
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccba4c8d-2584-485e-91b3-1671bcfa81b2/d966c9f0-9be2-3d51-9991-195024ed1379.roa
File: d966c9f0-9be2-3d51-9991-195024ed1379.roa (raw, json)
Hash identifier: jujzUTW/Ol2/SKYdwjsj5SamgCpAH1CYBWHq3m35644=
Subject key identifier: 4B:E6:DB:8A:58:2C:25:29:FD:21:50:B9:6F:AC:4C:5A:98:9B:B4:6A
Certificate issuer: /CN=ccba4c8d-2584-485e-91b3-1671bcfa81b2
Certificate serial: 010D0C9F4328584E5FDF57145D415892BC3BA2C0
Authority key identifier: F5:6E:46:B0:09:1A:3F:E2:11:DA:81:E6:D6:0C:FB:B5:41:0B:CA:BC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccba4c8d-2584-485e-91b3-1671bcfa81b2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccba4c8d-2584-485e-91b3-1671bcfa81b2/d966c9f0-9be2-3d51-9991-195024ed1379.roa
Signing time: Fri 03 Jul 2026 09:00:12 +0000
ROA not before: Fri 03 Jul 2026 09:00:12 +0000
ROA not after: Thu 01 Oct 2026 09:00:12 +0000
asID: 16509
IP address blocks: 23.143.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccba4c8d-2584-485e-91b3-1671bcfa81b2/ccba4c8d-2584-485e-91b3-1671bcfa81b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccba4c8d-2584-485e-91b3-1671bcfa81b2/ccba4c8d-2584-485e-91b3-1671bcfa81b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccba4c8d-2584-485e-91b3-1671bcfa81b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 26 Jul 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:5f:df:57:14:5d:41:58:92:bc:3b:a2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccba4c8d-2584-485e-91b3-1671bcfa81b2
Validity
Not Before: Jul 3 09:00:12 2026 GMT
Not After : Oct 1 09:00:12 2026 GMT
Subject: CN=39af58fb-a326-4fcc-ba44-0e1a23d4d674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:be:2e:11:08:a7:20:ef:96:7c:33:a0:85:aa:
d5:df:7e:2d:32:f4:50:32:c8:ca:9c:0c:a8:e7:e5:
85:b0:ef:25:c7:ad:f7:9e:ce:ae:c7:5e:76:a7:37:
57:02:f4:e2:17:1d:6f:f6:4d:62:09:42:07:ca:b3:
ad:a8:60:4f:93:fe:ad:61:b7:b7:81:aa:c4:90:05:
c2:b9:83:15:8b:f8:78:82:15:29:09:15:06:f4:2f:
10:38:0e:94:d3:16:e2:44:ff:5c:47:b3:60:fd:52:
50:6b:7a:bd:30:33:6d:da:e9:ff:56:57:60:af:0e:
9d:75:e9:eb:33:02:4b:d6:68:01:2f:53:e3:b6:16:
fc:33:89:88:c0:95:23:18:df:bf:31:f9:de:c6:e6:
22:d9:ee:21:e9:46:85:0f:a4:0d:02:c0:84:2a:94:
af:40:01:2a:e1:6d:b7:1b:1d:08:19:33:9f:1e:c4:
9e:4f:7f:c6:bb:be:a8:a4:e5:d4:c6:ba:f9:ca:72:
2f:2a:d7:2c:6e:a7:2a:de:2c:22:23:6c:2f:f0:c0:
84:d4:da:ef:91:11:ba:fa:c5:b4:6f:e7:f6:f0:f4:
82:08:4c:8f:fb:05:61:6f:d4:b2:61:6e:63:30:9e:
b2:9c:ed:41:5e:28:aa:c8:28:67:c3:ac:f2:0f:9a:
46:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:E6:DB:8A:58:2C:25:29:FD:21:50:B9:6F:AC:4C:5A:98:9B:B4:6A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccba4c8d-2584-485e-91b3-1671bcfa81b2/d966c9f0-9be2-3d51-9991-195024ed1379.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccba4c8d-2584-485e-91b3-1671bcfa81b2/ccba4c8d-2584-485e-91b3-1671bcfa81b2.crl
X509v3 Authority Key Identifier:
keyid:F5:6E:46:B0:09:1A:3F:E2:11:DA:81:E6:D6:0C:FB:B5:41:0B:CA:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ccba4c8d-2584-485e-91b3-1671bcfa81b2.cer
sbgp-ipAddrBlock: critical
IPv4:
23.143.236.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:d1:11:f0:27:0e:70:83:95:3d:af:28:04:2b:3f:ce:e6:2e:
d4:13:56:4a:7b:d1:6a:c2:73:a7:5d:2c:ee:a5:2e:a3:ac:1b:
36:5b:65:da:97:7d:48:af:42:01:cf:ed:76:59:67:66:8f:5b:
87:7d:40:09:77:f1:d1:b9:e7:9d:8f:f2:d7:87:03:94:89:65:
6e:5d:72:6e:cd:02:fc:b7:cb:3f:98:62:5b:bd:87:5e:7a:4a:
ca:f7:0f:14:bf:7f:74:f0:1c:c1:7a:93:59:f7:c7:7d:19:b5:
ac:89:94:7e:6e:31:c9:cd:86:c7:64:c6:b3:17:2f:f8:18:bf:
8f:af:82:1a:75:02:0f:99:2a:de:e2:a3:5c:97:ff:ed:51:61:
e3:82:78:8b:3c:2a:6b:24:56:1d:e6:8c:da:ae:24:07:9b:0c:
fb:d1:ea:f1:93:71:0e:cd:1e:77:33:bf:b4:7f:d3:37:41:de:
00:9d:b7:a1:5e:03:b3:82:a1:ad:93:19:98:a3:0c:85:a1:63:
18:b6:3e:ba:50:0f:13:bd:23:6d:32:95:7e:12:de:47:f9:95:
25:ad:32:a8:7a:d2:24:f9:ef:20:25:9c:a3:a7:0d:54:4a:82:
fb:d8:21:a8:79:44:11:80:aa:35:6c:0c:5c:f6:42:a8:db:c1:
8f:a0:1c:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:46:06 2026 by rpki-client