
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/f3225e69-5ec4-3015-adb5-cfdd83134436.roa
File: f3225e69-5ec4-3015-adb5-cfdd83134436.roa (raw, json)
Hash identifier: XsU5rCs8mZggpwumARucaEr89eSUN1S4Ec6HQdr/CO4=
Subject key identifier: FE:A3:46:F8:33:D2:17:3C:F4:14:D0:52:10:B0:66:53:7B:2B:12:1F
Certificate issuer: /CN=1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c
Certificate serial: 010D0C9F4328584EC10603DFA218BA8F3FC9F800
Authority key identifier: 1B:2E:C9:32:69:C0:91:AD:78:83:F0:75:7E:D4:FB:FE:E0:3C:A6:0C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/f3225e69-5ec4-3015-adb5-cfdd83134436.roa
Signing time: Fri 07 Aug 2026 04:11:39 +0000
ROA not before: Fri 07 Aug 2026 04:11:39 +0000
ROA not after: Thu 05 Nov 2026 05:11:39 +0000
asID: 394177
IP address blocks: 23.129.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 12 Aug 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:c1:06:03:df:a2:18:ba:8f:3f:c9:f8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c
Validity
Not Before: Aug 7 04:11:39 2026 GMT
Not After : Nov 5 05:11:39 2026 GMT
Subject: CN=0ac4bc1c-d8d8-42cc-8da4-05d1394e5f18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:e9:db:f7:6c:72:dd:70:f2:e6:68:a5:22:f0:
d4:af:a5:01:62:a6:cb:fd:ce:df:c0:b2:39:97:3b:
b5:a9:a2:a7:bc:eb:2b:f1:56:6b:9d:8c:a2:51:90:
cf:30:db:ef:c0:71:28:59:4b:d2:16:fa:91:69:a5:
74:73:49:ba:34:c7:82:02:fc:3a:9d:dd:df:2c:f2:
b3:72:93:c7:34:20:19:ad:78:44:ac:00:96:d0:69:
71:da:bd:93:1d:86:4b:00:44:bb:71:c3:9a:b2:f3:
da:6e:ad:93:be:c9:72:ff:68:25:96:a2:e7:2a:7a:
71:7b:0a:45:9c:81:f5:df:df:dc:93:b5:a6:ac:34:
34:81:c2:63:90:6f:47:51:7a:64:72:05:27:22:8c:
f7:77:69:a3:93:2a:15:03:e8:61:be:d1:cc:6b:0a:
69:a4:de:63:bc:1b:12:46:f1:4a:44:e5:bc:67:9a:
ea:bd:5d:bb:41:e1:ae:31:0e:91:b1:d9:f3:8d:02:
3d:f9:38:ec:26:cf:69:1b:8a:ca:4c:60:d7:2c:43:
32:a9:d8:c7:73:19:84:ac:5d:58:8c:62:cc:71:30:
fe:f4:c6:17:62:b1:1b:0a:e8:34:55:19:2b:1a:c8:
51:e6:97:48:6d:d3:01:19:42:7c:05:47:7b:33:fa:
0b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:A3:46:F8:33:D2:17:3C:F4:14:D0:52:10:B0:66:53:7B:2B:12:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/f3225e69-5ec4-3015-adb5-cfdd83134436.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.crl
X509v3 Authority Key Identifier:
keyid:1B:2E:C9:32:69:C0:91:AD:78:83:F0:75:7E:D4:FB:FE:E0:3C:A6:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1fc7f23f-b0a0-4d2c-a8a2-3605c6f08e9c.cer
sbgp-ipAddrBlock: critical
IPv4:
23.129.100.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:9c:07:af:87:46:14:1e:a8:ee:8c:c3:9c:7e:c7:a6:28:a7:
20:54:61:9b:46:df:f2:78:01:02:1d:bd:37:28:d0:cf:a2:a8:
47:d4:3c:20:cc:55:c1:d0:e1:ae:49:36:a7:04:6f:d9:7f:da:
ff:e9:cd:64:cd:c7:42:bb:02:6a:a8:ff:e3:47:db:21:65:2b:
f8:38:de:ca:88:f9:a4:10:e8:b7:99:f3:db:f5:cc:fe:a0:37:
19:11:c0:cd:73:6b:7d:db:66:7f:50:a5:b7:16:c9:53:19:b0:
d2:71:c2:a4:65:3d:a6:c8:fb:38:7d:b2:47:c5:5f:d5:84:13:
be:50:dc:86:5e:fa:73:c6:d6:82:46:78:f5:2e:a6:74:4d:d2:
97:a3:ff:29:a1:d8:2a:af:43:6f:d0:86:3b:af:e5:09:c7:bf:
bf:58:b0:a9:68:2b:53:a4:d1:0a:d5:c8:1b:40:43:6c:01:1f:
46:03:6e:ac:e0:47:25:66:4b:ac:6f:05:40:63:12:09:b9:0b:
5a:18:0f:c5:fe:0e:7c:b3:8f:d2:0e:1b:3c:48:5d:43:43:98:
29:42:df:5d:fb:77:d8:ea:f7:7f:26:86:63:0f:e1:14:f8:4e:
fa:02:ac:1a:1e:0f:ff:64:53:48:25:fc:1a:3d:90:f3:47:1a:
fb:db:ef:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 11 11:45:33 2026 by rpki-client