
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2a43a868-3d14-440f-a95a-5428c232c5d0/e93a5b63-6268-38f6-b20d-f5c2fcf1e8d7.roa
File: e93a5b63-6268-38f6-b20d-f5c2fcf1e8d7.roa (raw, json)
Hash identifier: m6pzeh2U+vGfVu8ZnhZdPSjyObR/oZNtHu4uX1kXZ7E=
Subject key identifier: 14:98:4F:40:31:BF:29:4B:36:F8:74:2F:15:1E:80:07:0B:F3:40:2D
Certificate issuer: /CN=2a43a868-3d14-440f-a95a-5428c232c5d0
Certificate serial: 010D0C9F4328584F8F01F9EB3376B1FD718AA400
Authority key identifier: 8A:E9:B1:DB:3E:1C:E3:90:30:AA:C9:E4:44:E2:AF:BB:97:F1:4B:32
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2a43a868-3d14-440f-a95a-5428c232c5d0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2a43a868-3d14-440f-a95a-5428c232c5d0/e93a5b63-6268-38f6-b20d-f5c2fcf1e8d7.roa
Signing time: Mon 19 Oct 2026 23:00:02 +0000
ROA not before: Mon 19 Oct 2026 23:00:02 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 402230
IP address blocks: 23.154.28.0/24 maxlen: 24
2602:f440::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2a43a868-3d14-440f-a95a-5428c232c5d0/2a43a868-3d14-440f-a95a-5428c232c5d0.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2a43a868-3d14-440f-a95a-5428c232c5d0/2a43a868-3d14-440f-a95a-5428c232c5d0.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2a43a868-3d14-440f-a95a-5428c232c5d0.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 26 Oct 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:8f:01:f9:eb:33:76:b1:fd:71:8a:a4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a43a868-3d14-440f-a95a-5428c232c5d0
Validity
Not Before: Oct 19 23:00:02 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=8cfd8647-6e11-4075-85ca-593e527be644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:39:7b:d5:5b:87:29:18:fa:47:8d:37:40:17:
6b:fe:c6:83:a4:fb:e7:b3:e4:99:bf:e6:ed:01:ec:
7f:f2:c2:ff:db:42:db:1d:a9:57:b5:fd:b6:a4:3d:
0d:5c:ee:9f:b6:b4:15:30:2c:bc:85:22:4f:4f:81:
1e:aa:5d:a8:db:8b:b3:82:46:c8:f0:cd:23:79:e0:
e3:35:da:33:f0:ea:b0:86:17:9a:69:03:4e:65:f7:
df:3b:a4:98:af:d9:20:84:d0:59:bb:06:a1:15:0b:
62:04:e2:ca:87:11:3d:df:d9:68:6b:02:10:da:08:
15:28:51:94:30:38:81:58:b3:a3:cb:44:b1:57:d6:
f2:74:21:7b:63:76:f6:71:2c:c5:1e:d3:01:47:06:
82:0c:d5:0d:ba:59:e5:e6:e7:39:1a:a4:c5:9d:ce:
44:e0:76:82:7a:b2:6e:f8:f3:49:7e:39:77:e8:d2:
7e:09:63:f4:d6:e4:20:8d:20:64:f9:1b:72:aa:06:
ea:45:47:9a:cc:58:06:9b:23:3d:bb:4a:04:99:b6:
1a:10:c5:6c:f6:e8:92:ff:b5:da:0f:1c:8f:4f:01:
81:2a:45:d1:48:56:a8:ca:3f:7e:20:ab:c0:af:89:
e2:c0:f8:6b:17:0b:17:78:e8:1b:38:14:60:ac:db:
f8:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:98:4F:40:31:BF:29:4B:36:F8:74:2F:15:1E:80:07:0B:F3:40:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2a43a868-3d14-440f-a95a-5428c232c5d0/e93a5b63-6268-38f6-b20d-f5c2fcf1e8d7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2a43a868-3d14-440f-a95a-5428c232c5d0/2a43a868-3d14-440f-a95a-5428c232c5d0.crl
X509v3 Authority Key Identifier:
keyid:8A:E9:B1:DB:3E:1C:E3:90:30:AA:C9:E4:44:E2:AF:BB:97:F1:4B:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/2a43a868-3d14-440f-a95a-5428c232c5d0.cer
sbgp-ipAddrBlock: critical
IPv4:
23.154.28.0/24
IPv6:
2602:f440::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:f2:0f:d8:31:ce:df:cd:e4:0f:2c:a4:98:db:74:50:b5:d8:
73:46:7f:cc:6c:4f:78:9c:0d:e0:eb:d2:dc:ca:e9:13:7d:e0:
f0:44:f9:53:4a:36:46:8b:e3:c9:f0:e6:c1:d5:26:b7:fc:f2:
55:b3:4e:a6:15:83:c3:1f:d9:36:e0:65:57:7e:12:7b:3a:db:
bc:0b:ff:b5:72:6e:14:8c:3f:09:c0:d9:6c:e4:78:86:80:18:
c0:bf:28:3b:f1:07:1b:7f:64:8d:a8:15:ed:2b:25:aa:93:ea:
1d:82:7c:65:73:d8:41:df:16:0c:12:93:5d:86:09:ed:a5:87:
30:c0:9f:62:87:4f:1d:a7:cf:44:b8:fd:53:cf:b5:41:58:86:
5c:59:6e:69:7f:30:c1:7e:a7:80:06:17:9e:5c:c6:3d:e7:de:
cb:e7:28:7b:f0:03:f0:58:bc:85:34:7c:ce:1a:08:60:04:9b:
0d:a4:ad:89:d2:b0:81:46:a2:1c:1b:70:ef:29:8b:8f:f4:ed:
62:be:9c:ae:0e:1a:68:fd:9e:49:3a:b9:e1:57:ea:13:01:14:
ca:a8:42:c8:a9:6e:6e:1e:47:bf:a5:8b:2e:ea:b2:14:70:9a:
0a:14:cb:fa:73:da:58:ac:50:c6:ab:4f:ba:54:4f:a7:18:30:
27:13:c5:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:36:52 2026 by rpki-client