
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/40898705-dca0-471d-ab1b-b12e6e8e7c83/d86e1d6a-231b-39dc-8464-adea1810b9b4.roa
File: d86e1d6a-231b-39dc-8464-adea1810b9b4.roa (raw, json)
Hash identifier: hXvd0eCivbZm41z1KXudNJ5yAOdLdukvxS/U/kK+NrU=
Subject key identifier: D7:77:3F:99:3B:79:87:0F:03:A1:F7:00:1B:69:B9:81:6B:01:00:E7
Certificate issuer: /CN=40898705-dca0-471d-ab1b-b12e6e8e7c83
Certificate serial: 010D0C9F4328584EC63C70A845882F79A486D180
Authority key identifier: D4:50:5F:18:28:00:9D:4A:97:41:09:C9:41:47:31:78:ED:C9:48:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/40898705-dca0-471d-ab1b-b12e6e8e7c83.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/40898705-dca0-471d-ab1b-b12e6e8e7c83/d86e1d6a-231b-39dc-8464-adea1810b9b4.roa
Signing time: Sun 09 Aug 2026 01:00:12 +0000
ROA not before: Sun 09 Aug 2026 01:00:12 +0000
ROA not after: Sat 07 Nov 2026 02:00:12 +0000
asID: 402261
IP address blocks: 23.154.132.0/24 maxlen: 24
2620:7f:1450::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/40898705-dca0-471d-ab1b-b12e6e8e7c83/40898705-dca0-471d-ab1b-b12e6e8e7c83.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/40898705-dca0-471d-ab1b-b12e6e8e7c83/40898705-dca0-471d-ab1b-b12e6e8e7c83.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/40898705-dca0-471d-ab1b-b12e6e8e7c83.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 14 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:c6:3c:70:a8:45:88:2f:79:a4:86:d1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40898705-dca0-471d-ab1b-b12e6e8e7c83
Validity
Not Before: Aug 9 01:00:12 2026 GMT
Not After : Nov 7 02:00:12 2026 GMT
Subject: CN=f9014a74-d7df-4b04-8295-2f066e1b1646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f3:ad:ba:13:75:b2:0f:55:6e:cc:2f:7a:92:
82:25:b5:0a:f5:36:b3:5f:ae:61:29:b3:55:5e:f4:
a1:05:88:3a:a4:e8:2f:c7:32:1f:be:31:86:68:be:
3b:e0:ca:3c:b9:42:bd:7c:de:5b:6e:51:1e:7e:81:
b5:89:8c:aa:cd:a7:ab:14:e9:74:04:7a:ba:20:38:
84:02:a8:ce:d8:f3:2d:73:07:a5:31:52:47:1f:dd:
b4:7f:e8:82:ff:bc:c7:c3:42:b7:10:5b:48:51:3b:
bf:24:75:56:d4:ff:b6:f0:98:18:ff:4d:3c:e2:35:
ce:59:ca:5c:e4:8c:bc:2e:2a:a8:73:e5:03:bc:90:
78:30:db:ac:ec:d6:f1:df:bb:c1:9e:58:05:b5:7b:
fe:5c:b9:c1:64:08:d5:2f:6b:5f:a2:1c:e8:43:02:
aa:ef:e8:12:77:e3:41:b8:d8:40:c8:8d:46:cd:c0:
4f:23:6f:5d:9c:47:dd:a1:09:8b:d3:f3:9f:e5:8d:
4e:20:55:34:d9:c4:6a:e3:cb:85:9f:97:38:ef:04:
eb:9e:e1:cc:50:7d:4c:e0:7d:c4:5f:85:14:6e:be:
d8:d7:94:19:1b:1b:08:c3:62:49:f8:a8:97:9f:16:
f4:97:d3:50:f5:07:3c:6e:45:83:16:8f:fe:d3:b6:
59:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:77:3F:99:3B:79:87:0F:03:A1:F7:00:1B:69:B9:81:6B:01:00:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/40898705-dca0-471d-ab1b-b12e6e8e7c83/d86e1d6a-231b-39dc-8464-adea1810b9b4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/40898705-dca0-471d-ab1b-b12e6e8e7c83/40898705-dca0-471d-ab1b-b12e6e8e7c83.crl
X509v3 Authority Key Identifier:
keyid:D4:50:5F:18:28:00:9D:4A:97:41:09:C9:41:47:31:78:ED:C9:48:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/40898705-dca0-471d-ab1b-b12e6e8e7c83.cer
sbgp-ipAddrBlock: critical
IPv4:
23.154.132.0/24
IPv6:
2620:7f:1450::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:c5:0f:c1:a8:27:97:91:a2:7e:92:a7:a6:ee:a5:8b:0b:20:
71:a5:dc:c7:32:f5:6a:24:e2:ee:de:fd:1e:45:b9:e9:8c:1a:
91:b3:55:63:df:fb:29:36:32:50:4b:db:13:4a:6b:88:88:c9:
bd:ec:d7:90:f9:f4:93:9a:f5:b0:26:fb:44:17:39:84:db:38:
36:0d:15:86:1a:14:6f:c6:bc:f8:18:c7:72:e1:a0:03:e6:83:
dd:50:8e:3b:5f:dd:5f:c2:3e:c8:80:3a:dc:8d:53:da:14:2d:
6c:05:63:6c:eb:76:3d:54:db:5c:43:89:3f:3e:64:a2:f4:20:
f1:ac:5d:d6:fd:3e:78:a2:44:e8:19:4c:1b:79:58:ac:27:43:
34:81:9b:58:d2:f9:9a:3e:b0:14:1b:39:65:d7:6b:5e:e8:0f:
75:f7:68:0f:33:0b:1d:f7:31:85:55:42:06:60:06:e7:df:bf:
a9:bf:25:5a:b8:bd:97:0b:af:9e:8b:0e:af:7b:51:f9:65:1e:
87:43:dd:46:b0:21:a2:79:1e:29:89:21:a5:8c:15:fe:3f:2c:
dd:04:e5:09:be:25:c1:b5:b2:b7:1e:ab:27:86:6f:69:5b:d9:
21:08:6a:94:5f:ec:4c:27:45:e6:10:62:b7:05:3a:35:90:9b:
22:0d:34:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 10:20:46 2026 by rpki-client