
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/c73d959c-2ff5-3551-9e0d-c0caee4e7ba9.roa
File: c73d959c-2ff5-3551-9e0d-c0caee4e7ba9.roa (raw, json)
Hash identifier: Xk8VcceAlxhX383ejgb72TTur5ZV/WPoEDxOLoEaYB4=
Subject key identifier: 0C:F8:D3:F8:24:BE:60:58:50:73:F2:59:36:8B:D7:EE:61:94:96:B5
Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial: 010D0C9F4328584F5F19DAC843BDB5B84261B800
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/c73d959c-2ff5-3551-9e0d-c0caee4e7ba9.roa
Signing time: Fri 02 Oct 2026 19:09:20 +0000
ROA not before: Fri 02 Oct 2026 19:09:20 +0000
ROA not after: Thu 31 Dec 2026 20:09:20 +0000
asID: 401506
IP address blocks: 8.28.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 16 Oct 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:5f:19:da:c8:43:bd:b5:b8:42:61:b8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Validity
Not Before: Oct 2 19:09:20 2026 GMT
Not After : Dec 31 20:09:20 2026 GMT
Subject: CN=f572cde4-7b08-4c2c-a8f1-cf727ce4d472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:dc:fd:59:da:82:2a:34:ea:1b:61:f4:52:a7:
c3:1d:5d:8b:cb:cf:4f:f3:87:c9:de:48:f2:17:90:
1e:8e:8d:cc:24:77:53:a3:4b:69:bd:b1:f2:47:d9:
11:44:51:ea:73:f0:53:45:2f:26:5d:82:47:df:69:
29:22:20:bb:45:aa:c0:52:38:d8:99:2e:35:ca:3c:
3b:86:81:e8:0c:a8:bd:b8:65:90:13:55:86:70:53:
45:dd:3e:df:68:16:9f:3f:28:5b:ef:fe:dc:2d:af:
b8:4e:65:64:7f:14:cc:d3:2b:30:4a:ed:72:8b:2f:
38:8d:d8:e6:ec:6f:aa:fe:a4:98:21:ff:f0:c9:79:
99:1f:a1:45:3d:8d:55:df:39:f8:c0:9d:d3:c7:1e:
bc:fc:91:93:0c:f9:62:5b:9b:58:d7:9e:87:ea:bd:
16:2e:4d:62:b3:af:7c:b9:8a:9a:3f:83:e4:89:1e:
b1:d9:0a:dd:8f:0c:13:de:aa:e3:6c:1b:7f:3b:1e:
75:b1:b5:55:1d:e1:3a:81:ac:e5:1f:c1:ee:33:b6:
6a:b5:f6:09:f4:f0:b0:b3:ad:ce:ec:44:1a:da:32:
d6:ae:a2:6b:d2:57:d8:95:99:90:a9:3c:8b:67:de:
a1:21:95:c7:e5:89:d9:10:21:f4:fd:16:07:10:17:
b3:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:F8:D3:F8:24:BE:60:58:50:73:F2:59:36:8B:D7:EE:61:94:96:B5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/c73d959c-2ff5-3551-9e0d-c0caee4e7ba9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
X509v3 Authority Key Identifier:
keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
sbgp-ipAddrBlock: critical
IPv4:
8.28.34.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:7e:63:f9:47:2b:25:78:04:51:13:4e:cf:45:49:10:d0:9a:
dc:0f:63:d4:37:fb:e8:a5:9e:e2:e3:08:8a:3c:fb:9b:8c:e8:
67:31:00:f3:21:b4:4e:36:1a:a4:fd:11:fb:ac:c4:85:bf:d5:
21:95:44:ec:b1:da:13:d6:1d:62:c1:b4:26:71:d8:2e:d9:e2:
44:5a:fd:e2:5d:d0:ca:32:fd:5d:7b:14:f9:22:28:d2:64:0b:
5a:87:69:4d:8b:78:db:1b:3c:0f:04:33:4d:6f:e5:4d:da:90:
20:a0:41:30:15:83:ed:48:e2:e6:1f:65:e2:da:f0:a9:ae:4e:
a4:73:11:75:6a:7f:79:60:72:cc:b5:ac:a1:59:d4:6f:13:fa:
d9:39:8b:9b:42:11:72:54:71:8b:c4:4d:04:fc:6f:78:12:fd:
2e:6d:a0:9e:53:ac:dc:52:c1:22:0b:1a:fb:b3:6e:2a:bd:35:
96:8d:96:fb:3a:02:00:c3:fa:5a:31:9b:e0:98:3c:9e:e9:e8:
4d:39:06:64:f7:6c:06:b6:9b:b3:f7:b8:ab:0e:0f:73:8c:44:
04:fd:c6:af:af:83:c8:82:aa:cd:47:c4:a4:bd:5e:e1:10:45:
c8:87:a2:c8:7b:2c:11:f8:d3:0d:d6:56:79:53:0d:ca:0a:c1:
bd:44:f2:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 01:58:20 2026 by rpki-client