
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb223f7f-f28b-4df4-b6da-cab48558c2cd/0643f9f7-9d02-32fe-847d-014edce56609.roa
File: 0643f9f7-9d02-32fe-847d-014edce56609.roa (raw, json)
Hash identifier: ttB/3w9vgh/Q34vhPacBJ4F/4HuMPJAuvVWMGt/5sxQ=
Subject key identifier: 5C:63:F8:60:AF:8E:98:1C:FE:F2:9E:44:84:62:9E:15:AD:EB:98:2E
Certificate issuer: /CN=bb223f7f-f28b-4df4-b6da-cab48558c2cd
Certificate serial: 010D0C9F4328584EC20C713638DA7ACB5A6F7D00
Authority key identifier: 1C:B4:00:9E:47:2B:68:26:87:FE:C2:5E:72:62:46:1F:5D:22:E4:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb223f7f-f28b-4df4-b6da-cab48558c2cd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb223f7f-f28b-4df4-b6da-cab48558c2cd/0643f9f7-9d02-32fe-847d-014edce56609.roa
Signing time: Fri 07 Aug 2026 13:00:11 +0000
ROA not before: Fri 07 Aug 2026 13:00:11 +0000
ROA not after: Thu 05 Nov 2026 14:00:11 +0000
asID: 1030
IP address blocks: 23.166.8.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb223f7f-f28b-4df4-b6da-cab48558c2cd/bb223f7f-f28b-4df4-b6da-cab48558c2cd.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb223f7f-f28b-4df4-b6da-cab48558c2cd/bb223f7f-f28b-4df4-b6da-cab48558c2cd.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb223f7f-f28b-4df4-b6da-cab48558c2cd.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 22 Aug 2026 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:c2:0c:71:36:38:da:7a:cb:5a:6f:7d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb223f7f-f28b-4df4-b6da-cab48558c2cd
Validity
Not Before: Aug 7 13:00:11 2026 GMT
Not After : Nov 5 14:00:11 2026 GMT
Subject: CN=d03e4b4f-c1b1-44d6-92d4-ababd6ddfb7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:14:e7:ab:3a:58:18:1d:4b:e7:0b:c3:a8:16:
5f:1c:4b:81:06:55:0d:ac:67:ef:5c:2b:a6:f6:1d:
5b:1e:9c:1b:b8:37:d7:3d:7f:61:0f:a1:37:33:79:
d3:86:0f:8f:b7:7b:c4:3e:c7:5a:ab:d0:d9:85:e9:
bf:c2:93:ff:cf:90:e8:53:69:46:c8:95:bc:95:48:
e5:d5:63:2d:d4:56:30:fe:ff:d9:97:2f:c5:ab:26:
2a:36:8c:78:6f:d5:a5:7b:b2:6f:2c:dc:63:3d:af:
7f:7a:a6:65:bd:f7:81:81:0e:ca:01:7c:01:05:cd:
84:27:e1:df:b1:34:9d:91:b0:1c:c0:6c:2f:93:51:
b8:62:36:14:24:21:c9:db:f7:a1:61:3b:ec:e4:0b:
38:72:4a:ed:b7:9c:9e:eb:90:21:86:24:8d:19:62:
8d:4e:be:8b:7f:94:62:d5:a1:88:20:89:48:b7:43:
c0:da:bf:cf:a8:dd:79:2d:53:6f:c7:6e:c6:f1:a3:
ab:88:55:91:8e:3e:34:77:c8:47:a0:b3:37:2e:f9:
7e:f1:c8:0f:cc:48:87:32:de:27:79:02:60:04:b2:
78:0f:79:78:8d:e2:bd:dd:3b:70:0d:36:ea:da:21:
0a:13:e7:27:8b:5e:e1:29:9e:d5:8b:eb:07:c8:41:
5c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:63:F8:60:AF:8E:98:1C:FE:F2:9E:44:84:62:9E:15:AD:EB:98:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb223f7f-f28b-4df4-b6da-cab48558c2cd/0643f9f7-9d02-32fe-847d-014edce56609.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb223f7f-f28b-4df4-b6da-cab48558c2cd/bb223f7f-f28b-4df4-b6da-cab48558c2cd.crl
X509v3 Authority Key Identifier:
keyid:1C:B4:00:9E:47:2B:68:26:87:FE:C2:5E:72:62:46:1F:5D:22:E4:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bb223f7f-f28b-4df4-b6da-cab48558c2cd.cer
sbgp-ipAddrBlock: critical
IPv4:
23.166.8.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:f4:82:e2:ea:f9:e2:52:82:72:dd:7e:21:b3:5e:e1:b0:d6:
bb:e5:b5:80:58:3d:2c:19:da:b6:50:09:f5:e0:c7:5f:3d:79:
54:e0:c7:07:6b:16:08:66:f0:92:b3:81:30:28:94:fe:d8:d4:
46:43:3f:65:68:bc:5d:c1:5b:31:eb:e5:c7:89:b9:90:b1:9e:
f2:42:94:10:fa:15:ab:03:30:48:c1:e8:a9:43:30:d0:54:a8:
10:57:d6:6c:e5:3f:eb:45:3c:85:04:30:a6:f0:4d:ac:d2:50:
dd:f3:c0:ad:9d:39:3e:89:1a:e1:03:c0:eb:c9:28:46:51:ba:
97:4f:ed:28:da:ee:97:13:fb:3f:88:9d:1c:e9:46:12:29:6d:
a0:b9:98:72:f3:8b:13:ed:37:7b:8d:38:2c:7a:0c:91:c7:ee:
2d:fe:d1:58:97:b3:68:35:88:85:1c:1f:9c:b8:3a:34:98:81:
2c:4e:e7:5a:e9:e1:cb:41:21:5e:dc:93:08:2c:f0:73:ab:28:
82:81:ce:03:b9:e7:51:c7:ad:64:0b:ab:fd:1c:12:47:56:07:
68:c3:75:71:5a:04:d9:c4:ad:18:77:7a:65:eb:cf:95:db:97:
05:1c:6a:8d:8b:87:10:23:b4:20:0d:77:20:cc:a7:da:f3:c1:
7d:13:4b:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:14:38 2026 by rpki-client