
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66/99dd9df1-85c8-3156-9ead-c836be3c6a64.roa
File: 99dd9df1-85c8-3156-9ead-c836be3c6a64.roa (raw, json)
Hash identifier: 6JADbk/K+lpg/ObOV6gdiGUjzaXJE1FkB8BGhfcCa88=
Subject key identifier: E5:D9:7E:59:33:D8:34:0B:86:99:03:E1:F4:03:3B:21:49:87:D8:43
Certificate issuer: /CN=423dceca-a5b5-4f9a-8509-49ac01f41c66
Certificate serial: 010D0C9F4328584F5A33000AB2DBE4BC56CBB1C0
Authority key identifier: FF:75:5D:D3:4A:2F:06:D2:A2:77:F0:71:10:E1:88:FB:FE:C1:D7:E9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66/99dd9df1-85c8-3156-9ead-c836be3c6a64.roa
Signing time: Thu 01 Oct 2026 01:00:12 +0000
ROA not before: Thu 01 Oct 2026 01:00:12 +0000
ROA not after: Wed 30 Dec 2026 02:00:12 +0000
asID: 63101
IP address blocks: 23.188.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66/423dceca-a5b5-4f9a-8509-49ac01f41c66.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66/423dceca-a5b5-4f9a-8509-49ac01f41c66.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 05 Oct 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:5a:33:00:0a:b2:db:e4:bc:56:cb:b1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=423dceca-a5b5-4f9a-8509-49ac01f41c66
Validity
Not Before: Oct 1 01:00:12 2026 GMT
Not After : Dec 30 02:00:12 2026 GMT
Subject: CN=bc19ef2d-c259-4b42-9fc2-e0441e514d51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:17:27:80:e5:00:e6:55:d0:b8:11:48:b6:df:
bf:2f:f2:31:7e:9e:a3:bc:87:43:47:88:29:46:fc:
26:5e:c2:d0:84:f4:93:eb:9c:1a:ff:07:ae:0b:90:
ef:df:ef:13:86:36:4e:62:8d:b8:68:92:12:04:8c:
0f:d5:e7:b9:fe:10:6d:0a:26:42:04:12:ca:75:c8:
ec:d0:f5:21:8e:aa:89:ee:67:a6:b9:bf:08:bd:8f:
5b:be:50:3f:5d:32:04:26:36:cf:bb:b0:9c:c1:28:
d6:bd:c0:db:56:60:03:fd:54:3d:bb:b5:34:4e:f5:
28:46:ec:ee:cf:8e:3c:19:a2:f6:56:c4:fe:2a:e9:
06:1f:e0:10:57:b3:c8:b7:d9:ec:77:4a:23:82:ef:
51:22:22:3b:82:83:09:ce:89:3a:13:e8:43:ba:ed:
c0:62:1d:06:1e:7c:d0:d6:fa:37:33:83:bb:ca:f1:
7b:dc:98:4f:33:78:08:a9:61:f3:1f:a1:33:00:b0:
b5:88:82:01:62:5b:9f:1f:35:c7:16:1c:e5:6e:d4:
0a:82:43:70:a3:33:61:6f:c0:a6:ee:bc:e1:2a:1f:
3f:03:80:fe:f1:b6:0b:38:90:bd:8b:7c:10:7d:4d:
da:60:18:97:6a:c9:a9:44:43:7d:48:42:30:dd:35:
5b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:D9:7E:59:33:D8:34:0B:86:99:03:E1:F4:03:3B:21:49:87:D8:43
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66/99dd9df1-85c8-3156-9ead-c836be3c6a64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66/423dceca-a5b5-4f9a-8509-49ac01f41c66.crl
X509v3 Authority Key Identifier:
keyid:FF:75:5D:D3:4A:2F:06:D2:A2:77:F0:71:10:E1:88:FB:FE:C1:D7:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/423dceca-a5b5-4f9a-8509-49ac01f41c66.cer
sbgp-ipAddrBlock: critical
IPv4:
23.188.40.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:3e:b2:68:8b:f0:9c:d5:6a:86:2c:03:d8:c2:5b:69:b9:56:
ad:d1:d7:0a:0d:9b:7f:32:55:cd:6b:83:91:a0:a5:6e:93:b7:
37:96:a6:19:09:d6:52:39:bc:d2:ce:21:3e:9a:8c:24:c1:7a:
de:b7:9a:08:a2:2b:5b:72:c5:6a:8c:5e:3a:97:61:9a:b2:7f:
f5:34:cb:1c:4d:1a:31:f1:d6:cf:5d:c6:0c:9d:a6:4b:0c:44:
1b:ad:fa:03:8f:64:91:a6:f0:c4:98:e2:32:1d:ef:ec:cd:6f:
05:c1:65:93:9d:31:78:7c:1e:fb:a3:da:ec:45:73:4c:5b:87:
f7:8c:8a:95:c8:5b:ea:4b:73:bb:ee:79:67:5f:21:02:94:7f:
e1:54:6d:55:48:30:d1:b6:2f:80:52:f7:f8:a2:37:a8:f4:3f:
9c:72:68:dc:ef:37:31:6a:69:df:1d:d8:76:b2:03:27:a6:42:
ad:aa:2d:a5:23:08:ab:f9:75:65:0f:53:87:ef:60:9d:7e:6f:
7a:26:ca:27:31:62:c0:2b:90:9c:e6:be:80:bd:52:3f:11:fc:
02:0b:10:3a:bf:dd:58:0c:7f:21:75:e8:89:50:2d:d1:07:37:
75:2d:c5:b4:4b:e3:4e:6b:54:3b:6d:c5:6f:a6:8a:10:fe:97:
65:1c:66:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 05:45:34 2026 by rpki-client