
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a509a7f2-7b5a-4e82-86cc-217eab093131/efd5b1a7-a066-35e8-b1de-4f3895d78184.roa
File: efd5b1a7-a066-35e8-b1de-4f3895d78184.roa (raw, json)
Hash identifier: QfrWUa/pTDiVL6X4lFBePEk/LcTtyxA6nzZNkKKC2a8=
Subject key identifier: 1A:12:49:DF:56:49:1D:46:05:32:D4:34:75:80:46:D6:15:98:04:A4
Certificate issuer: /CN=a509a7f2-7b5a-4e82-86cc-217eab093131
Certificate serial: 010D0C9F4328584ECA6C8A08DF482035ADC50F80
Authority key identifier: F5:09:E8:F5:08:1E:9C:78:DB:AF:52:A3:00:53:35:94:85:24:8E:EB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a509a7f2-7b5a-4e82-86cc-217eab093131.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a509a7f2-7b5a-4e82-86cc-217eab093131/efd5b1a7-a066-35e8-b1de-4f3895d78184.roa
Signing time: Mon 10 Aug 2026 13:00:12 +0000
ROA not before: Mon 10 Aug 2026 13:00:12 +0000
ROA not after: Sun 08 Nov 2026 14:00:12 +0000
asID: 395173
IP address blocks: 23.149.128.0/23 maxlen: 24
64.239.8.0/21 maxlen: 24
64.239.64.0/22 maxlen: 24
64.239.76.0/22 maxlen: 24
131.226.8.0/22 maxlen: 24
131.226.12.0/24 maxlen: 24
131.226.13.0/24 maxlen: 24
131.226.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a509a7f2-7b5a-4e82-86cc-217eab093131/a509a7f2-7b5a-4e82-86cc-217eab093131.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a509a7f2-7b5a-4e82-86cc-217eab093131/a509a7f2-7b5a-4e82-86cc-217eab093131.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a509a7f2-7b5a-4e82-86cc-217eab093131.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 24 Aug 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:ca:6c:8a:08:df:48:20:35:ad:c5:0f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a509a7f2-7b5a-4e82-86cc-217eab093131
Validity
Not Before: Aug 10 13:00:12 2026 GMT
Not After : Nov 8 14:00:12 2026 GMT
Subject: CN=1e781411-7734-4741-a441-94b71e26ce63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3a:3d:18:20:da:9b:c2:d3:e4:53:8d:5b:89:
3c:e1:5d:1b:ef:84:6c:1e:ec:b2:c9:be:6a:f2:7d:
87:a0:e8:a5:1d:de:c6:50:02:e0:63:be:ec:fa:5c:
3f:92:cd:bf:de:72:78:98:69:5d:b2:55:16:83:37:
94:4f:38:62:a2:bd:11:f3:bb:72:8b:f6:75:0b:09:
1c:c9:86:85:7b:0a:38:d0:dc:31:61:dc:5d:11:3f:
4f:0a:6d:77:4d:b5:9f:86:4e:73:19:e6:5b:29:2c:
69:5f:f2:d2:ad:b7:b0:c4:20:9a:25:9b:c6:fe:a6:
81:b9:ff:6c:ca:8d:f6:6a:26:56:37:b6:8b:b4:10:
80:70:35:71:6c:bd:e7:83:90:a3:39:91:b3:fd:36:
1a:18:01:36:89:8d:19:7f:29:8a:46:3b:e0:ae:6b:
16:ad:72:e5:c7:22:ed:16:af:6b:03:8a:92:60:18:
73:6a:3d:55:c1:a3:ad:29:8a:42:71:2c:fb:f8:a6:
7c:a9:54:b3:1b:b0:2b:55:36:91:4d:1e:0e:bd:9a:
e0:e7:5d:0b:e3:ee:90:8f:d9:4f:5a:9e:13:d5:d7:
e1:68:30:56:0e:63:37:73:ae:00:59:2e:aa:20:b4:
ab:0b:cf:ee:84:8a:e2:56:c8:a4:3b:0d:92:0b:41:
cc:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:12:49:DF:56:49:1D:46:05:32:D4:34:75:80:46:D6:15:98:04:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a509a7f2-7b5a-4e82-86cc-217eab093131/efd5b1a7-a066-35e8-b1de-4f3895d78184.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a509a7f2-7b5a-4e82-86cc-217eab093131/a509a7f2-7b5a-4e82-86cc-217eab093131.crl
X509v3 Authority Key Identifier:
keyid:F5:09:E8:F5:08:1E:9C:78:DB:AF:52:A3:00:53:35:94:85:24:8E:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a509a7f2-7b5a-4e82-86cc-217eab093131.cer
sbgp-ipAddrBlock: critical
IPv4:
23.149.128.0/23
64.239.8.0/21
64.239.64.0/22
64.239.76.0/22
131.226.8.0-131.226.14.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:f6:12:cb:72:be:85:49:34:4d:ba:b3:2e:5e:76:51:3a:ca:
c7:5a:ed:25:68:42:01:08:f3:53:cd:f0:59:f7:fc:49:b2:50:
cf:fd:54:5b:8d:06:a8:58:18:99:aa:62:c2:16:92:be:e1:6b:
43:4c:c7:f4:12:b7:91:9f:21:b1:0e:e6:ca:c3:4f:7d:a1:4d:
c7:cc:ba:97:a0:49:26:2d:91:31:78:28:9b:38:cb:8a:e4:10:
d2:85:d1:f6:6d:74:62:0b:12:48:b1:1d:43:e9:83:84:99:ba:
cb:14:9b:d9:23:3e:1d:94:57:1d:4e:f1:39:3f:26:57:1d:da:
c2:b1:c4:e8:f5:83:aa:29:2d:0f:16:0f:2d:f3:61:ed:bd:35:
29:26:1f:f2:b4:17:84:cc:56:ed:93:49:b5:13:eb:7d:02:6f:
0d:1a:e8:2a:bb:9e:39:a3:63:a6:3c:d9:9d:c4:0b:00:40:70:
df:68:c0:39:00:07:c4:90:2b:22:97:ff:d1:e4:8a:24:a7:c1:
4a:43:59:7a:6c:7d:b1:6e:13:8d:b2:18:78:63:57:8a:00:eb:
4a:af:47:29:96:26:23:39:94:ab:96:06:c0:72:c4:92:1f:73:
d9:68:a0:d5:a9:5e:0c:76:75:a1:8e:23:84:1d:eb:e5:57:22:
01:2f:4b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 20:21:57 2026 by rpki-client