
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72/c1ffed43-8b3a-39e2-a537-fe314320f4bb.roa
File: c1ffed43-8b3a-39e2-a537-fe314320f4bb.roa (raw, json)
Hash identifier: YSfWaPnvt6E0MCBh8Mtp5TWpohG9tVAEj6XPYTHKSN8=
Subject key identifier: 94:1C:80:36:87:2A:5D:78:39:70:3F:29:DB:FF:50:25:8A:FE:FF:5E
Certificate issuer: /CN=de57fd18-3c65-43a3-96c1-a6fe61028c72
Certificate serial: 010D0C9F4328584EA78809DC16AB27290EAB3B00
Authority key identifier: C8:BC:1B:F5:2F:52:E9:4F:95:CB:7A:FC:18:0C:02:64:40:4C:82:3D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72/c1ffed43-8b3a-39e2-a537-fe314320f4bb.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 400304
IP address blocks: 23.147.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72/de57fd18-3c65-43a3-96c1-a6fe61028c72.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72/de57fd18-3c65-43a3-96c1-a6fe61028c72.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 12 Sep 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:88:09:dc:16:ab:27:29:0e:ab:3b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de57fd18-3c65-43a3-96c1-a6fe61028c72
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=70aef027-a62f-4015-919a-743d1f3bf11b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c1:46:bd:96:08:07:54:fb:4f:ce:98:d8:48:
5b:4e:2a:7e:0f:9d:a4:d3:8d:19:d5:7b:83:36:c2:
6b:2c:5d:51:fb:d9:75:a1:56:cb:ac:c2:26:7f:0d:
4c:64:48:e2:90:46:e2:39:16:9b:67:0c:1a:95:b1:
b3:24:e4:5a:f2:eb:17:b1:8e:68:2b:7a:8c:47:e5:
61:f1:a4:f0:53:b3:8f:e2:4b:52:95:aa:73:ad:7f:
70:09:16:c5:bd:85:11:8b:d4:af:c8:0d:c0:9c:5f:
de:ff:13:48:8c:29:4b:c3:01:ca:b1:7b:04:4f:48:
e8:0d:29:e8:19:4e:6a:a8:cb:32:e2:f1:1b:f0:c4:
cd:a9:70:53:6a:5f:94:8f:0e:d4:24:11:a8:63:ff:
4b:69:8c:6b:f2:76:31:09:88:6f:9f:05:8b:c9:27:
8b:49:61:3f:a8:69:a5:96:68:64:ac:cc:63:c2:0f:
67:6b:90:8c:32:e3:9e:d0:ed:8a:c7:e2:57:d2:62:
4b:f7:3a:4d:4f:f0:0e:8d:bc:5f:05:d3:b4:3e:4b:
02:bd:73:4e:75:76:c7:ec:f3:85:5f:d2:d6:46:54:
58:ac:93:eb:63:3b:a6:32:89:13:de:ee:15:4d:35:
a2:c2:60:99:5b:df:b7:21:ea:b5:78:f4:65:b7:ba:
83:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:1C:80:36:87:2A:5D:78:39:70:3F:29:DB:FF:50:25:8A:FE:FF:5E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72/c1ffed43-8b3a-39e2-a537-fe314320f4bb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72/de57fd18-3c65-43a3-96c1-a6fe61028c72.crl
X509v3 Authority Key Identifier:
keyid:C8:BC:1B:F5:2F:52:E9:4F:95:CB:7A:FC:18:0C:02:64:40:4C:82:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72.cer
sbgp-ipAddrBlock: critical
IPv4:
23.147.152.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:56:8b:8d:09:98:8a:92:81:09:70:fb:0d:b2:b2:3f:dc:be:
1d:50:37:a1:fa:1f:81:a7:b7:4c:f5:42:a3:eb:03:fc:15:36:
e7:c1:52:69:7a:0f:de:c3:f7:e5:ad:cf:d5:3b:f9:58:f0:43:
3f:19:3b:65:5a:dc:5f:6b:86:bd:83:6c:53:94:50:13:1d:14:
25:4d:9c:9e:2a:51:10:a6:48:32:6a:87:d1:6b:c6:03:6e:45:
13:06:7c:50:b5:52:52:92:d2:8b:17:45:9a:4e:6f:4e:d6:03:
5d:b8:d8:6b:7c:2e:ab:1d:69:17:54:1c:6e:d8:45:c0:02:8d:
8a:20:b0:d7:68:c2:fc:34:1c:8e:43:29:19:9f:10:e5:bc:39:
95:26:be:98:78:b2:e2:f2:83:4a:4b:50:0a:e1:c7:21:ea:01:
47:6c:bc:75:88:54:35:26:82:17:e5:bd:c5:f3:16:15:e2:21:
c8:9b:f2:2b:11:e9:5e:c7:aa:3b:3a:3c:ff:09:fe:5a:c4:53:
d1:10:2d:3d:7f:a5:69:ef:57:d3:b9:91:43:f0:b7:71:a7:8a:
b9:72:7c:3d:e3:ad:5a:23:54:0b:48:ca:79:b6:b3:26:9b:44:
86:c3:14:36:c1:a3:74:61:25:f9:ec:e1:f9:f8:51:3d:19:f4:
72:23:42:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 06:05:50 2026 by rpki-client