
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e1c66f08-5c7f-40e3-8548-bff01ed700d5/4fa2c668-4824-3485-a970-ba019a4f4f2f.roa
File: 4fa2c668-4824-3485-a970-ba019a4f4f2f.roa (raw, json)
Hash identifier: FGxl1bPpl0RgNRXXsg93ghLgewp2VC4qWhG3W6am4OQ=
Subject key identifier: 8F:31:E6:40:1B:C5:E9:5C:9F:9F:A9:02:89:31:C7:E6:DC:1B:EA:57
Certificate issuer: /CN=e1c66f08-5c7f-40e3-8548-bff01ed700d5
Certificate serial: 010D0C9F4328584EB2B1FB644F36947B49A0F500
Authority key identifier: 2B:01:3A:6A:59:99:92:D2:4B:EF:36:05:2F:65:6B:EC:D2:D7:1E:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e1c66f08-5c7f-40e3-8548-bff01ed700d5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e1c66f08-5c7f-40e3-8548-bff01ed700d5/4fa2c668-4824-3485-a970-ba019a4f4f2f.roa
Signing time: Sun 02 Aug 2026 01:00:11 +0000
ROA not before: Sun 02 Aug 2026 01:00:11 +0000
ROA not after: Sat 31 Oct 2026 01:00:11 +0000
asID: 3257
IP address blocks: 23.140.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e1c66f08-5c7f-40e3-8548-bff01ed700d5/e1c66f08-5c7f-40e3-8548-bff01ed700d5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e1c66f08-5c7f-40e3-8548-bff01ed700d5/e1c66f08-5c7f-40e3-8548-bff01ed700d5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e1c66f08-5c7f-40e3-8548-bff01ed700d5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 05 Aug 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:b2:b1:fb:64:4f:36:94:7b:49:a0:f5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1c66f08-5c7f-40e3-8548-bff01ed700d5
Validity
Not Before: Aug 2 01:00:11 2026 GMT
Not After : Oct 31 01:00:11 2026 GMT
Subject: CN=ea72b346-f805-44a6-b00d-3494376fe019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:52:ad:3b:9d:6e:4e:d7:b6:4d:75:23:a6:fc:
70:5b:da:71:97:1b:19:df:dc:37:d5:9f:89:b1:fe:
0c:cc:c0:b9:22:be:01:2a:3a:ac:54:34:a4:37:f1:
a2:c3:69:76:23:9f:95:2c:1d:e9:ee:76:9f:03:7f:
fa:66:97:ae:85:28:9d:2c:f5:a7:03:ea:58:8d:cc:
33:3e:cc:1e:ab:a4:f4:7c:6f:f9:7f:02:7c:61:64:
7f:be:17:81:02:f0:e6:db:f3:81:66:e8:8b:d6:dd:
43:ef:4b:6c:d2:97:48:41:6c:97:9b:bb:8c:f9:a7:
d7:02:91:96:00:a2:84:d5:c6:03:14:18:5b:1a:50:
ed:47:cf:7d:da:fd:7f:85:2a:f2:50:74:b4:95:d9:
ce:d6:d0:31:7f:e5:da:31:17:16:05:ec:63:a4:50:
89:ba:5a:95:35:63:4d:1b:cf:7d:d8:55:6c:b1:3f:
56:a5:58:ff:8e:40:8d:4a:f2:62:c1:9b:9c:6a:47:
c8:43:ad:02:4c:5c:6b:cb:d6:e2:77:55:ac:fe:12:
e6:be:28:6b:1a:cc:c2:6d:f6:1e:54:e2:a1:fa:be:
54:4a:c6:4d:58:2d:6c:3c:c8:a3:56:ae:8b:58:c8:
43:f2:69:f8:88:ab:e0:38:a1:78:0d:7d:44:48:6c:
ea:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:31:E6:40:1B:C5:E9:5C:9F:9F:A9:02:89:31:C7:E6:DC:1B:EA:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e1c66f08-5c7f-40e3-8548-bff01ed700d5/4fa2c668-4824-3485-a970-ba019a4f4f2f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e1c66f08-5c7f-40e3-8548-bff01ed700d5/e1c66f08-5c7f-40e3-8548-bff01ed700d5.crl
X509v3 Authority Key Identifier:
keyid:2B:01:3A:6A:59:99:92:D2:4B:EF:36:05:2F:65:6B:EC:D2:D7:1E:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e1c66f08-5c7f-40e3-8548-bff01ed700d5.cer
sbgp-ipAddrBlock: critical
IPv4:
23.140.204.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:4e:92:92:61:7d:3f:7b:82:f2:86:50:2c:5a:66:af:92:03:
1a:a8:ce:33:ab:e1:0d:85:ad:1a:16:1e:bd:02:0a:89:2a:ce:
b8:df:5a:5b:c8:4c:49:bf:b9:56:04:28:c5:c7:01:13:3f:c5:
5f:bc:ef:4e:0c:09:9e:2a:f8:40:ae:6e:25:90:eb:50:18:b1:
ae:21:c7:13:81:0e:f6:90:9b:cd:1f:29:d4:cc:89:d9:7a:cc:
3a:68:b0:cb:86:58:60:d0:f0:f6:34:26:87:da:f9:b9:16:fd:
21:f5:57:7f:5a:4e:59:ae:ce:3a:de:a0:c8:4c:ff:9e:c4:a3:
16:7d:83:f2:9b:ed:7d:17:86:37:e7:46:ca:88:30:2c:cd:72:
d8:f2:2c:87:ab:2e:58:97:24:59:a3:ba:38:25:f5:e6:13:8f:
65:65:1c:92:56:35:67:36:c3:c1:c7:6a:c3:3d:68:d7:80:87:
e8:50:36:2b:48:c3:23:0f:ed:5c:04:84:8e:bb:9c:19:82:15:
6c:58:40:7b:b8:6b:5f:a4:78:bd:0d:4c:5a:42:21:3e:f4:57:
b4:77:be:13:75:b4:b4:a0:38:32:2b:6f:17:8e:c6:15:82:3c:
f5:cb:45:d4:51:6c:fc:4c:e1:b5:6f:5c:c0:6d:af:a8:a2:3f:
60:85:f7:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 00:23:21 2026 by rpki-client