
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b56e7c58-8673-46d1-820d-7d6bfba44d14/78b14097-3771-3a71-86c6-3bdae8d2400f.roa
File: 78b14097-3771-3a71-86c6-3bdae8d2400f.roa (raw, json)
Hash identifier: WNDh/FeVFa05wYIYIjjYWpFDP/ZHGDGYxlOH58wgRJs=
Subject key identifier: 20:06:87:A4:E8:E9:71:1A:C9:96:32:C6:3A:CD:AE:B6:65:9A:B9:20
Certificate issuer: /CN=b56e7c58-8673-46d1-820d-7d6bfba44d14
Certificate serial: 010D0C9F4328584F46A7DB96B6DA24F997A1F700
Authority key identifier: 2D:B7:83:F7:7D:00:75:61:C9:FA:BC:E8:97:28:C8:E0:69:E7:2F:14
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b56e7c58-8673-46d1-820d-7d6bfba44d14.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b56e7c58-8673-46d1-820d-7d6bfba44d14/78b14097-3771-3a71-86c6-3bdae8d2400f.roa
Signing time: Thu 24 Sep 2026 01:00:12 +0000
ROA not before: Thu 24 Sep 2026 01:00:12 +0000
ROA not after: Wed 23 Dec 2026 02:00:12 +0000
asID: 401994
IP address blocks: 23.144.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b56e7c58-8673-46d1-820d-7d6bfba44d14/b56e7c58-8673-46d1-820d-7d6bfba44d14.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b56e7c58-8673-46d1-820d-7d6bfba44d14/b56e7c58-8673-46d1-820d-7d6bfba44d14.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b56e7c58-8673-46d1-820d-7d6bfba44d14.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 01 Oct 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:46:a7:db:96:b6:da:24:f9:97:a1:f7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b56e7c58-8673-46d1-820d-7d6bfba44d14
Validity
Not Before: Sep 24 01:00:12 2026 GMT
Not After : Dec 23 02:00:12 2026 GMT
Subject: CN=00aeed23-9e49-4631-b83a-bee9ca6aa1f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4e:c2:d5:58:3a:15:44:20:1c:c0:44:0b:ad:
38:7c:05:97:3a:b7:7a:36:53:9a:68:2d:93:b8:d1:
fc:a3:e0:6c:cd:75:2b:b8:f7:f5:79:a8:ba:ac:6e:
98:d3:b9:4c:7b:34:59:7b:76:5d:12:83:bb:2d:75:
65:0c:5a:8e:3f:16:20:5d:35:96:54:e5:e5:af:d1:
5d:f2:34:20:2d:a1:0f:c8:06:d2:9a:67:e5:22:21:
b8:7a:fd:5c:22:b7:b9:1c:e8:e8:72:b9:4d:8c:03:
01:e8:ee:20:91:df:a9:17:6c:b9:9a:be:af:75:7a:
ee:90:66:02:e5:b0:65:9a:62:9b:77:33:39:21:5b:
c1:0b:12:a2:cb:2e:ed:32:74:40:e3:9b:02:cd:eb:
ce:ed:59:8b:82:44:a7:99:0a:5e:3c:0c:c3:97:32:
8c:6f:98:3f:f3:97:74:05:91:2c:b4:6e:66:82:34:
87:5f:76:bf:cc:ef:fb:b3:76:c0:74:c4:a1:18:28:
0b:77:91:8e:fb:58:4b:15:0b:f2:b5:39:f7:cf:15:
7a:0a:c3:23:f9:6b:58:87:bc:06:29:d1:15:66:53:
58:5d:19:1c:15:fa:06:d1:2a:c0:24:73:66:cb:27:
2d:22:84:fd:e2:6c:08:45:54:f4:cb:96:83:c4:2a:
8e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:06:87:A4:E8:E9:71:1A:C9:96:32:C6:3A:CD:AE:B6:65:9A:B9:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b56e7c58-8673-46d1-820d-7d6bfba44d14/78b14097-3771-3a71-86c6-3bdae8d2400f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b56e7c58-8673-46d1-820d-7d6bfba44d14/b56e7c58-8673-46d1-820d-7d6bfba44d14.crl
X509v3 Authority Key Identifier:
keyid:2D:B7:83:F7:7D:00:75:61:C9:FA:BC:E8:97:28:C8:E0:69:E7:2F:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/b56e7c58-8673-46d1-820d-7d6bfba44d14.cer
sbgp-ipAddrBlock: critical
IPv4:
23.144.228.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:48:7a:86:c6:7c:35:c9:57:1f:cb:f7:d8:d6:75:c1:81:21:
55:19:50:27:41:d4:d3:86:ab:13:89:82:6f:27:55:4e:19:eb:
6b:b6:34:c6:f2:1a:81:f5:15:45:ab:6c:8d:5e:ab:48:31:8a:
bd:19:33:96:5f:e6:c0:97:57:e4:88:c7:5e:b7:8b:c8:43:fa:
f8:29:a8:c6:af:89:89:71:ac:21:bd:4c:05:38:a7:a9:c3:ef:
9d:93:54:62:90:10:76:9c:84:8e:be:d9:35:dc:3f:17:44:03:
61:26:a4:18:d4:85:0c:bc:0d:57:40:8f:ec:18:93:8c:46:e5:
03:1d:f8:ce:3b:f1:12:6c:62:13:eb:d2:22:1e:75:34:43:b4:
6e:d1:93:45:9a:4f:89:61:a5:6c:b5:30:44:d0:85:7c:6c:f3:
12:93:e4:7c:96:37:13:9e:00:c9:5c:90:39:85:18:31:d0:99:
3a:0e:20:31:03:56:1e:1c:66:b3:c8:e5:24:28:84:8e:35:3e:
14:af:94:17:2a:29:f8:a3:e0:18:b6:b9:33:61:44:c9:e4:e5:
06:e4:83:d8:24:0a:1c:16:54:ec:00:f8:03:02:68:ad:a5:0c:
6c:1b:31:5b:43:1f:a9:a8:0f:0b:fe:04:1c:08:36:3c:ed:72:
bb:28:43:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 15:08:48 2026 by rpki-client