
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/644ba320-53cb-3343-a8c8-84fea857ab0e.roa
File: 644ba320-53cb-3343-a8c8-84fea857ab0e.roa (raw, json)
Hash identifier: AovV/8JGUdw93mcBiTpyg7Qvr1/Q+UVlUqMFI2oHW20=
Subject key identifier: 45:4F:50:D2:90:71:76:70:12:EA:12:62:F5:C8:00:AB:C8:94:11:31
Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial: 010D0C9F4328584E86F4EAB27D1B296B1D8623C0
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/644ba320-53cb-3343-a8c8-84fea857ab0e.roa
Signing time: Fri 17 Jul 2026 09:00:14 +0000
ROA not before: Fri 17 Jul 2026 09:00:14 +0000
ROA not after: Thu 15 Oct 2026 09:00:14 +0000
asID: 394161
IP address blocks: 8.21.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 26 Jul 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:86:f4:ea:b2:7d:1b:29:6b:1d:86:23:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Validity
Not Before: Jul 17 09:00:14 2026 GMT
Not After : Oct 15 09:00:14 2026 GMT
Subject: CN=f8c1b33b-fa5c-4b27-8abf-a76f241bd2a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:09:84:37:38:24:bb:16:05:52:38:c7:50:32:
94:cc:f3:88:5a:4c:cc:e8:44:b5:c3:39:f1:49:f4:
dc:e3:aa:64:8e:fd:02:f1:67:88:ef:77:22:75:f2:
33:1f:5f:e7:52:e4:87:e2:f5:48:83:c6:60:8d:0f:
86:0a:8e:12:59:d7:3f:98:fc:e2:62:3e:e9:cc:e2:
fb:24:2a:b6:fe:ed:6e:a4:97:f3:7b:5c:8d:97:de:
31:31:70:96:68:d3:ea:d8:ba:a6:e5:3d:5e:5b:c8:
9e:fa:d9:bc:f1:4d:47:24:42:81:97:ad:aa:f8:ed:
75:3a:ff:63:38:80:34:0f:c2:0e:f0:53:9d:60:47:
3b:4a:68:f8:86:eb:77:8a:20:c7:42:f7:6d:6e:ee:
ed:db:50:21:96:6b:ce:92:c8:13:85:da:e5:d0:f5:
74:7d:89:91:8b:5e:f8:79:d8:88:c8:91:4f:9d:77:
49:b4:85:68:2d:83:b6:9f:8c:1a:00:6e:07:6e:87:
6a:44:80:97:3c:c9:f7:d9:d0:f2:e1:13:b0:23:e9:
ab:c7:d8:eb:72:5b:34:ef:86:42:c0:5d:15:39:f4:
78:59:0f:38:81:43:de:98:cb:b4:69:94:7f:ea:d7:
c5:4d:ae:3e:0f:09:32:60:56:67:3e:f2:f5:27:1c:
0f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:4F:50:D2:90:71:76:70:12:EA:12:62:F5:C8:00:AB:C8:94:11:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/644ba320-53cb-3343-a8c8-84fea857ab0e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
X509v3 Authority Key Identifier:
keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
sbgp-ipAddrBlock: critical
IPv4:
8.21.14.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:a2:4f:a5:d4:d8:b4:fe:77:3a:c9:d1:7f:e1:72:e2:7a:da:
0c:3d:98:b1:cf:b3:b0:75:b0:e2:06:77:2c:d4:03:65:7c:87:
2a:6b:50:e7:db:8b:ab:33:55:55:83:73:cc:4a:f4:22:02:ea:
c0:93:df:bd:90:78:d9:a2:e2:4a:f2:e2:49:f5:43:2a:2e:f7:
cc:59:78:10:e1:e9:5d:57:b8:dd:1e:96:5a:70:fc:cb:ae:e0:
19:5d:83:2a:5d:cc:8a:9e:ca:c5:5c:a2:dc:38:bc:03:e1:76:
b6:e6:6a:4b:7e:4d:89:86:57:27:26:51:49:6d:3b:c1:5c:ff:
cc:ce:ef:5a:05:36:70:fb:62:fe:5c:6f:3a:b6:18:22:3e:ae:
1f:1a:ce:f8:aa:d7:bf:01:68:cb:3d:e6:99:d4:92:d3:be:e5:
b7:07:9d:21:ba:5a:28:7e:6b:9d:e4:fd:56:70:d7:54:8b:b7:
0c:2e:88:91:44:68:91:b5:c3:50:52:dd:55:f9:f2:96:eb:87:
21:d2:61:67:cf:87:bb:2a:e4:e7:86:6a:49:aa:09:44:1d:22:
04:89:8a:3f:79:e0:35:74:da:98:ce:3c:84:86:84:d2:74:b8:
98:e7:7d:39:db:75:be:ae:dc:d6:1d:0b:b3:c1:18:60:1f:a9:
d9:99:62:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:29:51 2026 by rpki-client