
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a2077046-f4ec-47b5-8973-860e9cbddb69/0f251356-cf96-3213-a9a8-f255012a0362.roa
File: 0f251356-cf96-3213-a9a8-f255012a0362.roa (raw, json)
Hash identifier: gSzvWeNpvzd+nO8IWHjPSmlYUK8FNeJ1vef6mgVHbpY=
Subject key identifier: DB:6C:80:05:21:6B:68:22:23:EE:29:29:02:8B:9B:DC:10:26:F0:B4
Certificate issuer: /CN=a2077046-f4ec-47b5-8973-860e9cbddb69
Certificate serial: 010D0C9F4328584E8C8A42454DD719F7BC50E180
Authority key identifier: 65:75:99:FF:A5:CF:FD:81:64:22:CC:79:51:10:9D:3C:D7:62:37:F8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a2077046-f4ec-47b5-8973-860e9cbddb69.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a2077046-f4ec-47b5-8973-860e9cbddb69/0f251356-cf96-3213-a9a8-f255012a0362.roa
Signing time: Sun 19 Jul 2026 09:00:11 +0000
ROA not before: Sun 19 Jul 2026 09:00:11 +0000
ROA not after: Sat 17 Oct 2026 09:00:11 +0000
asID: 4508
IP address blocks: 23.175.32.0/24 maxlen: 24
155.254.2.0/23 maxlen: 23
198.89.188.0/23 maxlen: 23
2606:d680::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a2077046-f4ec-47b5-8973-860e9cbddb69/a2077046-f4ec-47b5-8973-860e9cbddb69.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a2077046-f4ec-47b5-8973-860e9cbddb69/a2077046-f4ec-47b5-8973-860e9cbddb69.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a2077046-f4ec-47b5-8973-860e9cbddb69.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 26 Jul 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:8c:8a:42:45:4d:d7:19:f7:bc:50:e1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2077046-f4ec-47b5-8973-860e9cbddb69
Validity
Not Before: Jul 19 09:00:11 2026 GMT
Not After : Oct 17 09:00:11 2026 GMT
Subject: CN=0166e877-1b4c-4789-a877-06b6c95a697e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3a:85:c0:38:b5:c7:8a:78:01:8f:15:7e:3e:
10:ae:f5:c8:1f:c0:76:39:ac:b8:7a:b6:00:b8:44:
4f:db:18:47:9f:65:85:71:fc:12:76:74:96:19:49:
3a:84:4a:b2:d0:dc:cd:ea:f0:b7:c7:8f:5b:10:14:
7e:28:8a:b9:e0:e3:a5:a2:88:43:2b:50:68:80:d9:
69:40:21:70:00:e7:8a:c5:f6:c5:b3:57:04:4d:9f:
d1:63:82:3c:37:fd:ce:c0:63:98:66:2f:81:92:b3:
c4:4e:82:9e:a7:2a:1a:68:a9:30:0b:9c:36:10:bd:
ec:a7:d5:f8:c6:23:bd:ca:44:e7:f6:b0:7a:f1:3d:
88:8c:fc:e7:be:a5:23:47:28:7c:f8:cd:84:01:c8:
6e:c6:11:20:fb:5a:e4:52:d2:27:bf:88:ef:40:f4:
5c:5a:27:2b:cc:44:3a:53:a6:25:71:e3:0e:f0:8c:
b1:5f:71:44:86:d4:49:bc:92:10:cf:fb:f2:7e:a5:
27:b0:fe:ef:94:de:44:d7:bf:2e:42:da:3e:62:92:
fb:78:0f:6e:bb:1b:8c:cf:a2:1e:42:5b:37:66:c2:
27:fd:f8:1b:0c:35:97:7d:ff:54:b2:e4:72:af:25:
7c:14:c3:49:f2:d6:ce:98:e0:20:8f:be:f9:6d:54:
91:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:6C:80:05:21:6B:68:22:23:EE:29:29:02:8B:9B:DC:10:26:F0:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a2077046-f4ec-47b5-8973-860e9cbddb69/0f251356-cf96-3213-a9a8-f255012a0362.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a2077046-f4ec-47b5-8973-860e9cbddb69/a2077046-f4ec-47b5-8973-860e9cbddb69.crl
X509v3 Authority Key Identifier:
keyid:65:75:99:FF:A5:CF:FD:81:64:22:CC:79:51:10:9D:3C:D7:62:37:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a2077046-f4ec-47b5-8973-860e9cbddb69.cer
sbgp-ipAddrBlock: critical
IPv4:
23.175.32.0/24
155.254.2.0/23
198.89.188.0/23
IPv6:
2606:d680::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:e1:01:9f:fd:e8:c2:32:1e:3f:db:9f:e9:11:58:97:c1:2f:
23:fb:da:08:f1:4e:cb:68:0d:c8:63:bc:63:f4:76:2b:d9:26:
25:30:f6:0a:de:dc:bc:8d:e0:08:bf:16:b6:34:5a:5e:6b:30:
ce:d8:6b:45:56:6e:1c:9b:b4:fc:f5:e5:6d:81:d0:84:ca:7c:
e4:21:fe:40:19:b0:85:00:5c:d1:6c:88:2a:c2:57:42:72:14:
7f:da:a7:0d:55:e2:a9:68:bc:dc:4f:64:17:12:18:51:f7:49:
8f:dc:ad:6a:b6:25:a2:ef:9b:a2:16:18:c9:04:df:62:a7:dc:
bd:2c:72:cf:95:ef:aa:7c:68:e4:be:e2:51:34:98:25:5a:2c:
c6:89:c7:08:b3:5a:3d:10:89:02:e4:9c:c2:37:d0:69:20:05:
ec:f8:91:ed:80:9c:67:7e:e1:91:a1:9b:5c:6d:10:f2:06:0c:
54:e9:e0:c3:dc:b7:c7:ac:03:22:2a:97:83:fd:4e:81:f7:3d:
72:90:5c:1e:90:4a:88:c2:27:9e:f3:de:84:94:c5:08:e8:ce:
47:4d:27:27:3d:9d:df:e4:0c:1f:41:be:f1:57:ca:ec:8a:8d:
2c:eb:05:1d:47:24:00:84:66:23:ab:1f:6d:39:a0:ef:98:04:
e4:b9:a8:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:23:27 2026 by rpki-client