
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/435ffa56-10f6-3af6-b2ac-99498771dcdb.roa
File: 435ffa56-10f6-3af6-b2ac-99498771dcdb.roa (raw, json)
Hash identifier: rc2ntJNozdx86+YmrYz5nidWC0f2nRvDqpuSuQHc9ik=
Subject key identifier: 20:86:37:C2:C7:58:D6:F4:90:46:B4:65:64:D2:53:A3:D2:3A:DA:44
Certificate issuer: /CN=f8e7a246-465c-42e8-8be1-af167b20b04d
Certificate serial: 010D0C9F4328584F94D336E65CC5729B063DA100
Authority key identifier: 47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/435ffa56-10f6-3af6-b2ac-99498771dcdb.roa
Signing time: Thu 22 Oct 2026 01:00:12 +0000
ROA not before: Thu 22 Oct 2026 01:00:12 +0000
ROA not after: Wed 20 Jan 2027 02:00:12 +0000
asID: 265753
IP address blocks: 23.227.84.0/22 maxlen: 24
107.166.0.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 30 Oct 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:94:d3:36:e6:5c:c5:72:9b:06:3d:a1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e7a246-465c-42e8-8be1-af167b20b04d
Validity
Not Before: Oct 22 01:00:12 2026 GMT
Not After : Jan 20 02:00:12 2027 GMT
Subject: CN=7171f6e6-927d-434b-afe0-7c2c3dd884e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:00:3f:57:43:87:c5:e4:85:94:78:4f:8a:8f:
18:36:78:06:e3:2d:1c:f0:3e:53:17:6c:12:7e:96:
6e:20:e4:ef:1f:a8:0e:42:5b:3c:83:65:df:99:3b:
53:32:fc:ab:5a:7c:f7:ef:de:4c:23:27:39:51:3a:
fd:4a:d9:a0:b3:8a:e0:54:0e:6b:54:e5:47:95:8b:
12:b8:ee:85:de:6f:ef:ae:a5:09:51:82:c7:93:e4:
0e:87:8b:b7:65:0a:05:67:96:e2:8e:8d:69:31:f9:
00:21:30:0c:27:16:5e:88:30:b3:47:75:83:58:4d:
23:d2:23:66:0a:80:02:e9:e2:e8:75:64:9c:22:55:
27:0a:3d:8f:54:4d:ee:c4:97:c3:87:9b:25:f7:dd:
33:55:48:52:0f:9f:4a:bb:22:08:3f:d0:fe:d6:cd:
93:f8:f6:47:60:6e:42:dc:cf:ad:37:cf:78:a3:c9:
77:ed:22:ef:df:07:d3:ab:5d:40:b7:a7:21:2d:93:
e3:04:2c:ce:88:b1:d3:b2:6d:04:53:86:17:50:1a:
c0:76:ce:e0:a2:a4:f1:62:04:de:e3:b2:fb:65:bb:
7a:5f:d0:6a:88:e8:59:76:57:5c:a1:4a:c9:e9:df:
6d:57:f5:58:29:88:77:ac:ce:22:4e:c0:f1:cf:3c:
39:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:86:37:C2:C7:58:D6:F4:90:46:B4:65:64:D2:53:A3:D2:3A:DA:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/435ffa56-10f6-3af6-b2ac-99498771dcdb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl
X509v3 Authority Key Identifier:
keyid:47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
sbgp-ipAddrBlock: critical
IPv4:
23.227.84.0/22
107.166.0.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ac:4b:44:a4:af:51:c7:4a:ab:eb:2b:99:0c:c8:be:b1:12:9f:
e4:55:64:0e:6e:e4:65:26:26:16:50:de:2d:6a:ab:69:d0:78:
00:77:ca:53:0a:e3:c7:30:d1:8b:18:73:4f:34:b7:b1:b3:91:
ff:36:3e:b5:de:b7:da:9a:96:b0:8a:93:f9:ba:be:b1:e7:8d:
93:f5:91:dc:1c:0a:a4:9e:cf:1f:f9:86:2d:aa:ba:5d:9e:57:
08:fc:95:80:6b:22:ae:8a:cf:55:38:b5:24:22:db:2f:9f:f7:
a0:95:84:01:af:2d:e5:a0:bb:63:ad:5c:ff:2e:d4:65:ba:09:
a1:37:aa:de:1a:4c:74:ac:20:dd:97:80:dd:38:88:b7:57:c9:
79:f6:67:f4:59:7e:6b:05:6f:ae:e4:36:2f:48:df:8d:10:aa:
c9:8c:f4:93:1c:b9:f9:1b:e2:44:4b:40:5f:1e:cf:af:0e:12:
b6:ad:8b:3a:f4:b4:f6:02:f3:b4:58:eb:4a:55:12:a0:44:b0:
25:c9:9e:a6:7e:9c:3c:b4:f1:c9:1e:64:f1:05:7e:78:63:77:
62:5a:cf:10:a3:2e:65:73:6b:14:18:c9:f8:de:0c:6a:13:97:
90:74:d5:13:f4:86:df:bf:b4:01:cc:d2:ca:d0:e3:90:65:bb:
32:02:a1:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:20:51 2026 by rpki-client