
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/c53cb806-27f4-343a-9db8-41d80aa3f46b.roa
File: c53cb806-27f4-343a-9db8-41d80aa3f46b.roa (raw, json)
Hash identifier: RWKWzlsTYjN2amH8vCv/YKsLbwp0mxyumFi2WjVHeB0=
Subject key identifier: 80:03:FC:1A:08:12:3F:9B:65:26:66:74:D5:9D:73:81:33:8F:32:DD
Certificate issuer: /CN=09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c
Certificate serial: 010D0C9F4328584EE7BCBE93FC07930D7C5D5C40
Authority key identifier: C4:52:EF:29:27:F2:EC:5A:51:3C:C1:72:D6:73:BD:1E:39:05:95:26
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/c53cb806-27f4-343a-9db8-41d80aa3f46b.roa
Signing time: Fri 21 Aug 2026 01:00:12 +0000
ROA not before: Fri 21 Aug 2026 01:00:12 +0000
ROA not after: Thu 19 Nov 2026 02:00:12 +0000
asID: 399989
IP address blocks: 23.143.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 02 Sep 2026 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:e7:bc:be:93:fc:07:93:0d:7c:5d:5c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c
Validity
Not Before: Aug 21 01:00:12 2026 GMT
Not After : Nov 19 02:00:12 2026 GMT
Subject: CN=73648ae0-d68c-4b78-a6dc-0680ef3b9835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:7d:90:a9:18:66:c6:17:b4:5c:19:d1:2e:a4:
3d:51:a9:03:95:d7:c0:30:91:52:d3:d0:ab:79:09:
fb:b9:88:24:3d:a5:80:27:c2:d2:f8:15:1c:8d:2f:
c4:66:d7:cf:f6:58:45:06:06:c5:8b:e6:dc:e9:4e:
4f:7d:9b:56:0b:d5:23:ce:d6:ae:29:19:e7:1c:0d:
21:fb:8d:10:d2:25:d0:e0:88:7c:bb:a1:0c:10:93:
35:6f:7d:c1:1f:5c:13:4a:9b:95:7d:f6:e7:bb:23:
41:66:99:57:bb:a1:21:6b:01:8b:dc:39:e9:23:cd:
3a:bd:a5:30:88:f1:78:d7:76:8d:10:e7:8e:66:b3:
d1:8c:bb:9d:f1:bb:65:e0:8b:6f:0b:8e:82:91:2c:
04:5f:74:a6:46:71:5c:24:bc:8c:c6:3c:10:cd:6c:
cd:7a:16:c2:54:32:8a:50:49:97:d9:78:2a:4c:d4:
7f:48:bd:af:f6:a8:4f:bc:07:b5:2b:36:a9:b8:69:
c5:29:c6:5f:9b:d9:9d:bc:9b:37:74:08:3d:fb:af:
11:aa:db:c5:f0:ee:ba:af:d7:46:58:63:d1:f6:cb:
c0:c0:fb:f4:87:28:29:3e:7c:55:b1:20:5f:f0:c6:
cd:5b:43:97:5c:06:f2:dd:85:a3:2d:72:78:7e:34:
f4:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:03:FC:1A:08:12:3F:9B:65:26:66:74:D5:9D:73:81:33:8F:32:DD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/c53cb806-27f4-343a-9db8-41d80aa3f46b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.crl
X509v3 Authority Key Identifier:
keyid:C4:52:EF:29:27:F2:EC:5A:51:3C:C1:72:D6:73:BD:1E:39:05:95:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.cer
sbgp-ipAddrBlock: critical
IPv4:
23.143.104.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:a0:e9:82:d1:e9:7a:14:7e:2e:88:c3:76:56:52:6d:fe:2f:
bf:96:6d:e5:80:47:dd:d6:1e:71:9a:d3:a7:94:9f:2f:0f:99:
f1:58:80:fa:6a:64:cf:49:c5:f5:5b:bb:57:47:6b:c9:04:58:
9d:88:23:0d:80:4b:74:b2:f6:01:ca:70:19:89:e0:27:54:b1:
c1:be:49:f2:b1:ec:67:2b:0a:ff:22:8e:8d:43:fc:1f:58:ab:
5d:e6:f5:fe:1a:52:99:2d:26:9c:c6:67:1b:ce:bf:8c:ac:dd:
d4:de:69:60:f7:51:5b:85:d6:1f:36:c4:dc:15:57:de:06:07:
2b:0b:2e:d7:ac:5f:70:ba:eb:22:65:f7:16:f3:c8:6d:ba:98:
6e:59:50:1c:4b:c6:17:58:bc:04:bb:31:a4:e7:bd:c4:76:fd:
bc:b4:73:75:51:ef:24:fb:87:04:35:5c:a1:44:5e:37:25:c5:
0e:d6:11:2f:45:e1:c2:24:e3:e8:e9:27:fa:8b:4d:55:1a:2e:
d7:07:72:8d:84:5d:1a:26:66:85:4f:ff:76:25:f4:ea:9b:f8:
9c:b0:34:3d:93:c7:12:2a:8a:fb:6a:c1:d6:8c:97:cc:bd:7e:
65:50:45:46:36:2f:63:54:8b:69:be:40:1c:63:55:8f:4d:1a:
69:19:cc:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 04:51:39 2026 by rpki-client