
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717/7623dfb7-9e12-399d-baa6-cca6eaba66c0.roa
File: 7623dfb7-9e12-399d-baa6-cca6eaba66c0.roa (raw, json)
Hash identifier: yEYemF4HvrTLKlM6NfLprIuyk9Lwx2J2ygJIq9ePvNM=
Subject key identifier: 0A:9B:4D:DF:CF:A7:E9:FC:58:9C:77:7D:77:E8:5A:2B:3D:A3:61:28
Certificate issuer: /CN=d06d1174-4bf4-465b-9f0b-1091633e6717
Certificate serial: 010D0C9F4328584F498BEAE0566A8376388E1260
Authority key identifier: F6:38:F7:6A:D8:AA:80:BC:13:3B:15:F3:0D:AE:10:37:32:D0:D0:C7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717/7623dfb7-9e12-399d-baa6-cca6eaba66c0.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 401820
IP address blocks: 23.141.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717/d06d1174-4bf4-465b-9f0b-1091633e6717.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717/d06d1174-4bf4-465b-9f0b-1091633e6717.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 15 Oct 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:8b:ea:e0:56:6a:83:76:38:8e:12:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d06d1174-4bf4-465b-9f0b-1091633e6717
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=495a612a-bc30-487f-8945-24e142cf0a41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:37:8c:a8:fe:ab:53:70:de:29:01:16:69:fe:
23:b8:aa:3c:ec:3f:0f:d4:b1:d4:8e:b8:30:f9:67:
c7:4c:ca:4d:6a:64:73:2b:ed:35:bc:89:09:00:8e:
bc:38:f8:ee:70:31:52:a9:a1:f0:65:45:bf:8d:57:
46:66:88:38:bf:bd:2b:bb:45:dc:df:ab:5f:69:7b:
26:2c:d5:c7:40:89:a7:57:11:87:79:e0:2c:91:cf:
06:b8:29:88:59:10:37:17:a2:7e:8b:b2:38:4c:f8:
a2:8a:a2:6e:8d:01:8c:6d:f2:d4:9e:c4:b0:3d:ad:
55:83:dd:5e:d3:c3:aa:05:2f:db:83:55:93:ea:4a:
33:76:0b:95:ce:0c:14:f5:b0:e0:cf:c5:97:d0:ec:
85:3f:5c:0d:f0:fc:1f:4d:6b:9a:67:d0:45:ad:ce:
c3:03:89:7d:36:9c:df:49:d9:26:3a:af:64:57:e8:
06:a4:0d:79:86:cb:ed:14:40:a7:da:45:d8:2e:4d:
a9:bc:0a:46:1c:88:46:b6:2e:60:48:55:6a:22:73:
61:44:66:bb:22:b7:7d:f9:1a:21:71:70:ae:63:9b:
f3:3b:8e:2c:64:d5:3a:9a:85:47:e7:e5:63:7b:3d:
82:33:02:9e:ca:e0:6b:4a:a8:24:13:c3:8c:95:76:
ba:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:9B:4D:DF:CF:A7:E9:FC:58:9C:77:7D:77:E8:5A:2B:3D:A3:61:28
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717/7623dfb7-9e12-399d-baa6-cca6eaba66c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717/d06d1174-4bf4-465b-9f0b-1091633e6717.crl
X509v3 Authority Key Identifier:
keyid:F6:38:F7:6A:D8:AA:80:BC:13:3B:15:F3:0D:AE:10:37:32:D0:D0:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d06d1174-4bf4-465b-9f0b-1091633e6717.cer
sbgp-ipAddrBlock: critical
IPv4:
23.141.232.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:28:29:2b:bf:2f:77:29:f0:79:b1:3d:1b:11:f4:a1:8b:47:
9b:74:4e:b5:03:4c:d5:e0:5b:2f:20:ee:5e:dd:40:f8:2f:f2:
75:22:0c:f7:7a:74:25:8a:f2:05:17:6f:76:61:60:e4:17:94:
04:1f:9a:30:4a:a4:e8:0f:45:84:2b:dd:59:d9:94:97:3d:45:
00:ea:d2:a6:0a:31:4e:32:cb:65:1a:45:2c:4c:4f:8a:9e:78:
50:7c:ab:22:3d:a1:76:88:9b:7f:80:2f:64:21:89:3e:1f:08:
9a:86:cb:cd:6c:14:d9:eb:44:b6:f0:53:16:8a:8f:ec:d2:45:
5a:b7:64:c2:2a:7d:12:68:4b:d5:ec:cf:3d:78:52:cb:35:a5:
0a:56:67:6f:8f:a4:bf:b2:f5:73:42:8d:52:ad:21:e9:8b:e6:
04:e0:fe:99:a0:ed:c0:87:97:f6:e9:d3:7a:6e:f3:04:bb:2d:
a2:91:15:61:9a:2a:6b:b8:59:e1:46:3e:58:fd:d1:a9:a2:b7:
2a:9c:62:5b:c9:54:54:39:d1:da:55:8f:69:96:93:29:e3:54:
0b:96:3b:aa:e5:db:2a:1f:64:36:bf:5e:d2:ba:2a:f3:73:c0:
ef:df:6e:98:58:c7:80:90:a7:f4:77:1f:96:93:dc:9a:85:c5:
75:cb:34:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 03:52:04 2026 by rpki-client