
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8118d48c-a256-4b28-967d-1f836718e31e/f33e2938-3175-32bb-addd-654bad44256d.roa
File: f33e2938-3175-32bb-addd-654bad44256d.roa (raw, json)
Hash identifier: gVl+A0z4eznCrsA0749e6pPdR9w3PzNno9ftNzRGtoo=
Subject key identifier: 0B:E9:96:D9:0E:FD:57:34:E3:24:DD:0A:C8:94:0C:24:0D:F6:61:9B
Certificate issuer: /CN=8118d48c-a256-4b28-967d-1f836718e31e
Certificate serial: 010D0C9F4328584EDC91E23A2E0C0FAC6724A580
Authority key identifier: D0:2C:5E:2F:E6:74:48:0B:D6:E7:E5:53:DF:0E:4E:70:5E:8E:30:F2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8118d48c-a256-4b28-967d-1f836718e31e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8118d48c-a256-4b28-967d-1f836718e31e/f33e2938-3175-32bb-addd-654bad44256d.roa
Signing time: Mon 17 Aug 2026 01:00:12 +0000
ROA not before: Mon 17 Aug 2026 01:00:12 +0000
ROA not after: Sun 15 Nov 2026 02:00:12 +0000
asID: 400910
IP address blocks: 23.138.212.0/24 maxlen: 24
2604:fa0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8118d48c-a256-4b28-967d-1f836718e31e/8118d48c-a256-4b28-967d-1f836718e31e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8118d48c-a256-4b28-967d-1f836718e31e/8118d48c-a256-4b28-967d-1f836718e31e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8118d48c-a256-4b28-967d-1f836718e31e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 14 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:dc:91:e2:3a:2e:0c:0f:ac:67:24:a5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8118d48c-a256-4b28-967d-1f836718e31e
Validity
Not Before: Aug 17 01:00:12 2026 GMT
Not After : Nov 15 02:00:12 2026 GMT
Subject: CN=d5499840-3af6-49ea-8563-aa456a5a664a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:44:ef:c3:d8:d3:e3:df:1f:f0:1a:8a:80:b3:
e9:06:ca:b8:de:81:84:dc:63:4f:27:ab:99:77:b1:
18:ca:72:7b:1b:dd:7a:19:43:ec:55:47:63:a8:28:
22:04:a7:e6:da:15:f1:16:0c:f2:f5:54:d7:7b:e9:
eb:d0:ef:ba:0a:17:78:8b:4e:dc:e2:ee:62:85:cb:
43:dd:b3:cc:3a:fb:1a:43:d2:4c:46:bb:55:79:41:
2c:00:46:ec:c1:19:e7:f6:d8:50:62:39:cd:87:c0:
67:2f:f7:51:1b:e7:80:15:7a:59:8d:eb:bf:0f:dc:
20:76:d8:3e:21:cc:9c:44:cc:68:8b:df:16:46:40:
5c:e5:ac:c7:81:ae:c8:ea:87:78:5d:8b:03:15:a9:
20:f7:04:01:b3:fc:45:29:55:b7:09:72:3f:d3:75:
f5:40:8f:66:46:70:ec:2d:10:26:5f:e1:44:3d:c4:
ea:9d:c5:e6:5c:6f:95:87:47:30:6c:cc:24:e0:b8:
a6:69:85:f8:2b:07:d7:e8:6f:c5:6f:21:be:1d:5a:
f4:2a:fb:ad:a3:6e:73:50:4a:ac:ae:3e:06:d6:8a:
3f:59:7d:4e:54:68:35:7a:b6:86:1b:d3:b5:4a:b6:
3d:fb:ae:ec:d3:15:82:cb:6e:85:5c:ae:e0:2d:19:
7f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:E9:96:D9:0E:FD:57:34:E3:24:DD:0A:C8:94:0C:24:0D:F6:61:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8118d48c-a256-4b28-967d-1f836718e31e/f33e2938-3175-32bb-addd-654bad44256d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8118d48c-a256-4b28-967d-1f836718e31e/8118d48c-a256-4b28-967d-1f836718e31e.crl
X509v3 Authority Key Identifier:
keyid:D0:2C:5E:2F:E6:74:48:0B:D6:E7:E5:53:DF:0E:4E:70:5E:8E:30:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8118d48c-a256-4b28-967d-1f836718e31e.cer
sbgp-ipAddrBlock: critical
IPv4:
23.138.212.0/24
IPv6:
2604:fa0::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:87:27:12:b9:9a:48:b8:c6:54:7b:31:1a:db:8a:72:83:3a:
2b:24:bc:73:95:a3:99:61:13:cc:62:26:7f:27:6e:3d:6c:45:
49:08:b0:9c:08:f6:85:c1:94:44:a8:88:3a:40:e1:68:1f:8b:
e9:c1:ae:50:b5:c4:49:e9:63:7d:c0:dd:50:8c:1a:25:53:b6:
d0:c0:24:ae:45:13:d1:49:cd:f6:67:7c:ec:f8:21:23:dd:d8:
7a:4f:19:1d:25:dd:bf:45:ff:3b:5d:ff:0e:af:24:41:57:2d:
5f:b6:b6:24:1d:d3:92:d1:35:76:57:cd:42:ef:96:aa:b0:c4:
77:fd:bb:bd:f8:f6:85:92:4f:be:99:e4:e7:8e:ce:ce:8f:5f:
82:c4:77:e5:40:41:a0:67:78:0e:7f:90:f5:16:09:56:72:1b:
0e:e6:ad:58:56:7f:d3:8a:20:b3:63:e3:8f:d6:4b:86:79:a7:
15:ed:4d:67:47:c6:ce:8e:eb:10:53:48:0b:e7:56:4a:c2:ed:
11:65:67:46:34:dd:5c:d9:0d:3a:ea:4b:1d:37:ba:cb:3f:42:
ae:80:65:e1:9d:11:77:7f:59:cf:9d:6f:35:93:64:49:0d:d8:
a8:5d:b8:0a:38:23:f7:d9:5d:8b:f3:b9:5a:3b:f7:0c:b0:f2:
b6:e5:f2:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 11:03:28 2026 by rpki-client