
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/40b54338-aa55-3501-b2e0-f0377f1458e5.roa
File: 40b54338-aa55-3501-b2e0-f0377f1458e5.roa (raw, json)
Hash identifier: aTOOTWK+iuKaypIEBewojdqJSdtI1oT90N4CoeKFlPE=
Subject key identifier: 50:B2:10:1C:56:30:59:DA:5F:CC:53:C5:F7:05:57:9F:4C:77:04:ED
Certificate issuer: /CN=9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d
Certificate serial: 010D0C9F4328584EA7974E631FC505369C42A190
Authority key identifier: 66:BC:10:D6:49:84:7E:09:CC:D1:50:B5:94:E6:1F:5B:60:FC:8B:C5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/40b54338-aa55-3501-b2e0-f0377f1458e5.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 397325
IP address blocks: 23.29.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 22 Aug 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:97:4e:63:1f:c5:05:36:9c:42:a1:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=8ab80704-fbe7-469e-bb04-6c1940b3d754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d8:f2:5d:a3:fd:09:e8:a5:5f:a3:5c:b1:30:
cc:82:ba:39:e4:00:97:ad:42:b1:38:41:7d:72:0c:
b8:c1:9a:e3:6e:4c:bc:b8:e6:f8:ed:0d:f0:60:b9:
ac:eb:15:d2:9f:1f:83:e8:1b:23:95:20:68:86:77:
be:0e:74:b9:83:a6:fc:33:db:2a:73:b4:24:b1:57:
07:f4:89:d5:1d:7c:cc:ab:59:3d:fb:8c:6d:27:af:
cf:3d:91:66:1d:d8:b2:dd:fe:49:ad:82:3a:16:37:
d7:68:f4:24:3f:07:73:cb:33:50:af:6c:58:48:16:
47:76:6a:2d:0a:37:63:16:3f:93:da:8c:a2:47:62:
3f:3a:30:db:58:6e:f1:34:88:3e:22:e7:0a:38:c5:
34:b8:1d:8c:62:4f:74:78:52:db:bb:59:5d:78:e4:
0c:cc:69:75:dd:e9:bd:fe:63:a4:2a:26:89:aa:78:
6d:f0:1b:23:60:c7:b5:39:aa:b1:a3:ea:84:56:ed:
3b:ab:e2:d4:28:f5:1c:f9:ce:5e:1d:73:cb:cb:5a:
62:14:32:29:3b:c0:de:e4:08:cf:1c:73:3a:c8:6d:
af:bc:f2:ab:08:3b:e2:f4:62:eb:9f:26:18:06:42:
c9:03:3c:01:50:ce:1c:c4:c5:62:25:4f:60:c5:88:
6e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:B2:10:1C:56:30:59:DA:5F:CC:53:C5:F7:05:57:9F:4C:77:04:ED
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/40b54338-aa55-3501-b2e0-f0377f1458e5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.crl
X509v3 Authority Key Identifier:
keyid:66:BC:10:D6:49:84:7E:09:CC:D1:50:B5:94:E6:1F:5B:60:FC:8B:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9c3f0c3e-4e4f-44d4-abe8-c6195f6de40d.cer
sbgp-ipAddrBlock: critical
IPv4:
23.29.59.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:90:6b:04:19:aa:f1:28:00:78:f8:48:33:a2:cb:26:ce:26:
22:fc:db:a7:20:c6:1f:47:e9:15:43:48:33:74:57:f2:c4:b1:
58:ac:10:cb:f3:9c:55:c0:e2:ba:61:51:3a:b7:f9:36:f9:e7:
49:a5:0d:56:b3:0e:b5:3d:71:c2:23:d2:c2:f5:1c:e2:82:03:
a4:92:03:c5:41:1e:bc:28:13:cd:b0:16:ce:d3:bb:b1:e0:93:
86:fc:2d:b2:04:44:63:d1:a2:51:14:42:c7:6f:e7:03:7a:87:
39:4f:52:56:79:b4:1a:ff:31:9e:ad:c2:37:f6:01:d9:82:51:
14:1c:f5:92:8b:18:c4:e7:f9:cc:a3:e4:1e:43:74:c9:b0:cc:
f4:08:73:14:a5:80:0c:b4:53:dc:70:11:91:ad:f2:e2:19:58:
90:14:6b:39:20:5f:7b:fc:e3:86:22:35:59:06:70:29:1c:6b:
a2:37:b4:6c:dd:10:90:30:17:a3:73:45:05:fd:b2:c5:24:f3:
8e:a0:10:0a:37:6b:9e:58:c4:d3:73:ed:4b:34:45:8d:43:1e:
93:52:5f:b2:a4:6e:6d:23:41:e4:1a:6d:d2:88:6d:03:68:36:
08:ee:86:a2:bd:7f:94:9d:5c:68:e5:86:0e:86:8f:05:87:8a:
48:79:6e:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:15:16 2026 by rpki-client