
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/c53cb806-27f4-343a-9db8-41d80aa3f46b.roa
File: c53cb806-27f4-343a-9db8-41d80aa3f46b.roa (raw, json)
Hash identifier: HUMO8LvtDVtm7tBwO8YgHv2JGzWlB9B5aVX/YPMP1dw=
Subject key identifier: BD:88:ED:3D:A4:6A:B2:ED:94:8C:34:BE:C1:2E:95:46:DA:79:46:CF
Certificate issuer: /CN=09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c
Certificate serial: 010D0C9F4328584F89A87D1C276DD6C6C9027180
Authority key identifier: C4:52:EF:29:27:F2:EC:5A:51:3C:C1:72:D6:73:BD:1E:39:05:95:26
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/c53cb806-27f4-343a-9db8-41d80aa3f46b.roa
Signing time: Sun 18 Oct 2026 01:00:13 +0000
ROA not before: Sun 18 Oct 2026 01:00:13 +0000
ROA not after: Sat 16 Jan 2027 02:00:13 +0000
asID: 399989
IP address blocks: 23.143.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 20 Oct 2026 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:89:a8:7d:1c:27:6d:d6:c6:c9:02:71:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c
Validity
Not Before: Oct 18 01:00:13 2026 GMT
Not After : Jan 16 02:00:13 2027 GMT
Subject: CN=19a31c98-6d22-49dd-a412-fdfbdff6e002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f0:e6:ff:4d:27:ba:25:23:d5:aa:8b:5f:5d:
4e:74:b2:3e:30:bd:de:e8:2a:db:a6:78:19:15:a4:
89:03:e6:ce:22:44:0b:07:5a:4f:bd:09:06:57:14:
f6:4b:e5:55:30:4d:ec:30:2d:7d:61:a6:ff:a8:df:
7f:53:31:35:cd:5d:2d:61:e2:b1:69:b7:d3:90:c8:
b3:ee:1e:84:95:29:e6:1e:81:0b:8b:c7:88:bf:b0:
62:04:4c:0e:0a:f4:71:1a:17:37:9e:68:45:63:cb:
8c:2e:43:2d:8b:00:d9:fc:69:1f:6b:e8:4e:43:18:
64:6c:76:c5:24:05:ce:fe:ac:eb:a4:1b:4e:34:f9:
b2:3a:a6:f5:5d:0c:02:5f:2a:7f:a1:d0:81:3b:90:
73:2f:75:fe:eb:c6:98:03:dd:00:44:20:56:b5:2c:
2b:d1:fc:7e:41:83:08:51:90:44:d1:41:0b:a8:ee:
03:e3:cd:6d:46:41:0d:54:ed:3f:ad:13:31:73:86:
5e:41:09:6e:22:a1:95:66:04:cc:59:c4:19:6c:a9:
7b:c1:b2:3c:c4:11:2c:b0:38:3c:92:46:cd:d5:01:
78:81:0e:10:85:44:b9:7e:ce:29:df:e4:04:2f:4d:
f3:14:21:c9:4c:42:b0:74:cf:13:a9:c1:b3:e6:a7:
51:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:88:ED:3D:A4:6A:B2:ED:94:8C:34:BE:C1:2E:95:46:DA:79:46:CF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/c53cb806-27f4-343a-9db8-41d80aa3f46b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.crl
X509v3 Authority Key Identifier:
keyid:C4:52:EF:29:27:F2:EC:5A:51:3C:C1:72:D6:73:BD:1E:39:05:95:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.cer
sbgp-ipAddrBlock: critical
IPv4:
23.143.104.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:56:22:a3:00:55:b7:e3:17:e4:da:5f:b3:f0:93:45:89:1c:
bd:05:4f:fa:5a:2b:13:16:00:f9:c7:83:ab:59:cb:d4:1d:4e:
82:a6:3d:57:ab:6d:e8:5c:d6:dd:40:f7:4a:65:82:7d:de:7d:
9c:c1:17:27:c8:5e:63:0c:b2:44:49:66:70:40:b4:5f:31:9b:
b2:07:80:d7:5f:f3:26:1a:25:19:6a:67:82:1b:ef:4f:6b:ff:
df:82:89:ce:01:33:d4:f4:b9:7a:f1:31:f5:14:ad:c7:a2:fc:
44:73:9d:22:d6:a5:7a:dd:81:95:89:2f:5d:a0:04:3c:e5:74:
25:1e:3f:24:c5:9b:de:ce:21:4b:78:b9:63:53:90:b8:0c:5e:
0b:3a:75:91:87:98:eb:e0:5e:d0:7c:f6:f3:f6:d5:87:fe:01:
23:6e:cd:e0:b8:81:74:97:2f:e7:2a:cc:80:d8:f0:3d:eb:77:
6e:d5:fd:ea:52:6e:56:ec:83:ed:0f:8a:7a:41:f6:8d:67:90:
6e:ab:22:92:cd:7c:c0:1a:eb:fe:cd:86:28:c5:f7:14:d4:6f:
e1:c9:60:e9:88:fc:d2:50:e5:08:d9:23:7c:1c:02:76:21:cf:
52:c3:39:e0:0e:0e:f7:0c:ab:f6:d8:9e:3a:e9:83:7f:1e:3f:
3f:cb:6c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 04:42:29 2026 by rpki-client