
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8118d48c-a256-4b28-967d-1f836718e31e/f33e2938-3175-32bb-addd-654bad44256d.roa
File: f33e2938-3175-32bb-addd-654bad44256d.roa (raw, json)
Hash identifier: 5O+/YqTVAZ6d9ojstL9U7ab9qMv0iLOi5pzrpYJkHcw=
Subject key identifier: 64:A1:6B:3A:14:0C:FA:0D:DE:2F:DB:DD:07:5A:6F:94:55:B7:AE:CB
Certificate issuer: /CN=8118d48c-a256-4b28-967d-1f836718e31e
Certificate serial: 010D0C9F4328584F7E7DA2F6A988841A7B94FE00
Authority key identifier: D0:2C:5E:2F:E6:74:48:0B:D6:E7:E5:53:DF:0E:4E:70:5E:8E:30:F2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8118d48c-a256-4b28-967d-1f836718e31e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8118d48c-a256-4b28-967d-1f836718e31e/f33e2938-3175-32bb-addd-654bad44256d.roa
Signing time: Wed 14 Oct 2026 01:00:13 +0000
ROA not before: Wed 14 Oct 2026 01:00:13 +0000
ROA not after: Tue 12 Jan 2027 02:00:13 +0000
asID: 400910
IP address blocks: 23.138.212.0/24 maxlen: 24
2604:fa0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8118d48c-a256-4b28-967d-1f836718e31e/8118d48c-a256-4b28-967d-1f836718e31e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8118d48c-a256-4b28-967d-1f836718e31e/8118d48c-a256-4b28-967d-1f836718e31e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8118d48c-a256-4b28-967d-1f836718e31e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 01 Nov 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:7e:7d:a2:f6:a9:88:84:1a:7b:94:fe:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8118d48c-a256-4b28-967d-1f836718e31e
Validity
Not Before: Oct 14 01:00:13 2026 GMT
Not After : Jan 12 02:00:13 2027 GMT
Subject: CN=4e29df23-68f5-4c7c-ab43-ec6e0df03972
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:75:a4:46:be:8e:7c:68:7b:5c:2f:f1:12:cd:
d9:0e:d3:12:50:8b:f7:4a:f2:bc:93:23:43:94:4c:
93:19:24:d5:35:3c:e3:a9:cf:33:28:79:59:77:e2:
cd:f1:e3:87:fb:2f:e9:99:36:98:6f:09:b0:e8:61:
26:01:c2:75:39:d1:05:7c:88:4e:e2:24:99:7b:26:
08:fb:95:14:ed:42:ec:c7:ea:de:f3:42:95:4b:6f:
50:78:00:ed:14:4d:81:ba:39:07:1b:b3:e2:ee:5e:
3b:56:51:00:79:d4:f0:cb:38:27:c0:64:7d:0c:64:
84:4a:2f:be:d9:aa:ea:7c:18:4b:bc:29:7e:34:76:
15:41:1c:70:cb:e0:0c:54:83:8e:9e:26:34:68:b0:
14:9a:34:57:99:a5:05:e7:50:7f:94:d5:3f:cc:00:
13:80:c2:21:23:a2:38:a4:63:6d:cc:12:01:c5:88:
32:91:62:b0:ee:98:86:bb:97:02:a7:59:00:9c:8e:
83:6f:f5:94:c0:d7:ce:52:a8:17:c3:c0:d5:64:f4:
c1:e8:70:fc:24:5c:cb:19:91:2f:4a:16:2d:84:6e:
92:8c:a2:37:7b:8c:ed:0b:75:5c:0e:7c:2f:a4:3d:
a8:05:eb:b0:ce:b7:ee:00:d2:51:ac:7e:42:30:5f:
e1:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:A1:6B:3A:14:0C:FA:0D:DE:2F:DB:DD:07:5A:6F:94:55:B7:AE:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8118d48c-a256-4b28-967d-1f836718e31e/f33e2938-3175-32bb-addd-654bad44256d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8118d48c-a256-4b28-967d-1f836718e31e/8118d48c-a256-4b28-967d-1f836718e31e.crl
X509v3 Authority Key Identifier:
keyid:D0:2C:5E:2F:E6:74:48:0B:D6:E7:E5:53:DF:0E:4E:70:5E:8E:30:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8118d48c-a256-4b28-967d-1f836718e31e.cer
sbgp-ipAddrBlock: critical
IPv4:
23.138.212.0/24
IPv6:
2604:fa0::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:23:9e:5b:d5:73:a3:20:c3:1c:a8:4e:2a:25:23:db:19:32:
ee:67:e4:3a:b3:73:11:c5:ba:4a:07:e7:13:8a:9f:06:fe:dc:
8e:04:34:d0:52:48:36:e0:b5:8a:01:7e:ef:d1:73:be:01:a2:
ed:e1:b3:87:e1:5e:18:15:aa:25:3d:bf:29:98:17:f0:bc:90:
82:0a:63:c0:e4:50:73:3d:89:a3:8b:3f:d7:e4:e7:04:c8:66:
44:bf:b6:b5:f2:66:91:46:e9:49:7f:26:88:50:30:31:a6:f2:
3f:4f:22:c6:7e:3f:64:2c:f8:9e:e2:6b:88:dc:07:d3:56:c1:
1c:7e:ae:74:86:bc:42:5a:37:05:e9:80:59:97:c4:c9:68:41:
16:54:3e:89:85:ce:0e:2d:5c:e4:09:37:97:f4:6e:b3:cb:ac:
c8:c5:a1:81:68:5a:40:4f:2a:e2:a5:31:6f:ac:10:49:23:9b:
06:ab:ef:f5:bc:51:77:eb:e0:41:35:1c:07:22:68:07:8f:a8:
2b:0e:e1:43:ba:a6:99:9e:b7:2a:38:b5:bf:8b:b8:24:5c:04:
9c:eb:8e:e1:3c:32:6c:1f:cb:63:5c:54:47:20:93:f9:99:18:
92:9d:93:3a:0d:b0:c5:8e:a7:6d:56:da:c1:42:89:90:c5:fe:
a5:20:cb:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 20:26:23 2026 by rpki-client