
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89089cbd-0f7a-444f-95e7-38535bb2fc45/9ecb2996-7f58-31dd-9561-7c0f6374da48.roa
File: 9ecb2996-7f58-31dd-9561-7c0f6374da48.roa (raw, json)
Hash identifier: MiiZNu6aTQAAeu8dpjPGQGkUlPlKfxqey5QZlmAebE0=
Subject key identifier: 1D:84:F2:2D:AE:22:29:69:C8:A9:67:9D:7B:90:16:64:16:99:2E:6F
Certificate issuer: /CN=89089cbd-0f7a-444f-95e7-38535bb2fc45
Certificate serial: 010D0C9F4328584F07D7751900DE7E6AF4269480
Authority key identifier: 38:2A:5A:14:16:40:82:F8:CA:90:33:DD:00:00:78:7D:21:E0:F1:68
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89089cbd-0f7a-444f-95e7-38535bb2fc45.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89089cbd-0f7a-444f-95e7-38535bb2fc45/9ecb2996-7f58-31dd-9561-7c0f6374da48.roa
Signing time: Tue 01 Sep 2026 13:00:12 +0000
ROA not before: Tue 01 Sep 2026 13:00:12 +0000
ROA not after: Mon 30 Nov 2026 14:00:12 +0000
asID: 214483
IP address blocks: 23.147.36.0/24 maxlen: 24
2602:f524::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89089cbd-0f7a-444f-95e7-38535bb2fc45/89089cbd-0f7a-444f-95e7-38535bb2fc45.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89089cbd-0f7a-444f-95e7-38535bb2fc45/89089cbd-0f7a-444f-95e7-38535bb2fc45.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89089cbd-0f7a-444f-95e7-38535bb2fc45.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 12 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:07:d7:75:19:00:de:7e:6a:f4:26:94:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89089cbd-0f7a-444f-95e7-38535bb2fc45
Validity
Not Before: Sep 1 13:00:12 2026 GMT
Not After : Nov 30 14:00:12 2026 GMT
Subject: CN=03be383b-2d35-4fd2-873b-f5641c00c39a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:34:67:3e:de:d5:0b:09:5b:42:1a:36:9c:7d:
7c:fa:11:24:f7:56:e0:9d:26:3d:90:e7:8a:f2:04:
b0:a3:bb:45:9a:4a:d4:75:10:1b:e2:89:58:89:3f:
80:f8:c3:af:40:94:36:f0:b2:d5:ee:97:53:c4:77:
e5:b4:b1:88:7c:ba:c6:16:a8:f1:d7:57:3d:32:ba:
e4:56:54:b7:51:81:47:ff:81:fa:62:3e:a2:72:0c:
8d:91:04:2d:5e:e4:f0:ce:4f:3a:10:10:89:58:1c:
c0:76:af:b5:58:c6:75:a3:1d:67:e9:3d:57:ab:8e:
ec:d7:a3:27:2a:f8:7c:ad:0f:91:01:cc:d6:25:9b:
36:58:fb:67:c5:e7:de:eb:de:00:11:c1:79:98:03:
0a:47:5a:fc:c3:44:d3:e4:04:6e:c0:a6:79:86:29:
77:15:9c:3a:89:a8:90:1e:73:17:ca:4e:80:bd:93:
ce:ee:0b:e8:e3:aa:08:01:fc:d8:0a:da:8c:a8:df:
94:4b:b4:0d:96:15:73:e1:5b:0c:13:c2:91:40:f2:
70:51:6a:40:1e:27:11:6f:ff:21:39:f1:d7:4a:b1:
88:6d:03:ab:27:f1:5c:d7:51:07:8a:36:ff:20:35:
10:76:b4:f4:83:53:9f:a7:31:8e:0b:56:a8:ae:63:
4a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:84:F2:2D:AE:22:29:69:C8:A9:67:9D:7B:90:16:64:16:99:2E:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89089cbd-0f7a-444f-95e7-38535bb2fc45/9ecb2996-7f58-31dd-9561-7c0f6374da48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89089cbd-0f7a-444f-95e7-38535bb2fc45/89089cbd-0f7a-444f-95e7-38535bb2fc45.crl
X509v3 Authority Key Identifier:
keyid:38:2A:5A:14:16:40:82:F8:CA:90:33:DD:00:00:78:7D:21:E0:F1:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89089cbd-0f7a-444f-95e7-38535bb2fc45.cer
sbgp-ipAddrBlock: critical
IPv4:
23.147.36.0/24
IPv6:
2602:f524::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:7b:76:69:dc:f5:3a:92:cc:53:74:25:c1:21:dc:5a:b5:c5:
a3:8d:d0:c4:98:64:48:73:31:b6:97:a6:32:00:c6:e5:88:37:
9c:05:b0:c6:55:24:30:34:68:b7:cc:d3:f4:c4:7a:c8:86:bf:
72:27:d4:76:35:c2:dc:80:28:29:fe:eb:19:08:a8:86:10:d7:
f6:6b:58:39:ce:7e:a3:10:b9:ba:11:c2:ad:8f:d0:e6:3b:15:
6c:96:60:67:e0:d8:21:8c:37:60:a9:dd:6c:7b:75:17:c0:e5:
37:48:a7:94:f8:e0:dc:78:ac:48:22:b0:9b:a8:ee:35:6d:69:
dc:95:d0:e8:10:7b:9e:6c:ca:d8:6e:ae:c9:39:59:fb:db:74:
4a:d0:e2:ab:4b:ea:cf:ea:4f:f9:30:1b:df:1d:89:89:ce:3f:
01:fc:05:39:ff:5e:e1:df:a8:35:4c:90:1e:16:2b:ab:50:c4:
ea:b2:f8:42:0d:c2:38:f7:83:e9:b1:13:a2:2f:a1:33:1b:29:
9d:d9:9a:45:20:60:52:6a:26:40:01:fe:28:4b:cc:93:77:8a:
20:a4:ac:6f:b9:94:91:2f:6a:85:d5:31:71:d0:fb:1e:6a:ff:
16:bb:cb:60:9c:79:25:05:d2:48:0d:6e:d3:d2:5c:0c:d1:16:
99:29:3c:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 03:31:55 2026 by rpki-client