
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/10c21a82-48fa-4568-908e-8e488e55c411/644325d7-4abb-3e88-bb5f-f2c2949325d2.roa
File: 644325d7-4abb-3e88-bb5f-f2c2949325d2.roa (raw, json)
Hash identifier: qSi0hnuuEPuXWLqDgKY60t2rMGPHpBF45de129jWUFM=
Subject key identifier: 3A:F2:2A:89:DC:B2:E4:A2:DA:A8:BE:20:27:B8:D2:48:9C:93:D8:71
Certificate issuer: /CN=10c21a82-48fa-4568-908e-8e488e55c411
Certificate serial: 010D0C9F4328584F7BB2E8E3FEDFC1049ADC9C00
Authority key identifier: 93:A5:23:1E:47:C7:B2:CC:72:77:70:39:AE:FA:C8:C6:FE:B4:80:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/10c21a82-48fa-4568-908e-8e488e55c411.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/10c21a82-48fa-4568-908e-8e488e55c411/644325d7-4abb-3e88-bb5f-f2c2949325d2.roa
Signing time: Tue 13 Oct 2026 01:00:14 +0000
ROA not before: Tue 13 Oct 2026 01:00:14 +0000
ROA not after: Mon 11 Jan 2027 02:00:14 +0000
asID: 398717
IP address blocks: 23.166.48.0/24 maxlen: 24
2605:f4c0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/10c21a82-48fa-4568-908e-8e488e55c411/10c21a82-48fa-4568-908e-8e488e55c411.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/10c21a82-48fa-4568-908e-8e488e55c411/10c21a82-48fa-4568-908e-8e488e55c411.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/10c21a82-48fa-4568-908e-8e488e55c411.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 14 Oct 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:7b:b2:e8:e3:fe:df:c1:04:9a:dc:9c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10c21a82-48fa-4568-908e-8e488e55c411
Validity
Not Before: Oct 13 01:00:14 2026 GMT
Not After : Jan 11 02:00:14 2027 GMT
Subject: CN=dd6ed234-3541-496e-809d-73d86e5f28c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:cf:da:67:30:38:f6:a6:21:f5:8e:90:e4:bf:
b6:9d:2e:16:1f:6a:3a:ec:78:6a:3b:b6:a0:5f:c1:
db:f7:f3:d4:c1:14:3a:e9:c5:16:00:05:37:b1:03:
f8:bc:42:67:e9:b3:34:1b:a9:b7:6a:a8:64:15:b9:
88:dc:a6:ff:60:88:a6:a2:17:a4:30:10:60:2e:ba:
46:be:1f:23:c2:10:ce:61:13:ba:2f:88:be:3c:c2:
12:56:3a:e2:f8:c1:6d:ef:ec:04:80:57:83:a2:98:
fe:e9:ba:cc:8a:55:2f:15:92:c8:aa:5a:df:ce:4c:
44:88:82:1c:62:1c:16:a2:28:56:36:02:84:3f:24:
8a:10:85:1f:1c:6d:4e:cb:3a:40:a3:fe:49:b5:1a:
86:89:01:9d:c8:81:2b:45:e3:8f:62:cb:10:c8:34:
c9:97:ba:0f:33:26:f1:ee:69:ec:8b:c6:c7:b7:86:
78:1b:e4:97:63:45:c3:10:77:8e:1c:d4:1f:7e:ee:
fb:e5:13:f9:2f:2d:1f:86:46:89:9f:fd:14:b1:f5:
74:f5:4d:27:f3:09:f5:db:1b:d3:f9:d2:50:fb:db:
2d:97:a4:d2:52:48:87:93:a2:98:1c:3e:e7:a2:54:
d4:f8:00:06:fe:ac:70:32:c9:2e:99:ce:60:39:70:
d7:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:F2:2A:89:DC:B2:E4:A2:DA:A8:BE:20:27:B8:D2:48:9C:93:D8:71
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/10c21a82-48fa-4568-908e-8e488e55c411/644325d7-4abb-3e88-bb5f-f2c2949325d2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/10c21a82-48fa-4568-908e-8e488e55c411/10c21a82-48fa-4568-908e-8e488e55c411.crl
X509v3 Authority Key Identifier:
keyid:93:A5:23:1E:47:C7:B2:CC:72:77:70:39:AE:FA:C8:C6:FE:B4:80:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/10c21a82-48fa-4568-908e-8e488e55c411.cer
sbgp-ipAddrBlock: critical
IPv4:
23.166.48.0/24
IPv6:
2605:f4c0::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:77:2a:09:60:b9:17:32:1a:86:ab:c8:52:fc:8a:3c:31:9d:
1b:cd:cd:cd:27:34:d1:b7:d5:e0:44:7b:46:71:f8:37:cf:c0:
c5:47:4f:17:66:cf:e3:2a:cc:95:df:a1:aa:4e:de:1f:f2:d5:
f4:3e:27:09:6b:69:ef:9b:de:22:ea:db:b4:ca:f9:e8:8c:b7:
c5:5f:17:ee:c7:91:b2:6c:9c:70:40:22:29:f7:dc:46:38:05:
51:8e:5d:04:76:2b:d1:c1:1c:bb:58:8d:17:b8:eb:60:b2:68:
e8:02:c1:d2:86:93:ce:17:2d:9f:73:79:e8:3f:a5:c8:fe:ff:
2b:38:c3:a0:fb:d9:04:d1:a9:40:e0:d2:86:a5:ff:d4:4f:3f:
ec:7b:e8:30:d8:e2:c8:da:bf:73:f2:b8:8f:22:46:b8:f3:eb:
b3:1b:50:71:91:7d:37:38:c0:39:a0:64:5c:4a:be:b8:5d:8e:
96:ba:9f:85:c2:f0:20:1d:a0:f6:cc:d7:28:7e:7b:7e:91:91:
76:62:16:73:a0:a1:de:6e:6b:9f:9a:73:b4:43:77:49:02:42:
dc:a2:63:cd:cc:d7:d0:f7:d1:a0:ca:e3:1a:da:ce:8a:1a:5f:
84:1a:5c:8c:9e:c9:7a:fd:5b:f3:af:1d:ca:cd:e4:ff:bf:63:
97:98:bc:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 08:08:15 2026 by rpki-client