
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4307d8eb-6c0f-40cf-b909-d61a3f0279c9/a300f31a-94ab-36e0-8d0b-5a1379ee7eec.roa
File: a300f31a-94ab-36e0-8d0b-5a1379ee7eec.roa (raw, json)
Hash identifier: 5+C/xe2wPBxKgMUQTrgiMiWnjunu1ZYk9LFybt+jOfM=
Subject key identifier: 40:AF:67:DB:ED:F6:26:86:06:3D:7B:4D:9F:50:C9:D6:89:C2:3E:B9
Certificate issuer: /CN=4307d8eb-6c0f-40cf-b909-d61a3f0279c9
Certificate serial: 010D0C9F4328584F4988718A5F18CD6F1EFC5400
Authority key identifier: 11:36:E2:A0:EE:F9:56:65:4B:69:C3:E3:4F:A3:30:12:F5:C0:0F:39
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4307d8eb-6c0f-40cf-b909-d61a3f0279c9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4307d8eb-6c0f-40cf-b909-d61a3f0279c9/a300f31a-94ab-36e0-8d0b-5a1379ee7eec.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 393406
IP address blocks: 23.131.60.0/24 maxlen: 24
2602:f763::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4307d8eb-6c0f-40cf-b909-d61a3f0279c9/4307d8eb-6c0f-40cf-b909-d61a3f0279c9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4307d8eb-6c0f-40cf-b909-d61a3f0279c9/4307d8eb-6c0f-40cf-b909-d61a3f0279c9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4307d8eb-6c0f-40cf-b909-d61a3f0279c9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 10 Oct 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:88:71:8a:5f:18:cd:6f:1e:fc:54:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4307d8eb-6c0f-40cf-b909-d61a3f0279c9
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=f321e89d-5897-4ba8-9ca8-0eb97fd4ec29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:84:74:06:2e:c9:bc:9c:55:29:53:33:9a:04:
1f:27:4c:f2:db:7f:cf:58:b0:22:9f:dc:ed:37:62:
23:a3:b5:31:4a:85:3c:40:92:cc:ed:28:10:9b:50:
20:bf:43:0a:ec:d1:54:85:e8:47:f5:81:80:97:b6:
66:7f:d3:99:98:b5:d3:41:46:ba:53:80:84:af:7e:
94:00:46:9c:8b:75:5c:ce:1d:e6:ca:73:6c:c7:f3:
e2:ae:c8:29:92:e3:57:3d:07:d2:0c:bf:e8:8a:68:
56:09:4f:4e:9a:c7:df:22:42:06:4d:f9:45:0e:27:
29:ce:96:ac:f0:0d:ff:71:a3:7d:2e:ab:8d:35:0e:
96:7e:08:ae:dd:84:d4:f1:b6:7d:b2:ea:6b:79:ef:
06:52:e7:bb:79:12:c7:c2:3c:f1:57:8e:df:2d:4e:
4c:10:1e:d2:4a:86:c9:2b:3d:9f:13:68:da:66:59:
92:0e:1b:30:c2:e7:89:d3:35:02:57:21:de:10:17:
e3:df:cd:c8:30:a7:a5:d1:5e:b5:d0:54:4f:4e:fc:
9d:5c:7a:84:1e:f1:10:99:f2:2f:0c:9c:e3:01:5a:
09:b9:ce:ea:e9:dd:e7:56:17:7c:0d:bd:55:c5:5b:
85:c0:bd:78:eb:ec:61:58:50:1b:1a:50:95:ad:91:
b7:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:AF:67:DB:ED:F6:26:86:06:3D:7B:4D:9F:50:C9:D6:89:C2:3E:B9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4307d8eb-6c0f-40cf-b909-d61a3f0279c9/a300f31a-94ab-36e0-8d0b-5a1379ee7eec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4307d8eb-6c0f-40cf-b909-d61a3f0279c9/4307d8eb-6c0f-40cf-b909-d61a3f0279c9.crl
X509v3 Authority Key Identifier:
keyid:11:36:E2:A0:EE:F9:56:65:4B:69:C3:E3:4F:A3:30:12:F5:C0:0F:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4307d8eb-6c0f-40cf-b909-d61a3f0279c9.cer
sbgp-ipAddrBlock: critical
IPv4:
23.131.60.0/24
IPv6:
2602:f763::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:4d:d6:e6:10:12:22:3d:d9:b5:54:1d:b4:e2:df:d1:c4:88:
27:f6:6b:26:08:84:ed:25:e8:de:cc:b5:81:7f:e1:ad:52:cd:
10:8b:90:61:66:d2:2b:78:e4:31:38:69:f9:52:01:00:f9:b3:
21:51:2b:96:f9:49:bd:39:10:94:80:32:47:3b:ee:3b:20:7d:
18:45:63:b3:07:98:c0:b6:8e:d6:36:08:86:c8:69:82:4f:2b:
a8:34:31:ba:76:34:fe:74:12:84:f4:65:7d:26:90:9b:fa:38:
a6:8d:28:5d:ce:8f:d0:5a:e0:e7:2f:f0:7d:e0:52:a8:38:60:
a7:c9:c6:37:04:4f:b2:be:25:bb:27:55:b3:cc:dd:07:38:e2:
3a:01:45:7a:ae:f1:ba:46:f4:ce:9a:82:0b:01:b7:4d:76:25:
65:eb:4e:64:7d:7b:bf:ac:70:14:dc:ee:a6:ee:4b:48:85:ed:
a2:b6:ff:db:83:d5:1c:eb:77:34:2b:53:35:e3:53:c8:00:3e:
46:a0:7a:ae:c0:54:5f:d7:61:4c:d1:2e:d3:41:83:c0:27:45:
b9:c4:34:c9:93:97:8d:13:0f:69:0e:d3:4e:ff:e7:c7:23:7d:
93:a3:10:5d:f6:fe:81:d6:86:d4:bd:61:ef:b0:f0:eb:74:1c:
e6:cc:f3:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 21:52:56 2026 by rpki-client