B2:2B:40:D7:B0:98:6F:E6:4F:05:46:38:56
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc1b22a5-f5e2-40d1-8827-a0cf8b8572a5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc1b22a5-f5e2-40d1-8827-a0cf8b8572a5/d79abeda-0936-3a13-9b49-693cf7dce834.roa
Signing time: Tue 06 Oct 2026 22:33:10 +0000
ROA not before: Tue 06 Oct 2026 22:33:10 +0000
ROA not after: Wed 23 Dec 2026 02:00:12 +0000
asID: 22679
IP address blocks: 23.172.152.0/24 maxlen: 24
2602:f971::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc1b22a5-f5e2-40d1-8827-a0cf8b8572a5/bc1b22a5-f5e2-40d1-8827-a0cf8b8572a5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc1b22a5-f5e2-40d1-8827-a0cf8b8572a5/bc1b22a5-f5e2-40d1-8827-a0cf8b8572a5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc1b22a5-f5e2-40d1-8827-a0cf8b8572a5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:6a:a9:c1:17:af:56:3a:3b:64:4b:be:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc1b22a5-f5e2-40d1-8827-a0cf8b8572a5
Validity
Not Before: Oct 6 22:33:10 2026 GMT
Not After : Dec 23 02:00:12 2026 GMT
Subject: CN=1e89bef2-60a0-4c27-97d9-d1e25b38652c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:5b:0e:80:d7:cd:52:ce:12:fe:6a:d7:0a:cf:
53:ee:ff:f7:47:17:7e:4b:62:23:9a:1f:bc:40:5d:
84:1f:5a:34:06:ed:ef:8a:3d:8f:bd:24:5c:a2:09:
e9:fd:5c:fa:4c:98:b8:d9:0f:07:ac:74:2e:68:82:
49:b3:ac:9c:0a:77:07:09:a4:f9:de:c9:54:15:5f:
76:57:e9:38:93:5b:5e:b5:8a:87:de:8c:80:86:dd:
26:98:18:f4:f7:f9:03:1a:63:80:7c:79:ff:60:41:
4a:d1:93:78:fc:60:6b:78:c2:ba:da:81:e2:c2:b1:
4a:d8:7f:e9:c7:4d:84:51:4b:bf:cd:98:43:32:a4:
4b:ed:10:af:53:b7:48:23:d4:d9:76:96:a5:51:95:
84:d9:7e:09:50:48:44:95:bc:01:05:13:dc:4f:db:
ad:81:62:46:70:ba:62:a4:5d:05:d1:33:05:85:89:
3d:77:50:6a:3e:a3:2c:42:9c:7f:e2:c0:80:9f:bd:
69:f4:8c:eb:7b:29:65:87:43:eb:96:9b:31:13:7d:
b8:6d:65:be:24:d5:38:2f:e6:77:96:ab:a2:23:f8:
2d:07:7b:ea:34:28:ac:46:42:e1:7f:63:1e:f3:ec:
c9:12:63:32:2a:3e:86:5f:18:b9:bb:10:2c:47:5e:
db:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:D8:14:CF:84:0F:86:C3:D1:BE:B6:96:3F:13:DC:D6:D9:4F:E0:99
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc1b22a5-f5e2-40d1-8827-a0cf8b8572a5/d79abeda-0936-3a13-9b49-693cf7dce834.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc1b22a5-f5e2-40d1-8827-a0cf8b8572a5/bc1b22a5-f5e2-40d1-8827-a0cf8b8572a5.crl
X509v3 Authority Key Identifier:
keyid:DD:EB:C3:81:75:BE:8F:B2:2B:40:D7:B0:98:6F:E6:4F:05:46:38:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc1b22a5-f5e2-40d1-8827-a0cf8b8572a5.cer
sbgp-ipAddrBlock: critical
IPv4:
23.172.152.0/24
IPv6:
2602:f971::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:ca:ec:ea:9c:4e:65:ea:55:f0:05:ef:08:5a:9a:22:8e:1b:
3c:a0:95:ad:9e:42:f6:6b:d9:8f:2a:2f:f6:23:0f:de:a8:28:
4e:19:7b:1c:34:53:a1:82:c5:94:3a:de:b1:99:05:8c:7e:e0:
cc:6b:03:20:99:3e:21:19:ee:7c:fa:25:c0:06:61:e2:72:4e:
26:ea:6b:ff:a0:9b:1d:71:b4:c9:e9:3b:23:10:bf:31:2c:1b:
0a:57:67:97:70:fb:cb:dc:f7:63:d2:2d:91:92:08:60:43:7a:
66:3b:70:3d:fd:83:42:0b:fb:5d:a6:20:0a:34:cb:9d:b5:7b:
6a:7d:18:b1:ad:a2:68:f2:a5:90:b1:28:db:b5:24:ab:24:4f:
21:d2:22:6f:40:e9:33:2e:d9:29:78:7b:93:53:f4:c6:5a:44:
cb:e0:7c:66:ab:d6:be:a5:b5:36:5c:82:56:cc:eb:e5:eb:52:
7a:2d:a7:77:88:04:4c:a0:fd:a3:55:bc:5d:7f:ad:70:29:84:
07:ec:54:3f:c3:b3:d1:f9:33:e7:00:73:b3:17:32:7a:70:57:
dc:7a:7d:50:d4:8e:ea:3d:fb:e4:01:e2:cf:5c:42:f9:7f:85:
52:5d:2a:b6:38:4e:40:e6:0c:f1:36:ea:23:f1:bf:0b:41:6d:
c6:a3:e0:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 15:17:04 2026 by rpki-client