
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66/99dd9df1-85c8-3156-9ead-c836be3c6a64.roa
File: 99dd9df1-85c8-3156-9ead-c836be3c6a64.roa (raw, json)
Hash identifier: ToD/3JbxHfnXU4bnEEEoG29TX/cjawLSehKr/JvkvoU=
Subject key identifier: A1:7D:8B:A7:0A:B1:34:9A:8F:7F:34:8B:67:5F:5D:E8:AB:52:D8:2F
Certificate issuer: /CN=423dceca-a5b5-4f9a-8509-49ac01f41c66
Certificate serial: 010D0C9F4328584EB8473ED5E77DC4C5C17E0500
Authority key identifier: FF:75:5D:D3:4A:2F:06:D2:A2:77:F0:71:10:E1:88:FB:FE:C1:D7:E9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66/99dd9df1-85c8-3156-9ead-c836be3c6a64.roa
Signing time: Tue 04 Aug 2026 01:00:12 +0000
ROA not before: Tue 04 Aug 2026 01:00:12 +0000
ROA not after: Mon 02 Nov 2026 02:00:12 +0000
asID: 63101
IP address blocks: 23.188.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66/423dceca-a5b5-4f9a-8509-49ac01f41c66.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66/423dceca-a5b5-4f9a-8509-49ac01f41c66.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 24 Aug 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:b8:47:3e:d5:e7:7d:c4:c5:c1:7e:05:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=423dceca-a5b5-4f9a-8509-49ac01f41c66
Validity
Not Before: Aug 4 01:00:12 2026 GMT
Not After : Nov 2 02:00:12 2026 GMT
Subject: CN=837cb724-d8ff-4275-ba73-b8f0bfd967e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5c:0e:65:83:68:63:53:b4:09:61:d5:5e:9f:
21:95:5b:a5:56:e6:f9:91:7a:3e:15:43:21:e7:da:
17:88:7d:d9:6a:2e:92:76:a9:e4:7d:4a:f4:21:f6:
26:83:8c:44:40:ab:ea:91:2a:ff:12:6f:2c:5b:e2:
05:69:fb:33:f0:4a:78:ce:e6:63:40:39:4f:a3:f9:
51:85:51:77:aa:f3:ae:be:60:5c:58:08:38:98:30:
f5:73:74:41:46:db:8e:14:a3:30:67:df:18:bb:76:
ca:71:7e:34:1c:e0:a9:04:0e:c9:18:e4:4b:e5:16:
ce:30:82:85:55:77:1d:11:7c:a6:20:d4:e4:cc:02:
37:fb:17:0b:3c:0a:76:40:a5:c9:0a:71:f1:80:6c:
83:d4:cf:77:7e:dd:90:4a:19:24:ff:d5:f2:3e:00:
b4:d0:66:ea:5b:f2:74:72:10:3b:1d:30:d0:98:bc:
f7:a8:c7:77:73:ea:fb:50:84:68:ab:77:57:ea:80:
4c:ee:8b:40:2b:b4:d8:c1:63:fd:78:c6:d0:55:45:
4c:eb:b4:b7:9c:bf:ee:7e:4c:97:93:59:fa:b4:e9:
48:f3:4f:0f:ab:ff:4a:87:7c:01:01:67:89:58:04:
ce:e3:d5:8c:4b:8c:ab:11:f2:3a:46:1e:70:ad:1b:
85:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:7D:8B:A7:0A:B1:34:9A:8F:7F:34:8B:67:5F:5D:E8:AB:52:D8:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66/99dd9df1-85c8-3156-9ead-c836be3c6a64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66/423dceca-a5b5-4f9a-8509-49ac01f41c66.crl
X509v3 Authority Key Identifier:
keyid:FF:75:5D:D3:4A:2F:06:D2:A2:77:F0:71:10:E1:88:FB:FE:C1:D7:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66.cer
sbgp-ipAddrBlock: critical
IPv4:
23.188.40.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:33:53:ac:f8:02:48:9a:70:dc:80:1f:10:ff:1d:0c:70:f7:
65:2e:71:57:65:d8:bf:57:b5:54:06:29:d0:69:72:01:83:53:
f5:0d:46:48:5f:dd:91:8b:03:d3:dc:9a:f9:74:8e:af:7d:69:
fe:34:05:86:a6:c1:72:14:e5:cf:b6:55:28:61:af:e6:f1:34:
c5:4e:d7:1f:7e:5c:56:43:d6:dd:1d:6e:8f:cb:de:a6:51:1a:
bf:d8:e1:68:4a:55:90:45:53:f0:1e:24:39:17:60:7d:11:8f:
ea:b4:65:8a:55:93:44:1b:cb:29:64:5a:ef:4b:5f:89:c3:af:
6d:94:76:b1:23:fe:e0:c9:dc:5b:36:4b:8e:93:d4:54:df:dd:
fb:22:5d:fd:9f:05:42:9a:ad:5b:c2:60:94:fa:37:c2:04:cd:
f2:31:80:e7:e9:86:5b:8b:fe:22:48:36:0d:64:d8:05:bb:7f:
c9:ac:b9:62:f9:8a:cb:05:3a:41:b1:35:d4:7b:90:b0:8d:10:
1f:77:51:a0:6b:e9:af:66:6c:a7:f4:11:69:37:98:92:20:a4:
d0:49:23:03:96:89:b6:7d:31:9a:bc:cd:2d:b1:cd:60:59:bb:
61:1c:a0:c9:66:cf:5f:a4:34:f0:8c:03:52:09:a7:87:05:76:
45:9d:30:f6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE64Rz7V533ExcF+BQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDIzZGNlY2EtYTViNS00ZjlhLTg1MDktNDlhYzAxZjQx
YzY2MB4XDTI2MDgwNDAxMDAxMloXDTI2MTEwMjAyMDAxMlowLzEtMCsGA1UEAxMk
ODM3Y2I3MjQtZDhmZi00Mjc1LWJhNzMtYjhmMGJmZDk2N2UzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplwOZYNoY1O0CWHVXp8hlVulVub5kXo+FUMh
59oXiH3Zai6SdqnkfUr0IfYmg4xEQKvqkSr/Em8sW+IFafsz8Ep4zuZjQDlPo/lR
hVF3qvOuvmBcWAg4mDD1c3RBRtuOFKMwZ98Yu3bKcX40HOCpBA7JGORL5RbOMIKF
VXcdEXymINTkzAI3+xcLPAp2QKXJCnHxgGyD1M93ft2QShkk/9XyPgC00GbqW/J0
chA7HTDQmLz3qMd3c+r7UIRoq3dX6oBM7otAK7TYwWP9eMbQVUVM67S3nL/ufkyX
k1n6tOlI808Pq/9Kh3wBAWeJWATO49WMS4yrEfI6Rh5wrRuFFwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKF9i6cKsTSaj380i2dfXeirUtgvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80MjNk
Y2VjYS1hNWI1LTRmOWEtODUwOS00OWFjMDFmNDFjNjYvOTlkZDlkZjEtODVjOC0z
MTU2LTllYWQtYzgzNmJlM2M2YTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDIzZGNlY2EtYTViNS00ZjlhLTg1
MDktNDlhYzAxZjQxYzY2LzQyM2RjZWNhLWE1YjUtNGY5YS04NTA5LTQ5YWMwMWY0
MWM2Ni5jcmwwHwYDVR0jBBgwFoAU/3Vd00ovBtKid/BxEOGI+/7B1+kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS80MjNkY2VjYS1hNWI1LTRmOWEtODUwOS00OWFj
MDFmNDFjNjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7woMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEQzU6z4AkiacNyAHxD/HQxw92UucVdl2L9XtVQGKdBpcgGDU/UNRkhf
3ZGLA9Pcmvl0jq99af40BYamwXIU5c+2VShhr+bxNMVO1x9+XFZD1t0dbo/L3qZR
Gr/Y4WhKVZBFU/AeJDkXYH0Rj+q0ZYpVk0QbyylkWu9LX4nDr22UdrEj/uDJ3Fs2
S46T1FTf3fsiXf2fBUKarVvCYJT6N8IEzfIxgOfphluL/iJINg1k2AW7f8msuWL5
issFOkGxNdR7kLCNEB93UaBr6a9mbKf0EWk3mJIgpNBJIwOWibZ9MZq8zS2xzWBZ
u2EcoMlmz1+kNPCMA1IJp4cFdkWdMPY=
-----END CERTIFICATE-----
Generated at Sat Aug 22 18:47:50 2026 by rpki-client