
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/fd27f7aa-0ffc-3789-b975-7ffdafed1f91.roa
File: fd27f7aa-0ffc-3789-b975-7ffdafed1f91.roa (raw, json)
Hash identifier: 9r6cwUvkCRm87YHsmdHNpHJolcj5W1pSc3mzaNz2ECU=
Subject key identifier: 1E:92:4B:46:EF:D0:68:A7:2F:22:A9:80:B5:F4:05:44:5F:7D:44:5E
Certificate issuer: /CN=4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b
Certificate serial: 010D0C9F4328584E5A96F218874CE23760A96FDC
Authority key identifier: 8D:76:83:30:91:E7:4B:04:84:43:F7:C4:8F:24:50:50:D1:98:96:F4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/fd27f7aa-0ffc-3789-b975-7ffdafed1f91.roa
Signing time: Wed 01 Jul 2026 11:35:24 +0000
ROA not before: Wed 01 Jul 2026 11:35:24 +0000
ROA not after: Tue 29 Sep 2026 11:35:24 +0000
asID: 215340
IP address blocks: 23.172.216.0/24 maxlen: 24
2602:f959::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:5a:96:f2:18:87:4c:e2:37:60:a9:6f:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b
Validity
Not Before: Jul 1 11:35:24 2026 GMT
Not After : Sep 29 11:35:24 2026 GMT
Subject: CN=af82f48e-0f0d-4649-801f-e128a85e063d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:a1:27:bf:0b:8e:57:21:5b:3d:a2:de:3b:82:
4c:29:aa:eb:e6:d8:e1:fb:06:b4:de:4b:80:fa:81:
85:b5:c7:01:9e:25:84:9c:d5:cb:4e:41:6f:64:6e:
29:5b:32:7a:97:dc:b3:9c:74:87:a4:2a:d6:ce:7d:
83:0a:7c:d0:48:98:42:04:51:75:76:d3:9f:97:1f:
c0:c1:bc:b4:d7:2d:b4:f4:24:93:c1:bb:c8:b9:dc:
3f:0b:0b:62:b2:3f:ea:97:f6:0f:c2:a7:ed:e1:d6:
e5:86:8e:ad:f1:2a:38:86:6d:32:11:c8:cf:d4:85:
31:90:7b:46:82:34:b1:d8:47:5f:f6:c5:8c:4f:f5:
c0:30:ad:bb:23:bb:c0:41:ac:a0:c5:52:89:f1:0f:
80:f7:0b:f3:2a:40:ff:50:5a:48:e8:18:43:dd:b7:
a9:cf:ed:f9:80:cd:3d:23:99:3e:84:72:44:d6:ed:
e2:2b:1c:55:32:d8:43:94:cb:93:55:57:ba:94:6b:
7a:c5:9b:6e:ce:fe:aa:e0:79:5a:53:e2:cf:f3:ba:
63:83:ba:3b:69:4a:b2:d1:4e:60:7c:bc:ff:fd:03:
40:df:29:0c:db:c1:22:b2:9c:e4:78:e5:53:29:fc:
ca:b2:63:0f:bd:68:43:c6:a1:0d:d8:63:c7:1e:91:
76:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:92:4B:46:EF:D0:68:A7:2F:22:A9:80:B5:F4:05:44:5F:7D:44:5E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/fd27f7aa-0ffc-3789-b975-7ffdafed1f91.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.crl
X509v3 Authority Key Identifier:
keyid:8D:76:83:30:91:E7:4B:04:84:43:F7:C4:8F:24:50:50:D1:98:96:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.cer
sbgp-ipAddrBlock: critical
IPv4:
23.172.216.0/24
IPv6:
2602:f959::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:e1:9a:66:bb:15:eb:35:f7:55:d0:ee:d2:8e:c1:e3:a1:a0:
cf:ee:19:2d:cf:b1:d3:f2:14:d6:0d:cf:6e:e0:78:cc:a6:aa:
aa:02:d9:10:60:38:5e:e7:2b:fb:a6:d5:73:89:ea:36:f9:e0:
91:ae:68:dc:77:0e:82:c3:06:95:20:1d:db:6c:a7:06:7c:83:
a3:e4:8f:f4:a4:55:04:22:96:43:79:fc:db:ee:4e:1a:89:e7:
18:8d:b7:1c:4f:3c:3a:5c:b2:04:a3:50:a3:9a:0c:ec:77:1c:
69:7e:2f:07:c2:60:05:8f:cb:b9:82:00:e7:0c:7b:5f:fe:51:
b1:ac:b3:2f:9e:e5:fa:f4:c4:cb:d6:3f:74:04:14:e1:e4:e7:
12:3d:e5:50:26:16:4b:dd:9c:ae:d6:c9:f2:b7:d8:8f:4d:2c:
35:92:02:4d:3b:92:bd:13:6b:76:d9:3d:04:d3:4f:9e:16:f5:
5d:3c:65:ee:46:00:7f:06:8d:90:93:ef:58:b4:1b:80:51:ed:
0a:73:a0:26:3e:ac:4c:de:e4:91:fd:20:78:04:40:10:ac:64:
57:bc:fc:e5:cf:1e:1c:05:54:c0:26:51:61:f8:0f:48:79:5c:
24:9b:98:cf:3f:54:f3:c1:b0:0a:6f:2f:6b:71:a4:5e:37:0a:
b5:11:93:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:20:31 2026 by rpki-client