
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5/70a46534-e8e5-3181-abb5-2f44dc79049a.roa
File: 70a46534-e8e5-3181-abb5-2f44dc79049a.roa (raw, json)
Hash identifier: Qm5yzRe9XeuqbAqrvSAKs3TgNnaeab5B3RGunBPH46M=
Subject key identifier: EF:D4:56:91:B2:78:C6:6E:31:73:83:9D:62:B3:86:00:77:75:4B:1E
Certificate issuer: /CN=b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5
Certificate serial: 010D0C9F4328584ECD37355D6FD4B38E212C0840
Authority key identifier: DB:F4:ED:9B:E8:FD:BD:34:98:5C:6A:7F:D2:D1:AB:2A:29:D8:8A:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5/70a46534-e8e5-3181-abb5-2f44dc79049a.roa
Signing time: Tue 11 Aug 2026 13:00:11 +0000
ROA not before: Tue 11 Aug 2026 13:00:11 +0000
ROA not after: Mon 09 Nov 2026 14:00:11 +0000
asID: 209699
IP address blocks: 23.138.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5/b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5/b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 06 Sep 2026 03:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:cd:37:35:5d:6f:d4:b3:8e:21:2c:08:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5
Validity
Not Before: Aug 11 13:00:11 2026 GMT
Not After : Nov 9 14:00:11 2026 GMT
Subject: CN=df1078b5-b865-4336-b177-c924235f2d7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:06:fe:db:ad:aa:78:65:74:e0:f5:90:ad:74:
eb:b5:7b:0e:45:4f:a2:05:14:09:11:2d:5e:ee:1d:
7a:47:ce:60:ba:9c:5e:dc:ba:d2:16:0c:29:b6:18:
cd:73:c6:90:ec:1c:c1:f9:55:77:37:f2:b8:75:a4:
12:ab:d5:a7:0d:7b:0a:d2:7a:1b:e8:03:f7:17:23:
0f:83:16:f9:82:94:55:2d:81:78:24:cc:70:35:e3:
fe:ed:3b:68:6f:ae:8a:41:51:b4:b6:db:1a:ea:ce:
32:de:d5:c7:6f:61:a8:e8:7e:dc:44:fd:55:d1:0b:
89:a6:82:a1:5a:45:ef:69:18:3b:03:9c:88:ee:5a:
13:6c:86:ac:cb:91:a4:0c:2a:61:4f:96:f2:0d:34:
8d:5c:2e:23:23:a9:d6:e8:c9:a9:fa:2e:5a:80:18:
fd:82:e3:32:1f:a6:c9:fb:fd:84:d3:e1:3e:15:03:
9a:bd:36:64:db:55:98:ab:bf:c6:dd:38:52:7d:f8:
62:ea:d2:64:77:99:72:c1:c6:d9:df:e3:82:5a:dd:
26:88:cd:3f:81:81:ea:5d:ae:e8:ec:d9:dd:59:b2:
a8:e2:d0:54:fd:22:39:b0:4e:aa:d4:25:70:10:7a:
9b:52:5d:ed:5a:32:55:2e:30:79:e8:4e:f9:04:3a:
93:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:D4:56:91:B2:78:C6:6E:31:73:83:9D:62:B3:86:00:77:75:4B:1E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5/70a46534-e8e5-3181-abb5-2f44dc79049a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5/b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5.crl
X509v3 Authority Key Identifier:
keyid:DB:F4:ED:9B:E8:FD:BD:34:98:5C:6A:7F:D2:D1:AB:2A:29:D8:8A:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5.cer
sbgp-ipAddrBlock: critical
IPv4:
23.138.172.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:94:d2:b8:cf:6e:d9:a2:6c:f2:eb:af:67:a7:47:e6:d5:e8:
be:c6:94:cc:85:87:8d:21:40:70:14:2c:02:6b:4c:18:21:c1:
c8:a5:c8:06:d1:35:d8:02:d3:30:4a:0e:d8:b1:b1:b1:72:16:
57:71:5b:81:ad:09:f3:45:4b:eb:6c:10:1e:c2:0a:d6:ac:46:
77:82:a4:70:5f:ab:b9:37:be:10:56:8e:ae:38:2a:86:ae:e9:
dc:bc:b6:42:b9:5b:91:6b:b7:98:c2:30:91:f0:a7:6a:4c:93:
89:52:fc:04:ca:2f:b8:6d:86:9e:86:e5:54:3c:fe:31:f3:85:
ee:9a:3a:7e:51:dc:f2:73:7a:e5:f9:c0:b2:72:9b:f8:71:34:
61:7b:b0:e7:1f:83:24:0b:e6:21:a9:dc:de:c8:3e:36:5f:ce:
c1:e7:3c:ed:6b:56:bc:f5:6f:0d:82:a6:f3:8e:4e:9f:dc:a0:
03:e4:db:49:06:ff:b8:ec:90:cc:2f:b0:aa:64:d9:67:09:a8:
91:4c:e1:61:c0:ce:11:4d:64:4e:f4:e5:b6:77:5f:de:39:5f:
b5:b9:8e:5f:77:53:a3:3b:55:29:4d:1b:72:48:f6:78:0a:d6:
14:59:2b:dd:62:8a:ad:c7:10:8b:4f:b4:f9:ce:21:b2:3d:51:
4b:f1:a5:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:08:07 2026 by rpki-client