
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/dc7ed13e-be40-30d8-b0c7-71d789003fcd.roa
File: dc7ed13e-be40-30d8-b0c7-71d789003fcd.roa (raw, json)
Hash identifier: pag6XuXlX75HQLkzeiR0aShEzWuV0N4Xhg2qM0u1F0Q=
Subject key identifier: 55:85:9D:E1:D1:5D:00:9C:40:10:83:56:37:5E:69:37:28:A8:E9:7A
Certificate issuer: /CN=f8e7a246-465c-42e8-8be1-af167b20b04d
Certificate serial: 010D0C9F4328584F94D336CE81C014EE7164B200
Authority key identifier: 47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/dc7ed13e-be40-30d8-b0c7-71d789003fcd.roa
Signing time: Thu 22 Oct 2026 01:00:12 +0000
ROA not before: Thu 22 Oct 2026 01:00:12 +0000
ROA not after: Wed 20 Jan 2027 02:00:12 +0000
asID: 3257
IP address blocks: 23.234.128.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 26 Oct 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:94:d3:36:ce:81:c0:14:ee:71:64:b2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e7a246-465c-42e8-8be1-af167b20b04d
Validity
Not Before: Oct 22 01:00:12 2026 GMT
Not After : Jan 20 02:00:12 2027 GMT
Subject: CN=554fc0a9-1128-49bd-aea2-dea7a3678792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:82:27:84:be:50:46:d6:69:14:c6:9b:8e:5f:
0a:fd:68:7c:53:03:b6:61:6f:7e:ef:1a:ff:63:aa:
e1:50:4a:a2:f4:55:12:8f:66:7a:07:e8:d3:81:04:
a7:93:7a:94:15:45:52:aa:5a:08:da:00:b8:c5:58:
09:23:9f:7a:ce:ea:42:a3:61:fc:e3:6f:48:7b:96:
b2:db:ab:a5:b0:8d:8f:ea:94:79:b5:54:91:c8:52:
c9:d7:9c:c5:22:22:ba:78:33:f5:b2:d6:14:f3:cb:
7c:14:53:c0:63:84:43:1f:48:ae:35:72:e6:09:c0:
c7:7c:1c:36:14:64:73:16:ee:ed:c2:c1:53:49:36:
ef:74:67:23:52:4a:08:f8:48:da:96:f7:b6:ba:ff:
23:cb:5b:74:b1:f7:73:4a:73:3c:21:ea:ca:86:84:
ad:38:db:8b:97:91:c2:f2:1e:3e:26:d0:72:51:c9:
b0:44:bf:45:75:89:64:59:9b:3d:dd:90:38:23:78:
aa:46:5d:8e:11:51:93:d1:cd:d4:b4:f3:aa:22:5e:
5f:af:b8:a8:63:e6:55:a2:b2:53:bc:29:74:62:68:
ed:53:36:9c:a4:9d:b0:19:e9:94:de:09:f4:e6:cd:
fa:27:a0:fe:39:8a:6f:e9:17:14:d8:ad:de:c9:de:
31:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:85:9D:E1:D1:5D:00:9C:40:10:83:56:37:5E:69:37:28:A8:E9:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/dc7ed13e-be40-30d8-b0c7-71d789003fcd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl
X509v3 Authority Key Identifier:
keyid:47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer
sbgp-ipAddrBlock: critical
IPv4:
23.234.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:6d:67:29:d9:14:43:a5:03:db:b5:04:21:82:9f:e1:9a:94:
c3:f5:90:1d:b2:44:a7:5d:a0:37:5c:51:4e:a4:f3:cc:03:9f:
2e:21:e0:4c:a9:cd:d6:ea:3b:da:63:84:dc:7c:ea:e3:9c:56:
bd:93:e3:13:b9:65:8c:27:d6:c2:65:29:7c:bb:f0:36:f6:bc:
3c:37:22:61:23:e8:f6:ad:43:65:d7:e9:9f:6e:b5:d0:e7:c7:
1a:d2:8d:9d:2b:7c:32:eb:9c:25:b4:f9:d8:e1:5d:1a:83:71:
4c:2e:f7:24:48:3b:04:a1:79:2d:96:4b:39:2e:7f:84:d2:07:
c9:34:a2:0f:a4:ee:7d:df:75:95:11:74:be:d8:fb:f3:b1:e5:
af:75:c3:3b:2c:11:f5:f5:89:30:b9:bf:68:b5:88:f3:ec:d6:
af:9e:be:42:cb:f8:dd:58:8e:7b:94:cd:fa:c6:04:28:58:ac:
a2:bb:26:9f:38:1a:c0:e0:f4:ab:a8:1f:75:c1:2b:fd:5b:67:
2a:57:c0:6f:b5:0f:9f:43:d4:3f:df:8a:25:84:0a:df:9a:ec:
c5:5e:85:02:33:cb:be:28:26:87:5e:c2:34:ff:da:2a:ea:d0:
89:0f:24:85:ab:f6:62:5c:92:d3:02:a7:fe:73:1a:ac:41:78:
36:d3:0f:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 23:59:37 2026 by rpki-client