
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a6d409f-f6c6-4ba5-a674-6b6368d2478a/23d0f331-5da5-31e0-b663-9c0b7082918b.roa
File: 23d0f331-5da5-31e0-b663-9c0b7082918b.roa (raw, json)
Hash identifier: zROLYRBoud+Jy/q2OrMNb00dbCO05VMcKI7jARUMSPo=
Subject key identifier: AF:3F:2D:12:3C:C9:2F:40:B3:FA:8D:BB:29:F9:9F:B1:CC:29:20:85
Certificate issuer: /CN=3a6d409f-f6c6-4ba5-a674-6b6368d2478a
Certificate serial: 010D0C9F4328584F2ABD104317BAAFBE3FF5F7C0
Authority key identifier: F6:D4:94:D6:34:79:64:22:55:99:1E:B3:43:65:D0:58:C4:F5:B0:68
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a6d409f-f6c6-4ba5-a674-6b6368d2478a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a6d409f-f6c6-4ba5-a674-6b6368d2478a/23d0f331-5da5-31e0-b663-9c0b7082918b.roa
Signing time: Mon 14 Sep 2026 01:00:12 +0000
ROA not before: Mon 14 Sep 2026 01:00:12 +0000
ROA not after: Sun 13 Dec 2026 02:00:12 +0000
asID: 18705
IP address blocks: 208.93.72.0/21 maxlen: 21
208.93.73.0/24 maxlen: 24
208.93.76.0/23 maxlen: 23
208.93.78.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a6d409f-f6c6-4ba5-a674-6b6368d2478a/3a6d409f-f6c6-4ba5-a674-6b6368d2478a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a6d409f-f6c6-4ba5-a674-6b6368d2478a/3a6d409f-f6c6-4ba5-a674-6b6368d2478a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a6d409f-f6c6-4ba5-a674-6b6368d2478a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 10 Oct 2026 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:2a:bd:10:43:17:ba:af:be:3f:f5:f7:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a6d409f-f6c6-4ba5-a674-6b6368d2478a
Validity
Not Before: Sep 14 01:00:12 2026 GMT
Not After : Dec 13 02:00:12 2026 GMT
Subject: CN=07ec01c9-2967-4621-8b4b-c74aaabf1c93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:5d:2e:3a:f5:e7:e6:40:90:ec:01:0d:5e:99:
80:21:b3:75:1a:a7:e2:77:99:fc:f6:6f:0b:d9:95:
88:7b:e9:13:4c:00:e9:cd:8f:78:9a:4b:7c:73:f5:
83:51:4a:78:5d:95:ad:28:5b:16:b6:a9:00:1a:e0:
5d:98:84:13:3c:9b:a5:81:a7:6c:bb:10:0b:98:2e:
98:d8:a1:93:ef:6e:af:6b:b9:d2:47:34:c3:69:c5:
eb:5b:a5:cf:73:ba:be:38:d6:dd:1a:63:8b:76:c7:
6a:3c:4b:f1:11:6d:15:53:c4:b6:04:7e:4f:d7:13:
c8:2f:1e:95:21:ed:7b:cd:01:94:b6:02:53:a8:14:
2f:96:9f:33:db:25:ee:3f:3c:25:08:fd:47:74:9c:
12:7b:f0:a8:9c:71:61:db:35:e1:da:4e:43:61:98:
9b:04:14:30:da:69:10:bb:a8:b5:d5:2a:e9:99:b7:
f9:f4:07:d0:86:ed:c6:a3:ca:a8:68:c0:31:6d:c7:
9b:70:3b:cb:21:7b:e7:a5:24:29:77:ed:5b:9e:7e:
6e:c2:d7:dd:0d:4b:8e:48:77:db:a2:a3:94:5a:2b:
47:62:7c:25:5c:67:11:61:19:39:f2:7d:20:19:49:
60:e3:28:15:de:55:94:39:9a:3e:d8:c8:44:26:6f:
6a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:3F:2D:12:3C:C9:2F:40:B3:FA:8D:BB:29:F9:9F:B1:CC:29:20:85
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a6d409f-f6c6-4ba5-a674-6b6368d2478a/23d0f331-5da5-31e0-b663-9c0b7082918b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a6d409f-f6c6-4ba5-a674-6b6368d2478a/3a6d409f-f6c6-4ba5-a674-6b6368d2478a.crl
X509v3 Authority Key Identifier:
keyid:F6:D4:94:D6:34:79:64:22:55:99:1E:B3:43:65:D0:58:C4:F5:B0:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3a6d409f-f6c6-4ba5-a674-6b6368d2478a.cer
sbgp-ipAddrBlock: critical
IPv4:
208.93.72.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:bc:85:13:90:a0:2f:cf:66:cc:67:78:95:f7:ce:ad:dc:92:
34:c6:f7:e5:79:50:d6:a7:79:05:b6:a6:3f:3d:2d:0c:4e:9b:
74:93:9d:e2:68:5c:fb:3b:61:54:2a:a4:8b:34:cd:5b:44:66:
31:e1:76:fe:e2:e2:49:7b:1f:0e:d0:72:02:b4:6d:71:9d:df:
48:44:62:78:1a:24:7c:e8:4b:d3:15:21:1c:1d:78:b8:ce:05:
f4:94:e8:d6:52:4c:cc:da:f5:77:ee:8e:1e:a2:cd:93:b0:6d:
13:56:e6:46:07:ed:3e:46:7f:9a:6d:54:63:f2:65:b0:a8:f4:
71:60:aa:f5:e3:04:f1:b6:ac:56:db:40:84:b2:cf:c8:59:69:
1a:a9:04:7e:cb:00:f5:ef:16:9d:48:a2:b1:1b:13:ac:ee:49:
43:76:1c:da:e6:c1:91:70:90:7c:94:d6:e3:40:55:e7:cc:30:
69:3e:1f:7a:93:07:d4:92:05:fd:90:29:e2:70:66:23:23:c3:
eb:40:53:59:c6:dd:ab:7c:bc:06:0f:d6:cc:68:83:0c:a3:36:
71:14:33:44:52:c1:96:3d:c3:1b:b1:21:c2:e8:bf:44:96:90:
a6:7c:93:83:c6:8c:16:8b:9b:28:5b:b6:9a:ee:72:5f:1f:65:
87:1b:b5:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 23:20:21 2026 by rpki-client