
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/10c21a82-48fa-4568-908e-8e488e55c411/644325d7-4abb-3e88-bb5f-f2c2949325d2.roa
File: 644325d7-4abb-3e88-bb5f-f2c2949325d2.roa (raw, json)
Hash identifier: bhCOI2GJqjnwj9TZElSehT2AAd0XQnoPs3D0l2p74rE=
Subject key identifier: F5:D3:44:A0:FC:31:28:C1:7D:AF:FC:C4:00:42:95:79:73:8E:30:B1
Certificate issuer: /CN=10c21a82-48fa-4568-908e-8e488e55c411
Certificate serial: 010D0C9F4328584ED9C74410EA6B0B598E4034C0
Authority key identifier: 93:A5:23:1E:47:C7:B2:CC:72:77:70:39:AE:FA:C8:C6:FE:B4:80:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/10c21a82-48fa-4568-908e-8e488e55c411.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/10c21a82-48fa-4568-908e-8e488e55c411/644325d7-4abb-3e88-bb5f-f2c2949325d2.roa
Signing time: Sun 16 Aug 2026 01:00:14 +0000
ROA not before: Sun 16 Aug 2026 01:00:14 +0000
ROA not after: Sat 14 Nov 2026 02:00:14 +0000
asID: 398717
IP address blocks: 23.166.48.0/24 maxlen: 24
2605:f4c0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/10c21a82-48fa-4568-908e-8e488e55c411/10c21a82-48fa-4568-908e-8e488e55c411.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/10c21a82-48fa-4568-908e-8e488e55c411/10c21a82-48fa-4568-908e-8e488e55c411.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/10c21a82-48fa-4568-908e-8e488e55c411.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 18 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:d9:c7:44:10:ea:6b:0b:59:8e:40:34:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10c21a82-48fa-4568-908e-8e488e55c411
Validity
Not Before: Aug 16 01:00:14 2026 GMT
Not After : Nov 14 02:00:14 2026 GMT
Subject: CN=84505325-6f68-4974-a1f3-e58701f6ee2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:84:fa:89:0b:27:82:2a:cf:79:9c:13:48:69:
b2:3c:8e:68:3f:07:09:ad:04:6b:ae:59:e1:38:f6:
4b:70:44:a6:87:3e:84:5e:dd:d1:38:a4:4a:db:be:
43:e2:cf:ae:70:f8:18:e9:2e:67:67:c5:5b:e6:88:
fd:3e:45:3a:c8:5e:56:43:15:1b:fd:8a:97:54:75:
43:3b:bf:51:eb:9a:ef:ef:79:0c:fd:9b:ac:42:26:
b0:2a:a7:6f:92:0d:29:c3:4b:f1:4d:62:c5:e7:28:
9c:15:23:78:89:05:8b:f9:93:c1:55:00:99:fd:b7:
db:ab:a6:ab:55:5b:4b:70:9b:32:22:91:42:12:7d:
31:a5:15:e9:34:9f:44:fe:5e:45:0a:c6:89:fe:1b:
fb:d0:02:c7:a4:10:2f:23:a5:6c:d4:3c:51:87:a3:
f9:01:9a:04:33:59:48:42:78:0e:86:dc:3e:64:da:
71:f4:42:21:4a:be:b8:82:c6:38:d4:df:50:6b:ca:
ed:8b:cf:d2:f9:eb:6e:51:f3:53:78:6b:31:36:2f:
fe:bf:24:83:f7:95:78:2c:c0:19:b9:39:f1:98:f1:
59:9a:9c:99:06:e8:ce:58:de:f4:95:d6:c9:fe:ba:
7c:e3:7e:ad:98:82:a0:9d:72:d2:80:64:6e:c3:90:
86:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:D3:44:A0:FC:31:28:C1:7D:AF:FC:C4:00:42:95:79:73:8E:30:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/10c21a82-48fa-4568-908e-8e488e55c411/644325d7-4abb-3e88-bb5f-f2c2949325d2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/10c21a82-48fa-4568-908e-8e488e55c411/10c21a82-48fa-4568-908e-8e488e55c411.crl
X509v3 Authority Key Identifier:
keyid:93:A5:23:1E:47:C7:B2:CC:72:77:70:39:AE:FA:C8:C6:FE:B4:80:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/10c21a82-48fa-4568-908e-8e488e55c411.cer
sbgp-ipAddrBlock: critical
IPv4:
23.166.48.0/24
IPv6:
2605:f4c0::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:43:f9:f7:b7:b3:9b:62:be:66:7c:05:d5:1d:ab:fe:d8:b0:
cf:ec:bd:fb:b1:6a:8f:11:93:07:98:c2:d8:df:f7:88:ed:94:
13:8e:50:1d:96:a1:39:59:d0:02:4b:9a:40:dd:d2:f8:11:e9:
19:06:15:82:69:4c:3d:5a:4c:b1:8a:bf:66:b8:10:97:76:92:
7e:63:2b:57:b1:7b:80:f8:c4:29:50:47:6e:c8:78:e1:43:4c:
59:f5:e1:f2:82:57:e2:3e:71:3a:1b:7a:8b:1b:dc:ae:12:89:
52:15:97:bc:ff:b8:ea:72:bb:ab:d8:29:f3:83:0f:5c:d1:f2:
65:c2:40:2c:29:be:f8:71:d9:70:3d:ce:6a:35:07:46:18:17:
34:f5:e7:7f:2d:29:3d:8c:fa:21:ab:5b:3c:6d:99:10:02:15:
12:62:c1:f0:c9:b4:4b:db:58:56:3c:c8:e7:40:a6:14:13:5c:
6a:33:a8:f0:9f:37:bd:fc:0e:17:6a:45:1e:76:86:d3:0e:7d:
03:19:16:50:0b:7e:99:fe:97:a7:76:d5:a5:d6:1b:2a:e7:43:
63:ef:a2:7e:a0:87:19:d2:11:fe:bc:b5:30:9a:62:2e:5a:4c:
e0:eb:77:14:ae:62:99:bb:21:90:b0:f0:07:b4:d7:db:bd:01:
b6:d4:d1:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 16 18:57:51 2026 by rpki-client