
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/35837d68-6f27-39b3-aee2-3223f5606dc0.roa
File: 35837d68-6f27-39b3-aee2-3223f5606dc0.roa (raw, json)
Hash identifier: 1o8ErljAm/SZBT94OlVofRd1/xQp2aot1+1WqJf6stk=
Subject key identifier: 5A:2C:F9:79:CF:76:75:74:06:63:74:48:A2:42:8B:3E:9E:96:3F:63
Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial: 010D0C9F4328584F5CFD54D7F92E116F57AB9B00
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/35837d68-6f27-39b3-aee2-3223f5606dc0.roa
Signing time: Fri 02 Oct 2026 01:00:12 +0000
ROA not before: Fri 02 Oct 2026 01:00:12 +0000
ROA not after: Thu 31 Dec 2026 02:00:12 +0000
asID: 7203
IP address blocks: 23.83.152.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 16 Oct 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:5c:fd:54:d7:f9:2e:11:6f:57:ab:9b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Validity
Not Before: Oct 2 01:00:12 2026 GMT
Not After : Dec 31 02:00:12 2026 GMT
Subject: CN=187ad5a6-ce9e-4d50-8a4a-1a29fdf39610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:00:2e:47:4d:38:3a:a9:13:b6:9a:e8:b1:60:
f5:87:ad:f4:b2:2d:d3:17:3d:e6:6c:3d:7d:58:be:
9b:63:fd:20:5b:01:d7:c4:0e:ed:eb:fe:04:52:9b:
f7:49:4e:79:2f:9d:6c:a4:2f:49:b7:e8:ee:ae:fb:
1a:dc:d0:c8:96:7f:32:14:04:db:48:07:6d:bf:00:
5d:04:b3:52:c6:07:d9:b1:ff:78:6f:df:da:33:3a:
ae:d1:0e:2e:57:35:1d:b4:93:d8:08:52:e9:15:cc:
74:ce:63:f2:4c:ff:c1:51:e6:1a:5e:34:1f:48:54:
a7:49:c1:74:e2:ec:0d:52:c2:94:22:7f:1c:b7:41:
df:f3:f4:4f:d1:4e:a6:ff:1f:90:ae:8b:b2:5c:24:
a8:57:56:07:e2:ca:11:61:1e:f7:05:ba:30:b6:ab:
ad:37:3a:f1:3f:8d:63:70:43:34:8b:22:0f:87:84:
23:a3:ec:2c:5b:42:81:9d:89:75:cc:64:f8:c1:34:
f9:ee:f1:fe:a3:32:47:f0:29:8d:fc:67:75:13:ac:
1c:bd:81:7a:1e:d8:75:1b:64:68:4b:0c:a9:60:70:
c6:2b:22:01:85:8a:f3:69:1e:97:ff:e2:60:f8:01:
7d:8f:87:c7:ab:ab:35:61:6a:09:b0:18:97:64:91:
01:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:2C:F9:79:CF:76:75:74:06:63:74:48:A2:42:8B:3E:9E:96:3F:63
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/35837d68-6f27-39b3-aee2-3223f5606dc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
X509v3 Authority Key Identifier:
keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
sbgp-ipAddrBlock: critical
IPv4:
23.83.152.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bd:ae:bc:da:48:5e:53:7d:ca:59:a6:16:97:d4:5b:19:90:c7:
9c:f0:f8:56:e5:7b:48:e3:67:1b:a8:16:4d:54:6d:a4:87:28:
42:23:5b:6c:04:3d:1f:20:c8:62:79:2a:57:73:34:2c:60:e1:
da:dc:08:48:4b:df:2b:42:ad:21:81:4d:cd:7e:10:c8:be:29:
61:28:4a:96:07:5f:81:57:d5:08:0a:fd:83:cd:25:47:9d:5e:
45:ea:c3:6d:1f:17:27:8a:a2:78:72:10:f2:19:c4:31:f5:a1:
77:49:be:37:ec:8f:26:d1:90:76:a3:0c:53:7f:4b:42:9a:4b:
88:da:00:06:92:2d:7f:1c:94:e8:60:c5:26:19:1d:92:af:0f:
7a:dc:48:fc:b9:5b:fc:9c:16:b0:52:88:d6:d3:2d:c9:ee:52:
a5:e9:6d:68:84:92:1f:f0:ed:65:11:9f:76:39:56:c5:70:18:
0e:82:27:9e:d3:7f:b6:f0:3d:72:8d:45:df:a6:a6:87:94:41:
0b:53:93:06:91:c4:f8:bb:1c:89:b1:cf:a6:26:ad:2c:d4:d2:
70:0b:23:4a:b6:63:26:33:cb:80:50:02:a5:dc:df:e3:55:95:
3b:8d:69:63:05:cf:1c:1c:d0:21:07:7e:3f:ea:2d:dc:7a:7b:
15:3e:3d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 03:11:44 2026 by rpki-client