
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/23e4b235-f38c-3c2c-864a-5c0f8fb72227.roa
File: 23e4b235-f38c-3c2c-864a-5c0f8fb72227.roa (raw, json)
Hash identifier: +7phy0dYb8DXAbmklZ4TcPUdOEiUk9IBg5O7Ktmg3O0=
Subject key identifier: CD:28:C1:8C:BC:B4:F4:04:F1:91:B1:29:FE:FA:A5:98:A4:7D:CA:10
Certificate issuer: /CN=95a66ba6-9469-47f7-8328-e12b21a9be23
Certificate serial: 010D0C9F4328584EC4D71092D024F0043704AE40
Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/23e4b235-f38c-3c2c-864a-5c0f8fb72227.roa
Signing time: Sat 08 Aug 2026 13:00:11 +0000
ROA not before: Sat 08 Aug 2026 13:00:11 +0000
ROA not after: Fri 06 Nov 2026 14:00:11 +0000
asID: 21433
IP address blocks: 170.251.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 13 Aug 2026 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:c4:d7:10:92:d0:24:f0:04:37:04:ae:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23
Validity
Not Before: Aug 8 13:00:11 2026 GMT
Not After : Nov 6 14:00:11 2026 GMT
Subject: CN=7db301d5-ae2d-44f3-a7c8-259931e774d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:33:80:9c:7c:67:2d:f7:fe:95:7f:05:16:cb:
d3:48:9f:41:26:14:e1:95:4c:8e:4f:fa:49:18:04:
97:e6:45:18:cd:38:7e:9f:f6:a0:da:6b:82:6d:2c:
4a:46:de:94:d6:a7:17:ce:93:bf:de:98:5a:f3:d8:
4b:47:04:d7:39:33:9b:bb:e1:e5:15:96:e0:5a:30:
eb:20:ab:15:e8:b6:c8:84:97:5c:25:c0:83:99:81:
d7:65:bd:fd:a0:34:66:bf:3f:1e:df:04:a1:a1:b1:
36:af:99:f1:33:df:f0:a3:12:5f:0f:9b:5d:b4:4f:
63:ab:cb:ce:c0:f8:39:f4:49:cb:f7:19:9d:a6:6c:
f4:65:91:42:81:38:3a:77:80:d9:47:e8:f7:b0:5b:
87:02:76:be:b4:54:f7:34:fe:e9:d9:e0:6a:31:65:
21:10:f2:96:da:97:ca:83:11:f7:dc:63:27:fb:e5:
44:16:f1:1c:0d:04:fb:e3:0c:fc:2d:04:ad:8a:1c:
ad:73:02:e2:bc:0f:70:0f:04:db:92:48:b7:3e:ec:
b5:ae:dd:a4:06:28:b4:90:8d:e3:4b:68:ae:ab:46:
5f:12:a2:15:17:fe:3b:18:f9:43:13:bd:75:91:85:
a3:9b:14:d2:a8:d9:c1:1e:cd:a4:10:ad:c8:f3:23:
80:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:28:C1:8C:BC:B4:F4:04:F1:91:B1:29:FE:FA:A5:98:A4:7D:CA:10
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/23e4b235-f38c-3c2c-864a-5c0f8fb72227.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl
X509v3 Authority Key Identifier:
keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
sbgp-ipAddrBlock: critical
IPv4:
170.251.85.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:63:c6:70:00:6e:f9:b6:70:83:59:06:77:fb:74:4d:49:aa:
96:d3:1a:4f:1d:76:93:bb:7e:66:7e:20:44:cf:67:23:32:e7:
c5:67:74:ca:2a:fb:02:9f:7b:c5:8d:b7:a3:80:de:df:83:e3:
c2:9f:6b:ac:9d:83:95:86:cb:b6:82:53:ca:e9:d3:d7:5b:87:
a5:01:e6:ff:16:9d:5b:7d:54:30:48:d2:0b:47:6d:2e:f5:66:
3d:5b:87:8f:bb:82:62:2a:6a:17:3f:f7:b4:10:ce:0d:cb:f6:
de:83:5f:29:12:9c:1e:04:3d:c3:c1:81:9a:71:70:46:13:dc:
55:c6:78:15:f1:4b:9e:e9:c5:12:8a:56:07:df:28:a2:a4:cb:
35:bb:2f:69:ef:80:8a:db:1f:45:95:34:a1:37:9f:db:94:14:
1d:53:b9:ec:31:ef:67:1a:27:a7:37:05:7f:04:b1:0a:6f:87:
36:2d:a4:a5:3e:97:5c:8a:f4:ec:97:f7:46:4b:e1:69:e2:5e:
87:7a:ea:c0:08:ef:44:ee:b7:1e:53:d0:ec:b5:33:3e:6e:87:
43:79:0d:39:f8:e5:34:6f:87:2c:89:3c:e7:11:ce:c6:fb:6b:
50:91:35:37:57:3e:54:ef:e6:87:09:05:af:1f:52:01:24:8f:
ed:ed:74:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 11 17:19:20 2026 by rpki-client