
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/391a6c01-da6c-449a-9b50-ba54fb84039a/f758b831-c5e5-3e93-a5fe-7b5393bb9d93.roa
File: f758b831-c5e5-3e93-a5fe-7b5393bb9d93.roa (raw, json)
Hash identifier: Xvrkq40ntkmG12yKbIOJXkqDULCgEpvoGuObaBIi+OM=
Subject key identifier: 35:96:F9:FE:18:D1:DC:38:F8:63:D1:BD:EE:52:6D:56:13:F2:B2:FE
Certificate issuer: /CN=391a6c01-da6c-449a-9b50-ba54fb84039a
Certificate serial: 010D0C9F4328584DD0905E025B723A96DB5353C0
Authority key identifier: D3:63:8B:CF:99:D0:7E:60:81:29:4F:D1:01:8B:61:6B:82:6E:60:78
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/391a6c01-da6c-449a-9b50-ba54fb84039a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/391a6c01-da6c-449a-9b50-ba54fb84039a/f758b831-c5e5-3e93-a5fe-7b5393bb9d93.roa
Signing time: Wed 13 May 2026 01:00:24 +0000
ROA not before: Wed 13 May 2026 01:00:24 +0000
ROA not after: Tue 11 Aug 2026 01:00:24 +0000
asID: 209242
IP address blocks: 23.145.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/391a6c01-da6c-449a-9b50-ba54fb84039a/391a6c01-da6c-449a-9b50-ba54fb84039a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/391a6c01-da6c-449a-9b50-ba54fb84039a/391a6c01-da6c-449a-9b50-ba54fb84039a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/391a6c01-da6c-449a-9b50-ba54fb84039a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 18 May 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:d0:90:5e:02:5b:72:3a:96:db:53:53:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=391a6c01-da6c-449a-9b50-ba54fb84039a
Validity
Not Before: May 13 01:00:24 2026 GMT
Not After : Aug 11 01:00:24 2026 GMT
Subject: CN=1717b75b-5c5c-4b19-8a6e-8c265de2ecc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b8:92:dd:bc:ab:f4:58:19:aa:74:08:bc:5c:
83:a6:b9:54:cc:15:5c:03:7f:8a:3f:fa:f8:00:cd:
8e:89:63:3d:8d:77:fe:24:3d:87:60:14:48:e3:da:
3c:14:8e:57:b7:6f:50:a9:8d:44:80:6a:25:26:87:
47:8e:bc:18:e2:1c:6e:6b:97:65:22:9b:89:fb:3d:
9a:7d:64:45:fc:0d:a2:ad:00:c1:1c:17:6c:36:0a:
77:57:ca:38:9e:d2:d0:67:cb:f6:53:8c:47:f6:55:
f5:ca:0b:82:e0:ea:b2:bc:78:43:f3:49:1b:04:e8:
d3:2d:1c:06:cf:40:07:ae:e9:38:19:99:6f:d7:41:
ae:5f:dc:d1:57:ed:96:5c:b2:5f:3e:de:ab:b4:d5:
6d:9a:d6:58:a9:8a:fe:04:e7:d9:34:d0:0a:72:27:
18:c4:1a:ba:41:5b:c2:44:93:13:45:8e:99:de:c1:
00:23:49:68:cf:19:67:ce:0e:cb:07:1f:f3:3c:dc:
ab:0d:f4:aa:2f:ec:50:dd:6f:be:7e:5d:e9:49:48:
26:eb:7b:35:04:75:36:2a:64:5b:d1:91:a2:f2:10:
76:a0:17:dd:c1:3c:c0:21:66:c5:03:d4:0a:7a:f3:
2c:c5:55:4e:2f:e7:cf:8b:1f:b3:61:8d:aa:a8:81:
83:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:96:F9:FE:18:D1:DC:38:F8:63:D1:BD:EE:52:6D:56:13:F2:B2:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/391a6c01-da6c-449a-9b50-ba54fb84039a/f758b831-c5e5-3e93-a5fe-7b5393bb9d93.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/391a6c01-da6c-449a-9b50-ba54fb84039a/391a6c01-da6c-449a-9b50-ba54fb84039a.crl
X509v3 Authority Key Identifier:
keyid:D3:63:8B:CF:99:D0:7E:60:81:29:4F:D1:01:8B:61:6B:82:6E:60:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/391a6c01-da6c-449a-9b50-ba54fb84039a.cer
sbgp-ipAddrBlock: critical
IPv4:
23.145.232.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:f4:85:05:35:53:f0:d6:07:af:35:a6:75:c7:26:f7:6f:3a:
a2:76:b1:cb:43:8e:44:d0:2c:aa:fa:ea:12:ee:f4:64:66:d2:
3e:95:c6:7b:1e:3f:8c:79:00:36:7c:7f:ef:0d:45:2d:bf:9d:
b5:f6:59:eb:9a:64:8b:bc:dc:41:d6:29:af:92:c6:40:e5:3a:
23:91:51:c6:7f:21:ea:be:eb:8d:ca:83:12:5e:dd:fc:8c:b1:
1c:f5:47:0c:96:8e:14:a7:4f:e8:97:c4:07:4b:a9:3d:be:27:
8f:8e:69:2b:bc:93:e0:7a:d6:d9:cc:ce:77:eb:5b:a4:f2:a8:
8f:7e:8e:70:92:b7:46:fb:1e:a6:63:25:42:8d:1a:68:d4:83:
e1:58:0c:3e:91:29:7e:96:c7:4b:e8:d0:ad:54:68:7c:65:9e:
3c:c3:b0:80:f7:62:cd:be:95:5e:06:d2:54:81:f4:5b:a0:39:
36:9b:d9:d6:75:4a:2f:de:35:9f:76:aa:d9:ea:0a:5d:e6:08:
d4:38:9c:b5:ba:57:af:3d:0a:78:78:18:54:45:c3:06:a8:3d:
89:b1:76:5c:84:25:dd:79:28:c8:55:3b:32:6d:79:4d:65:03:
2d:53:75:97:67:10:6b:25:9d:3e:61:ba:90:bb:d8:2a:b5:08:
ad:f0:60:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 00:30:04 2026 by rpki-client