
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/594dc3d7-d496-4b12-b848-f53f33a1c570/b491a863-9fe0-36e0-8762-5823b3ba9f21.roa
File: b491a863-9fe0-36e0-8762-5823b3ba9f21.roa (raw, json)
Hash identifier: OBF/anEpi6gP0ccsfzfTAUC7nbst+uBXmmhJPc73gqg=
Subject key identifier: 81:3C:30:22:3D:94:6B:F4:01:BB:12:2A:D1:F5:FC:CD:5D:07:28:89
Certificate issuer: /CN=594dc3d7-d496-4b12-b848-f53f33a1c570
Certificate serial: 010D0C9F4328584EE96294B6E28D77717A8A6500
Authority key identifier: 2B:DF:62:2F:84:71:8B:E5:79:FD:28:F4:FB:6B:37:4B:B1:26:08:2A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/594dc3d7-d496-4b12-b848-f53f33a1c570.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/594dc3d7-d496-4b12-b848-f53f33a1c570/b491a863-9fe0-36e0-8762-5823b3ba9f21.roa
Signing time: Fri 21 Aug 2026 15:10:29 +0000
ROA not before: Fri 21 Aug 2026 15:10:29 +0000
ROA not after: Thu 19 Nov 2026 16:10:29 +0000
asID: 399905
IP address blocks: 23.161.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/594dc3d7-d496-4b12-b848-f53f33a1c570/594dc3d7-d496-4b12-b848-f53f33a1c570.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/594dc3d7-d496-4b12-b848-f53f33a1c570/594dc3d7-d496-4b12-b848-f53f33a1c570.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/594dc3d7-d496-4b12-b848-f53f33a1c570.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 27 Aug 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:e9:62:94:b6:e2:8d:77:71:7a:8a:65:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=594dc3d7-d496-4b12-b848-f53f33a1c570
Validity
Not Before: Aug 21 15:10:29 2026 GMT
Not After : Nov 19 16:10:29 2026 GMT
Subject: CN=7a19d966-79cb-4c6b-8603-cea68a6bc3f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:2d:bd:6d:6a:07:6f:aa:3b:8f:50:d9:56:60:
cd:8a:a5:1d:1e:24:6b:be:85:4b:8c:cf:60:78:b3:
8b:15:44:e3:36:7f:d9:89:22:ff:d9:1a:09:4f:31:
40:45:47:d3:7a:05:3b:0e:4d:79:c6:44:81:ba:f8:
d0:a7:67:56:a1:87:d2:15:80:5b:5d:3d:09:f8:14:
a6:2c:2c:a4:5b:f8:56:ce:78:6b:84:c5:be:13:da:
e6:e8:6e:a0:96:0e:8d:9d:74:b1:c2:64:2e:dc:5d:
35:91:54:70:05:34:a1:9f:86:39:05:92:4e:bc:24:
90:8c:7e:2f:41:31:24:2d:b3:98:45:7a:1f:14:1e:
0f:b5:f5:dd:f2:52:f6:09:92:02:99:f1:f5:45:ba:
e2:d7:28:01:06:6c:76:49:5e:46:f4:39:ab:38:af:
b4:bb:f5:a6:bc:39:4f:a2:ae:88:21:ae:fe:fb:0f:
14:a8:c2:6a:d9:af:62:c4:e8:99:49:18:43:ef:0e:
2b:94:0d:62:f0:61:39:3c:cf:88:a1:78:8b:7b:a8:
67:c9:79:ef:a3:a3:34:62:95:c7:a5:30:f5:55:77:
52:ba:b3:ce:96:88:0d:c9:c4:f3:2e:87:6e:2a:13:
7f:bd:41:26:7d:11:f6:ec:1c:c6:a6:e9:df:76:2a:
e1:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:3C:30:22:3D:94:6B:F4:01:BB:12:2A:D1:F5:FC:CD:5D:07:28:89
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/594dc3d7-d496-4b12-b848-f53f33a1c570/b491a863-9fe0-36e0-8762-5823b3ba9f21.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/594dc3d7-d496-4b12-b848-f53f33a1c570/594dc3d7-d496-4b12-b848-f53f33a1c570.crl
X509v3 Authority Key Identifier:
keyid:2B:DF:62:2F:84:71:8B:E5:79:FD:28:F4:FB:6B:37:4B:B1:26:08:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/594dc3d7-d496-4b12-b848-f53f33a1c570.cer
sbgp-ipAddrBlock: critical
IPv4:
23.161.108.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:ba:22:2b:5f:66:64:06:9b:64:21:0d:94:85:5c:2c:12:84:
0d:16:d6:85:d6:ea:06:47:3f:d1:71:91:a9:8d:a7:6f:74:99:
58:2d:8b:6f:e9:91:78:6b:cb:3f:b6:e0:89:e1:4e:54:a3:de:
43:53:42:0f:08:0a:95:33:92:b1:71:9a:6c:f7:62:4d:41:9c:
9a:79:5a:93:68:0c:3c:20:42:dc:37:ba:27:9e:da:60:d3:bb:
e0:e5:17:12:b6:0e:b9:0f:43:1f:91:12:66:d3:bf:d7:37:b4:
8b:e2:fe:0d:12:33:6f:58:e9:88:e6:cd:05:97:ea:0d:13:8f:
b3:81:00:ab:e6:3b:24:c1:0e:4d:7a:b4:49:e1:7e:2c:72:1b:
c1:5a:5f:f6:b3:77:d9:2d:bc:cf:64:a2:2c:4b:e8:07:63:23:
04:ac:f9:5a:82:4b:60:20:e3:40:aa:16:2b:0e:a1:54:31:5f:
3a:1e:bb:f9:c2:28:98:42:c6:7f:af:4d:ce:d2:3c:9b:a3:9f:
cd:b7:83:6a:d6:77:70:7f:04:bd:0e:1a:97:db:7d:94:78:85:
e3:48:86:c2:60:f1:c9:4f:2d:3e:9a:95:ce:e3:58:a1:0e:06:
60:d3:2f:21:df:17:e3:be:aa:90:80:26:6a:a0:82:0a:e2:0f:
63:d2:7b:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 07:53:30 2026 by rpki-client