
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8/99b9ca57-15c7-30eb-bebe-5de249f985af.roa
File: 99b9ca57-15c7-30eb-bebe-5de249f985af.roa (raw, json)
Hash identifier: Fu182kzfk/4me+ST9Jo9wYIFngmygT9sXhuqQPLbZZY=
Subject key identifier: 03:7E:4C:F4:38:66:79:F3:4E:D7:0D:9F:5E:66:3B:1E:87:FC:C5:31
Certificate issuer: /CN=71694d9a-8a1f-478d-8d5f-c3d4c84ddea8
Certificate serial: 010D0C9F4328584F51D2AF6B23CEF3746D18FA80
Authority key identifier: 2D:D7:F3:49:98:6C:58:6B:C7:BF:E0:C1:9D:BF:8F:BC:2E:E4:BC:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8/99b9ca57-15c7-30eb-bebe-5de249f985af.roa
Signing time: Mon 28 Sep 2026 01:00:12 +0000
ROA not before: Mon 28 Sep 2026 01:00:12 +0000
ROA not after: Sun 27 Dec 2026 02:00:12 +0000
asID: 401170
IP address blocks: 23.181.136.0/24 maxlen: 24
131.143.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Nov 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:51:d2:af:6b:23:ce:f3:74:6d:18:fa:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71694d9a-8a1f-478d-8d5f-c3d4c84ddea8
Validity
Not Before: Sep 28 01:00:12 2026 GMT
Not After : Dec 27 02:00:12 2026 GMT
Subject: CN=1c638993-a775-4f58-af11-b8e36dd7c5ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:29:03:61:47:97:3d:c7:58:20:06:2f:c2:b0:
73:44:de:bf:27:99:f5:a3:8d:b3:0f:ab:e2:b9:46:
a2:59:03:0c:67:96:33:e5:ec:45:cd:d3:a1:e7:c1:
b4:3b:b4:44:16:fb:2f:08:48:01:74:fd:ae:50:40:
5d:04:66:c0:48:63:16:f0:3f:f8:be:bb:86:9e:ee:
e5:17:3d:3c:49:00:39:72:97:52:14:fc:6d:c2:a6:
83:c3:d7:5b:7f:73:59:fb:89:36:df:42:de:6c:7b:
f9:90:18:6f:c0:0d:b8:72:1b:0d:48:73:2a:63:a3:
96:5d:a0:4e:b2:b0:55:66:e3:e7:c2:cc:9b:26:c8:
cd:8d:22:05:01:1d:de:b4:3d:4f:be:eb:eb:72:a7:
c7:bf:8b:4f:b2:d1:b8:54:ab:52:6a:b2:da:dd:37:
0e:78:b0:1d:ea:c0:4f:04:31:54:c7:1a:54:d5:ef:
b8:27:ac:85:0c:af:f9:ca:79:1f:12:9e:43:98:c1:
cb:9a:8f:5a:60:a0:6f:79:0f:67:92:e2:89:97:cc:
5f:2c:f6:2a:34:55:85:45:d6:fe:eb:d0:32:0d:fc:
54:a4:09:98:f8:a8:33:ad:09:bb:9e:ca:d3:46:54:
f7:7b:48:e5:ab:55:35:14:94:ee:fb:16:9f:db:26:
6d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:7E:4C:F4:38:66:79:F3:4E:D7:0D:9F:5E:66:3B:1E:87:FC:C5:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8/99b9ca57-15c7-30eb-bebe-5de249f985af.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8.crl
X509v3 Authority Key Identifier:
keyid:2D:D7:F3:49:98:6C:58:6B:C7:BF:E0:C1:9D:BF:8F:BC:2E:E4:BC:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/71694d9a-8a1f-478d-8d5f-c3d4c84ddea8.cer
sbgp-ipAddrBlock: critical
IPv4:
23.181.136.0/24
131.143.59.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:af:69:e1:af:f4:8e:ec:d9:4a:8c:bd:05:35:06:2a:90:90:
8b:15:06:b7:f1:0e:a8:71:c9:d9:94:62:c7:0e:81:05:84:4e:
36:26:0e:ef:90:e1:88:65:05:80:4e:f2:d6:20:9e:2c:9c:53:
93:80:89:8c:54:49:bd:9c:3e:93:47:78:4e:4f:71:c0:6f:43:
d8:2d:01:ef:9a:db:20:b0:2e:a6:c6:51:4d:1e:ca:0a:5a:31:
ad:76:c7:94:ed:5d:bd:4d:e5:75:e7:0c:b9:7c:ec:be:54:be:
2b:15:87:78:53:18:5f:9e:45:b3:e0:7a:0a:6d:48:b9:62:b9:
58:4e:d3:73:fc:1d:b4:32:43:f5:bd:77:51:28:af:46:40:ff:
d4:5d:54:c4:e0:71:b1:69:78:97:f3:f1:54:07:b9:d3:88:9d:
62:f1:1e:90:1e:78:c8:f0:26:48:de:45:0d:5f:28:5c:62:2f:
42:cd:a0:a0:27:df:e3:4f:ac:7d:30:cc:df:e5:b4:f9:f3:4e:
3c:31:83:47:0b:14:cc:54:8c:f2:b5:9f:5b:3e:90:26:11:e0:
32:48:5b:dc:db:10:22:8e:fe:a7:e2:dc:a6:5e:cd:9f:a1:bc:
91:d4:2b:2e:d5:f4:3e:84:0d:00:60:c3:c2:3c:57:0c:9c:cb:
45:9e:3e:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 11:52:22 2026 by rpki-client