
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be69e7ae-469d-400e-8f2e-4ebfc1be0098/853d2761-430f-3406-8353-e291e87c8b19.roa
File: 853d2761-430f-3406-8353-e291e87c8b19.roa (raw, json)
Hash identifier: sPXvGu+hX9nt7SRHDyJhbAB/71rJtSu5XGZhFBLIA4w=
Subject key identifier: D1:87:0F:F2:CB:19:52:6A:82:3F:19:65:A7:E1:B3:CE:66:35:EC:16
Certificate issuer: /CN=be69e7ae-469d-400e-8f2e-4ebfc1be0098
Certificate serial: 010D0C9F4328584EC20C7129BE556123682A7F00
Authority key identifier: 10:44:A2:7F:5D:CB:7B:01:1A:9B:6D:EB:6D:47:3E:9F:B6:51:A5:84
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be69e7ae-469d-400e-8f2e-4ebfc1be0098.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be69e7ae-469d-400e-8f2e-4ebfc1be0098/853d2761-430f-3406-8353-e291e87c8b19.roa
Signing time: Fri 07 Aug 2026 13:00:11 +0000
ROA not before: Fri 07 Aug 2026 13:00:11 +0000
ROA not after: Thu 05 Nov 2026 14:00:11 +0000
asID: 399935
IP address blocks: 23.168.216.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be69e7ae-469d-400e-8f2e-4ebfc1be0098/be69e7ae-469d-400e-8f2e-4ebfc1be0098.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be69e7ae-469d-400e-8f2e-4ebfc1be0098/be69e7ae-469d-400e-8f2e-4ebfc1be0098.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be69e7ae-469d-400e-8f2e-4ebfc1be0098.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 22 Aug 2026 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:c2:0c:71:29:be:55:61:23:68:2a:7f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be69e7ae-469d-400e-8f2e-4ebfc1be0098
Validity
Not Before: Aug 7 13:00:11 2026 GMT
Not After : Nov 5 14:00:11 2026 GMT
Subject: CN=941fcc73-a5fd-4037-aef0-7cec2b9166bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:51:aa:38:89:52:ea:61:a7:50:fc:63:1a:8e:
be:f6:3e:1a:71:94:3b:6e:3d:8f:50:3e:7f:d7:70:
bd:2d:43:10:a5:f2:1f:44:c1:2b:b4:af:89:e1:3c:
91:58:85:7a:63:3f:a3:74:bf:3c:69:2b:fa:06:c0:
40:1c:83:45:43:5c:28:96:ad:6d:30:3a:f8:36:73:
bd:eb:db:38:ff:d6:e4:90:67:17:7f:04:cb:ee:4e:
47:ec:cb:e2:b5:c2:03:b9:66:31:59:59:4e:75:c2:
6b:b1:68:d0:cb:0b:93:08:73:f2:de:2d:6c:95:0b:
04:80:22:da:77:10:c8:9e:68:33:c7:71:e3:db:84:
34:17:13:9c:d3:78:c5:3e:e0:b6:b8:21:74:8e:3a:
7b:19:72:77:3d:6e:6d:e4:8e:98:06:18:76:5c:1a:
81:b0:45:fb:0c:64:5d:d0:86:df:d3:55:04:df:aa:
1b:52:9e:0e:79:40:d6:7a:28:37:49:5b:62:2d:a5:
97:81:38:60:50:e9:cb:2d:7a:ef:6e:e2:4d:38:5b:
67:78:cf:57:da:96:e7:24:3b:9e:cd:f1:42:4b:4c:
b0:55:79:cc:ab:bb:c9:51:34:29:a1:7c:0c:d3:5c:
d7:86:a4:a3:a2:01:b6:9c:2c:57:cd:93:90:de:05:
bc:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:87:0F:F2:CB:19:52:6A:82:3F:19:65:A7:E1:B3:CE:66:35:EC:16
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be69e7ae-469d-400e-8f2e-4ebfc1be0098/853d2761-430f-3406-8353-e291e87c8b19.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be69e7ae-469d-400e-8f2e-4ebfc1be0098/be69e7ae-469d-400e-8f2e-4ebfc1be0098.crl
X509v3 Authority Key Identifier:
keyid:10:44:A2:7F:5D:CB:7B:01:1A:9B:6D:EB:6D:47:3E:9F:B6:51:A5:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be69e7ae-469d-400e-8f2e-4ebfc1be0098.cer
sbgp-ipAddrBlock: critical
IPv4:
23.168.216.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:d8:60:ab:86:6a:99:e5:79:cb:d2:a3:46:89:ce:30:9e:ed:
b1:ac:8d:a7:c2:b4:b8:60:9e:62:c0:7d:a8:ce:b2:5a:45:ad:
3c:ce:59:ef:a7:9f:5e:0a:9f:8c:61:04:a3:68:ab:f1:3e:1c:
7a:ee:e6:a8:8a:50:c4:ef:0d:87:14:ff:d6:48:b8:51:2a:ea:
f6:28:d7:d0:45:ea:aa:8c:ed:e0:3f:78:bf:8e:af:c5:74:ad:
7e:23:2f:6c:85:95:bf:a2:cd:6c:82:7d:6f:da:99:3e:cf:05:
ca:86:9b:93:55:36:bb:95:f6:74:66:44:98:6d:90:b4:20:d7:
17:d5:0e:8d:1c:e7:d7:69:52:87:51:01:4e:65:59:d3:06:67:
3b:4b:58:b7:bd:56:81:c0:85:c1:af:d4:47:f9:46:47:16:bc:
57:fc:36:0e:0e:8a:71:b4:02:13:1c:6f:d0:c4:48:9d:9f:db:
20:6a:a4:43:5a:f7:fb:81:ca:ec:d9:1e:fe:59:ea:4d:fe:7d:
c1:53:be:0f:1e:f4:ec:8b:b8:0d:00:37:8b:67:f5:dc:d7:20:
44:f5:e4:61:98:34:15:09:77:0e:fe:15:06:84:da:67:3b:33:
d7:f6:73:53:ed:ea:b2:8d:58:97:2a:75:55:70:32:ec:94:1e:
04:c0:02:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:14:39 2026 by rpki-client