
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea/313bf06e-6515-30a0-88e8-3eef89644c81.roa
File: 313bf06e-6515-30a0-88e8-3eef89644c81.roa (raw, json)
Hash identifier: 0JMnuMMJBXu8hieE3k9IDikmQUDL135va/emhx8Xd/o=
Subject key identifier: 0F:13:C0:61:52:80:1A:27:02:0A:5C:BD:6A:8B:38:67:E4:25:FC:C7
Certificate issuer: /CN=aab17bea-e665-4ed1-abe3-d2a9ac34e0ea
Certificate serial: 010D0C9F4328584F82ADB3AF22917ADBCB300250
Authority key identifier: 2D:A8:80:D4:EF:B5:CF:45:3C:4F:94:85:37:75:C6:0D:C1:14:15:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea/313bf06e-6515-30a0-88e8-3eef89644c81.roa
Signing time: Thu 15 Oct 2026 13:00:13 +0000
ROA not before: Thu 15 Oct 2026 13:00:13 +0000
ROA not after: Wed 13 Jan 2027 14:00:13 +0000
asID: 400861
IP address blocks: 23.153.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 22 Oct 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:82:ad:b3:af:22:91:7a:db:cb:30:02:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aab17bea-e665-4ed1-abe3-d2a9ac34e0ea
Validity
Not Before: Oct 15 13:00:13 2026 GMT
Not After : Jan 13 14:00:13 2027 GMT
Subject: CN=301850d0-8d23-4007-b906-8720c3ab4730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:2c:95:f8:65:59:ec:68:ce:f0:e5:01:5a:31:
a5:f5:f5:da:01:e3:8b:8a:13:7d:3b:81:cb:ca:de:
4e:98:3b:5c:3f:10:e0:4b:eb:04:bc:03:bd:1d:49:
ed:48:63:b2:69:69:16:2c:27:23:df:c4:4d:b8:f7:
2f:7d:ca:3a:f6:ab:df:61:1f:ab:6b:bf:d4:ca:0b:
87:7a:f0:2d:2e:6c:c1:41:bd:86:27:97:92:a4:0a:
aa:52:65:6d:87:32:58:cb:58:a4:f9:75:0e:08:0c:
16:b3:03:62:4c:9d:6e:70:36:a5:88:99:35:01:09:
52:ff:7c:1c:8f:c7:3c:f9:be:ae:44:cb:37:67:c2:
15:60:f7:95:49:1c:2c:31:7b:b6:0c:f8:ed:71:11:
07:c1:bf:b9:43:6f:38:43:66:4d:0a:3f:91:9c:2e:
5a:b3:58:4f:65:84:de:e6:15:37:0e:ca:da:33:72:
55:66:73:73:9a:c4:91:58:30:13:c4:cc:6a:cb:e5:
2f:65:66:b5:5c:e4:17:43:e7:9b:31:d3:0e:16:18:
84:d5:95:dc:14:a0:65:06:2c:13:6f:a3:54:9d:ea:
4c:a9:33:ea:63:91:f2:a7:7d:33:97:2d:05:89:43:
5d:ac:c1:17:c5:d9:79:52:8e:3e:20:43:b8:15:35:
70:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:13:C0:61:52:80:1A:27:02:0A:5C:BD:6A:8B:38:67:E4:25:FC:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea/313bf06e-6515-30a0-88e8-3eef89644c81.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea.crl
X509v3 Authority Key Identifier:
keyid:2D:A8:80:D4:EF:B5:CF:45:3C:4F:94:85:37:75:C6:0D:C1:14:15:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/aab17bea-e665-4ed1-abe3-d2a9ac34e0ea.cer
sbgp-ipAddrBlock: critical
IPv4:
23.153.248.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a4:df:3b:3b:d4:b9:9a:96:25:e2:bf:e9:be:51:90:ad:44:51:
0a:2a:d3:42:7d:3d:67:65:79:77:cb:d4:ee:44:f3:75:e6:80:
b0:9a:9a:42:d8:bd:e9:fc:cd:50:d3:a4:f0:cc:7e:0e:b9:70:
5d:54:75:26:ea:f5:c9:9e:69:ce:2a:e5:2a:b6:0a:b6:6e:00:
33:d3:32:9a:9b:f3:fd:41:bc:ca:42:d9:a9:34:88:a7:47:14:
9d:28:0c:59:70:ac:17:eb:25:6f:18:5d:3d:44:26:26:1a:e3:
ad:d8:7b:77:a5:c6:0f:06:04:ca:6c:d1:fd:4d:82:0e:1e:6b:
80:64:29:4f:37:ef:a7:55:8c:52:ca:7d:6e:11:f9:d7:52:c7:
32:0b:ee:7f:89:33:52:ee:b3:9f:85:a2:89:a9:57:dd:d7:dc:
50:ba:09:e8:b7:2b:37:d1:73:c5:72:b1:b4:f9:4d:bf:63:24:
ee:06:3f:6c:f8:42:ff:b4:60:ea:bb:b8:90:e1:00:0b:62:12:
82:2e:c8:30:b1:ec:77:da:05:f9:a0:6d:75:4e:7f:17:67:a8:
7f:6c:24:db:4a:2f:45:6f:55:00:36:4b:ee:1d:6b:85:38:0d:
3d:4a:36:d0:24:0b:d6:28:fa:57:cf:88:93:0b:84:8f:0c:aa:
b1:32:61:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 06:11:27 2026 by rpki-client