
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1bd0891d-6973-4c6e-a3f9-2c0866e229a1/db99c048-07db-367d-a8d7-c60896aca161.roa
File: db99c048-07db-367d-a8d7-c60896aca161.roa (raw, json)
Hash identifier: Jc1MmjaQbCkb2/Zl4DPjnwFguBS5H6pbv8hOgOcpsUk=
Subject key identifier: FF:3D:29:19:FC:31:79:61:7B:2E:2E:18:EB:E3:55:95:92:AC:21:46
Certificate issuer: /CN=1bd0891d-6973-4c6e-a3f9-2c0866e229a1
Certificate serial: 010D0C9F4328584F506D413F21165ECB8365D100
Authority key identifier: 35:09:98:B4:82:D7:06:45:56:5F:77:A3:0B:70:A1:93:AC:66:7B:55
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1bd0891d-6973-4c6e-a3f9-2c0866e229a1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1bd0891d-6973-4c6e-a3f9-2c0866e229a1/db99c048-07db-367d-a8d7-c60896aca161.roa
Signing time: Sun 27 Sep 2026 13:00:12 +0000
ROA not before: Sun 27 Sep 2026 13:00:12 +0000
ROA not after: Sat 26 Dec 2026 14:00:12 +0000
asID: 979
IP address blocks: 23.141.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1bd0891d-6973-4c6e-a3f9-2c0866e229a1/1bd0891d-6973-4c6e-a3f9-2c0866e229a1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1bd0891d-6973-4c6e-a3f9-2c0866e229a1/1bd0891d-6973-4c6e-a3f9-2c0866e229a1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1bd0891d-6973-4c6e-a3f9-2c0866e229a1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 06 Nov 2026 07:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:50:6d:41:3f:21:16:5e:cb:83:65:d1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bd0891d-6973-4c6e-a3f9-2c0866e229a1
Validity
Not Before: Sep 27 13:00:12 2026 GMT
Not After : Dec 26 14:00:12 2026 GMT
Subject: CN=d9f810a5-5ee4-4e06-bc3d-fb3c45411ec3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ab:1b:13:82:6d:9a:ea:e4:bc:3f:55:04:2e:
70:a4:0d:08:b4:a7:e3:88:fe:3d:3c:10:47:87:5e:
7d:8d:46:69:6c:51:47:88:af:27:9b:92:11:fc:cb:
25:0d:40:08:28:8e:ec:8c:d2:9e:cb:3e:d5:2e:1b:
1c:07:da:5d:18:11:fc:18:ec:e6:28:0d:d4:3e:d6:
f6:99:95:85:89:2b:78:4f:cf:e2:9c:9f:14:46:7f:
d1:26:7b:9f:45:f4:b9:84:31:1c:d0:c9:b7:dd:67:
f6:54:0a:91:3c:63:cd:46:ba:8e:c6:aa:66:e9:db:
b8:e4:20:de:11:45:c0:9e:97:64:1f:26:f7:9a:d4:
f3:95:22:d7:1a:8b:7b:45:f9:2f:4f:7d:24:cc:d6:
c6:b8:f1:73:b7:78:cb:28:4c:5c:0c:fa:49:13:3d:
d6:26:86:21:55:07:48:38:52:6c:30:cd:c4:da:28:
d3:05:83:cf:e1:ae:24:c5:fd:c4:30:1f:37:37:25:
64:9c:46:27:a7:e3:ba:85:88:2e:7b:fb:89:1e:37:
c5:5c:aa:98:fa:25:06:9a:3f:4b:45:4a:71:5f:37:
90:59:ea:eb:10:d6:0c:bc:77:b9:84:b6:32:7a:a4:
4b:25:e9:4b:f6:a3:4b:05:50:78:29:e4:dc:fc:6d:
b4:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:3D:29:19:FC:31:79:61:7B:2E:2E:18:EB:E3:55:95:92:AC:21:46
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1bd0891d-6973-4c6e-a3f9-2c0866e229a1/db99c048-07db-367d-a8d7-c60896aca161.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1bd0891d-6973-4c6e-a3f9-2c0866e229a1/1bd0891d-6973-4c6e-a3f9-2c0866e229a1.crl
X509v3 Authority Key Identifier:
keyid:35:09:98:B4:82:D7:06:45:56:5F:77:A3:0B:70:A1:93:AC:66:7B:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1bd0891d-6973-4c6e-a3f9-2c0866e229a1.cer
sbgp-ipAddrBlock: critical
IPv4:
23.141.172.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:1f:c2:f8:a4:81:b9:c5:f7:d5:92:1a:7d:ce:b7:d6:89:f2:
d7:b2:64:fe:8a:80:df:dd:44:72:51:dd:ee:e8:0f:5d:81:55:
b6:c3:ab:5d:7b:ca:e4:e3:02:30:0f:ba:e1:3d:3c:5e:57:b0:
da:78:6a:6c:9a:40:13:c2:56:45:e9:4d:7e:e7:26:2b:a8:f7:
92:1a:2d:dc:ac:ab:41:cf:14:93:e2:f6:eb:66:55:06:0a:d7:
ad:ba:65:af:02:9b:d4:cc:5b:35:df:65:c2:f6:bc:b1:ce:61:
38:a8:d6:f0:19:37:61:d2:ab:62:ea:24:ac:7b:1d:fe:36:47:
ec:4a:f9:d4:71:9c:7c:d1:3d:46:fb:b0:8b:c5:01:7e:eb:6e:
8c:44:c3:c8:fd:64:bd:94:74:fb:08:21:9f:4b:5c:fd:28:cb:
22:08:c6:f4:ca:62:e9:f9:90:6c:ea:9f:5b:f4:2b:bc:3c:62:
d8:34:fd:ca:3f:7b:2f:35:1b:9e:ab:d2:11:d9:00:ad:2d:67:
ef:0b:81:1f:2e:cf:26:0f:e9:10:29:cf:f5:9a:d7:c5:07:11:
11:30:7c:53:56:15:c4:81:41:a1:3e:ee:77:9a:1a:c0:7d:5f:
72:2d:b6:fd:d7:10:81:09:4f:9e:e9:7d:42:a8:90:f7:d0:a8:
c1:68:e8:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 04:42:16 2026 by rpki-client