
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/650b72dd-c9d5-4ba4-83bc-e65b61b6aa7c/b6824052-8ce4-3e2b-b21f-17b72e30cdc0.roa
File: b6824052-8ce4-3e2b-b21f-17b72e30cdc0.roa (raw, json)
Hash identifier: KgdLIS/N/cdILBmMQRu1ekj3ltTh8GvHjl8zMKWfrxM=
Subject key identifier: 28:71:5C:14:19:8F:F7:E2:A9:B8:D6:9A:9B:A6:75:62:75:A5:A1:C9
Certificate issuer: /CN=650b72dd-c9d5-4ba4-83bc-e65b61b6aa7c
Certificate serial: 010D0C9F4328584F4F07EEAF86B8C66E6647523A
Authority key identifier: 20:CB:1A:25:77:55:9B:9C:8A:AE:F4:F7:C6:AF:11:05:DB:5E:B1:B9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/650b72dd-c9d5-4ba4-83bc-e65b61b6aa7c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/650b72dd-c9d5-4ba4-83bc-e65b61b6aa7c/b6824052-8ce4-3e2b-b21f-17b72e30cdc0.roa
Signing time: Sun 27 Sep 2026 01:00:12 +0000
ROA not before: Sun 27 Sep 2026 01:00:12 +0000
ROA not after: Sat 26 Dec 2026 02:00:12 +0000
asID: 400359
IP address blocks: 23.129.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/650b72dd-c9d5-4ba4-83bc-e65b61b6aa7c/650b72dd-c9d5-4ba4-83bc-e65b61b6aa7c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/650b72dd-c9d5-4ba4-83bc-e65b61b6aa7c/650b72dd-c9d5-4ba4-83bc-e65b61b6aa7c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/650b72dd-c9d5-4ba4-83bc-e65b61b6aa7c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:4f:07:ee:af:86:b8:c6:6e:66:47:52:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=650b72dd-c9d5-4ba4-83bc-e65b61b6aa7c
Validity
Not Before: Sep 27 01:00:12 2026 GMT
Not After : Dec 26 02:00:12 2026 GMT
Subject: CN=0af95c2d-eb9b-4e1e-80da-aa00217f6925
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cb:3a:f6:cf:17:63:e6:3a:bf:88:d8:93:b6:
0b:1e:69:87:e3:0d:4b:28:3a:ac:4d:01:af:93:5b:
74:92:6f:95:95:86:94:91:8b:6a:3b:f6:7f:ab:e0:
8b:a1:31:0c:72:8c:03:d5:cb:f2:92:96:44:3b:14:
5a:b5:be:06:24:1c:d1:4a:01:71:ce:a3:af:c0:e2:
44:a1:d2:7b:87:63:bc:4d:5b:81:00:10:f8:e9:99:
cd:6c:8e:f0:66:21:a0:c8:5e:41:fd:aa:21:48:92:
b0:58:fc:59:37:33:5f:1f:4d:39:78:c5:98:f5:61:
29:1d:74:d3:87:02:62:48:a5:88:dc:f4:42:23:18:
61:1b:02:b3:69:db:f4:e7:6c:1a:32:c4:07:ee:c7:
b5:64:5c:54:70:b7:11:73:ed:d9:71:20:70:5b:bd:
ea:7d:4a:05:82:f0:24:06:31:40:5d:82:84:31:1e:
9d:69:7c:37:80:47:a6:df:bf:63:39:d7:f9:97:26:
a6:18:99:8f:00:1b:ea:3d:4e:b5:3a:7a:ab:3c:72:
9a:e5:a6:49:f3:9c:b7:08:f5:9b:d9:84:44:7c:3c:
ce:80:dc:da:0f:b6:99:90:14:72:b3:a9:cd:7f:01:
e0:2b:4f:b5:d8:8e:f6:e3:83:ee:bf:77:6b:88:70:
f7:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:71:5C:14:19:8F:F7:E2:A9:B8:D6:9A:9B:A6:75:62:75:A5:A1:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/650b72dd-c9d5-4ba4-83bc-e65b61b6aa7c/b6824052-8ce4-3e2b-b21f-17b72e30cdc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/650b72dd-c9d5-4ba4-83bc-e65b61b6aa7c/650b72dd-c9d5-4ba4-83bc-e65b61b6aa7c.crl
X509v3 Authority Key Identifier:
keyid:20:CB:1A:25:77:55:9B:9C:8A:AE:F4:F7:C6:AF:11:05:DB:5E:B1:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/650b72dd-c9d5-4ba4-83bc-e65b61b6aa7c.cer
sbgp-ipAddrBlock: critical
IPv4:
23.129.168.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:0d:ba:ad:8e:a7:ab:54:3f:53:95:57:2c:3c:0c:d3:27:0c:
a9:7d:de:cf:b6:39:55:05:05:9e:29:14:0a:5d:6a:31:e3:69:
d5:1e:40:96:d0:74:aa:7b:81:a9:02:e2:71:a6:7c:88:9b:91:
2a:67:68:ec:f0:28:fe:60:f2:aa:29:16:55:b2:48:f2:a4:f9:
ba:06:5c:69:93:fd:9a:75:d1:92:c1:64:64:bb:2a:31:87:f1:
af:02:af:be:bb:d2:b5:97:0e:33:9c:df:c4:ae:ed:71:d6:f5:
3b:6a:91:a0:eb:ec:81:05:4b:65:18:b2:8b:a0:0c:89:77:ab:
4c:13:c8:06:d2:59:61:c3:fc:bd:1c:81:76:90:c9:5a:ee:be:
cf:4e:6f:8e:2f:09:c9:ab:f7:fb:62:f8:f5:1f:97:c5:2e:0a:
61:27:b0:08:f5:37:a1:99:38:b3:dc:73:06:c5:9b:eb:1b:12:
a5:ab:6d:ff:d9:4f:d8:2c:a1:ee:ee:23:22:70:3f:2c:61:8f:
e4:af:18:27:2f:a3:76:0c:e7:8c:8c:61:df:77:4c:b4:d2:59:
8d:e7:a7:ad:46:99:42:0f:3e:24:fe:c3:bc:2d:45:dc:eb:da:
3b:ce:99:05:70:25:fe:84:8a:54:25:97:8f:45:b5:15:bc:b8:
ed:e0:2f:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:12:13 2026 by rpki-client