
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/67086338-d450-446e-8fe5-2b5278af4351/75e181b9-23ec-3254-ac56-b3e09916b45f.roa
File: 75e181b9-23ec-3254-ac56-b3e09916b45f.roa (raw, json)
Hash identifier: a4+JPC9gZM//yzcON9B3L8Eb80O/wzN5EUtYe5GCPyQ=
Subject key identifier: 1E:92:2F:C5:D9:12:78:B6:45:74:47:91:B9:13:2B:E4:19:DD:96:EB
Certificate issuer: /CN=67086338-d450-446e-8fe5-2b5278af4351
Certificate serial: 010D0C9F4328584E97B501A506C7C8D0BC866500
Authority key identifier: F0:B7:87:44:38:08:B2:AF:EF:59:FD:46:BB:E0:2F:93:80:D6:89:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/67086338-d450-446e-8fe5-2b5278af4351.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/67086338-d450-446e-8fe5-2b5278af4351/75e181b9-23ec-3254-ac56-b3e09916b45f.roa
Signing time: Thu 23 Jul 2026 09:00:11 +0000
ROA not before: Thu 23 Jul 2026 09:00:11 +0000
ROA not after: Wed 21 Oct 2026 09:00:11 +0000
asID: 20364
IP address blocks: 23.163.168.0/24 maxlen: 24
2602:fa14::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/67086338-d450-446e-8fe5-2b5278af4351/67086338-d450-446e-8fe5-2b5278af4351.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/67086338-d450-446e-8fe5-2b5278af4351/67086338-d450-446e-8fe5-2b5278af4351.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/67086338-d450-446e-8fe5-2b5278af4351.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:97:b5:01:a5:06:c7:c8:d0:bc:86:65:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67086338-d450-446e-8fe5-2b5278af4351
Validity
Not Before: Jul 23 09:00:11 2026 GMT
Not After : Oct 21 09:00:11 2026 GMT
Subject: CN=fb3451e7-b871-4ace-820f-f9f1367cbc4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:0d:d5:a2:a0:6a:14:1d:c3:df:46:e7:a0:e8:
de:64:7c:71:b8:2d:17:ba:a9:39:e1:16:39:a0:fa:
21:a8:6d:af:b3:4c:ef:fd:9f:78:46:55:22:02:5c:
9c:52:4b:33:c4:a6:8a:1c:74:5f:3c:fd:dc:35:36:
18:0f:b2:e5:80:8e:aa:2e:b4:89:cc:d4:6e:d5:bc:
e4:bc:8e:07:ec:82:17:62:8f:c5:24:71:0f:26:31:
58:d7:34:0c:61:fe:c3:8e:62:7f:da:c0:0a:f6:40:
ee:04:35:c8:9c:07:a8:e6:9b:a8:06:17:f5:30:32:
1c:25:ba:4b:ce:32:c0:be:c7:9f:4b:fc:6f:23:47:
08:45:3d:75:0c:f0:d2:2a:f0:c4:12:45:8d:d8:d2:
31:44:79:6f:f8:08:21:e4:d0:22:ab:8d:56:04:00:
04:17:47:c5:16:24:d3:dc:f6:29:35:42:03:d9:b1:
f6:84:35:f4:cb:6a:9b:69:8d:8c:ac:01:7b:c5:93:
55:ee:df:b8:fd:3f:de:f5:b3:f6:b2:f2:4a:d4:c4:
ab:11:a1:be:29:ba:96:bb:7f:67:b0:70:6e:db:cf:
13:05:5b:92:0a:2e:97:71:04:b3:8d:2b:f9:b9:7e:
36:d5:d1:b8:14:8b:0b:7c:16:d1:5b:08:d3:76:a4:
69:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:92:2F:C5:D9:12:78:B6:45:74:47:91:B9:13:2B:E4:19:DD:96:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/67086338-d450-446e-8fe5-2b5278af4351/75e181b9-23ec-3254-ac56-b3e09916b45f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/67086338-d450-446e-8fe5-2b5278af4351/67086338-d450-446e-8fe5-2b5278af4351.crl
X509v3 Authority Key Identifier:
keyid:F0:B7:87:44:38:08:B2:AF:EF:59:FD:46:BB:E0:2F:93:80:D6:89:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/67086338-d450-446e-8fe5-2b5278af4351.cer
sbgp-ipAddrBlock: critical
IPv4:
23.163.168.0/24
IPv6:
2602:fa14::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:cd:8e:67:64:38:4c:51:df:1d:50:ba:b9:ca:3d:ec:35:9f:
dc:04:9c:d0:a3:68:8d:f6:c2:83:31:64:b6:de:1f:b6:04:6a:
19:b8:82:2e:ca:45:69:c7:8a:0a:b4:4b:f1:e5:be:84:73:dd:
7c:d5:90:ff:8a:f7:58:f2:86:73:5c:91:ed:2f:da:00:85:c2:
9d:eb:a5:08:3d:75:32:95:cf:06:ef:cb:7e:69:e5:43:fd:0a:
5f:9d:b0:1a:41:81:39:e5:23:1c:84:5b:ef:e1:39:d3:bb:b6:
63:a9:c1:98:eb:82:bd:fa:a6:4b:b4:1f:81:3f:1f:d2:47:5a:
08:f9:bd:c6:50:d1:93:ab:a9:ee:06:9f:d5:f7:a7:32:99:25:
4f:4e:fa:d6:07:94:40:c0:0e:2a:9f:b4:4d:b5:70:9f:00:7b:
68:a4:9e:46:d7:1d:08:61:8b:3b:78:2c:d6:f0:44:ac:7b:a5:
79:a5:f4:58:10:86:43:e7:c8:ed:8a:37:50:12:de:11:f6:ab:
1f:f8:7a:96:e6:37:d9:ce:15:fd:bf:50:1e:78:92:d5:9d:44:
7e:d3:59:ca:22:39:74:e1:10:cc:31:f7:40:72:ec:6f:6a:c6:
5e:43:30:3f:cf:3a:58:39:3d:d9:a7:99:2b:2a:54:11:ac:40:
7e:19:f1:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:00:48 2026 by rpki-client