
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/3a603485-8119-3bb4-9449-4eb447f559ba.roa
File: 3a603485-8119-3bb4-9449-4eb447f559ba.roa (raw, json)
Hash identifier: /E5fArUnzYazuE35ioP+tq30QDVZJvBuAH13C/r0Wp4=
Subject key identifier: 15:0E:09:60:2B:6A:A2:2A:BE:9B:B0:ED:A7:CC:9F:09:9E:B0:AD:30
Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Certificate serial: 010D0C9F4328584ED9C75C8EDCFF17C4FCC93C80
Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/3a603485-8119-3bb4-9449-4eb447f559ba.roa
Signing time: Sun 16 Aug 2026 01:00:14 +0000
ROA not before: Sun 16 Aug 2026 01:00:14 +0000
ROA not after: Sat 14 Nov 2026 02:00:14 +0000
asID: 59253
IP address blocks: 23.19.197.0/24 maxlen: 24
2607:f5b5:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 29 Aug 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:d9:c7:5c:8e:dc:ff:17:c4:fc:c9:3c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d
Validity
Not Before: Aug 16 01:00:14 2026 GMT
Not After : Nov 14 02:00:14 2026 GMT
Subject: CN=3a65d0f2-9260-4e1b-9e7a-c0260980367e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:8e:04:73:f2:cc:0b:f7:c4:cb:b1:d0:38:2d:
19:99:5b:da:21:28:42:9e:fb:01:cb:09:0a:49:c5:
8d:2d:0d:34:fa:04:c6:06:6d:03:d5:69:29:a4:0d:
24:9c:19:7e:9c:c6:66:ff:50:5a:36:8d:77:31:e6:
5c:bb:e3:e2:2c:24:dd:d5:cc:fc:e7:d8:f9:1f:96:
86:ca:e6:02:9b:91:be:d8:d6:de:38:6b:27:ef:8b:
7e:9b:29:20:a4:ce:2c:9e:08:26:48:dd:ca:37:ca:
ee:54:6f:ef:29:79:39:13:33:88:0e:fb:50:a3:07:
6f:11:af:70:f0:d5:a6:12:b5:8b:03:57:f4:fd:ac:
79:45:89:c2:f3:a1:12:8f:2d:fa:a6:07:f7:59:b9:
0c:fa:cb:9f:24:83:d8:34:f1:a5:87:a6:61:15:44:
75:ba:0e:8c:31:0e:0f:f1:9e:81:90:9f:0e:54:ec:
38:68:e0:f9:05:80:4f:ba:90:64:14:b5:d1:94:41:
a2:6b:b6:40:a4:ad:62:9b:94:13:a6:8b:33:0d:26:
9d:1d:6a:eb:5c:bd:02:d0:2b:8b:2f:f8:a2:92:29:
2c:76:b6:39:23:be:bf:e1:51:1b:4a:90:1a:1d:34:
29:2b:e8:15:31:0e:70:28:c3:e7:31:cb:57:64:fa:
f2:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:0E:09:60:2B:6A:A2:2A:BE:9B:B0:ED:A7:CC:9F:09:9E:B0:AD:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/3a603485-8119-3bb4-9449-4eb447f559ba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl
X509v3 Authority Key Identifier:
keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer
sbgp-ipAddrBlock: critical
IPv4:
23.19.197.0/24
IPv6:
2607:f5b5:1::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:68:0d:95:d9:ec:77:4e:2f:42:9d:44:f4:a3:89:c3:24:4e:
24:07:6b:0a:c7:c0:cc:30:71:c3:04:5c:a4:5f:dd:f7:b1:f9:
22:0e:1e:2f:a0:6a:71:e4:4a:5c:2c:37:22:f7:dd:30:fb:f4:
9f:0e:7a:2b:be:05:b2:2f:48:7d:39:be:9d:45:79:7d:96:ab:
5f:b0:76:72:b7:b2:e6:d1:80:47:13:df:01:0f:6d:5a:01:79:
11:61:23:84:52:a8:95:24:13:b4:42:ff:ff:c3:17:06:c0:a5:
14:c6:63:6c:d5:5c:28:64:9a:dc:8f:7b:45:07:8a:01:e1:34:
ca:fa:ca:b4:88:24:83:1e:e8:39:30:cb:14:ae:e4:c8:77:c1:
bc:26:6e:66:ad:db:65:53:44:87:b2:11:2d:8e:60:0b:65:47:
ba:72:ad:f7:0d:98:0e:db:ab:23:64:f0:da:24:b3:2f:9a:66:
ad:e3:fa:20:f1:6b:81:24:f7:96:d1:6c:d3:1c:99:de:6a:e7:
b1:23:89:6b:d8:88:9e:6e:d4:34:df:36:4c:00:1f:87:c9:df:
71:3a:be:0a:9c:ae:7e:02:c1:fd:6a:81:16:54:1b:01:3f:dd:
dc:61:9f:0a:7d:6a:1f:69:cc:18:12:fc:38:96:d2:f0:8d:94:
e9:d6:66:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 18:23:55 2026 by rpki-client