
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/c67fa2c4-805f-3152-936f-aeb5f876559b.roa
File: c67fa2c4-805f-3152-936f-aeb5f876559b.roa (raw, json)
Hash identifier: ZrcEdx7LSl58jDhsy4l50bnrhpyBmUFL5Mjsn+pr05c=
Subject key identifier: 66:E8:D9:47:F5:FF:D5:58:A0:F3:66:13:84:88:11:74:A5:2A:91:A7
Certificate issuer: /CN=a4e3e72e-32cb-4e83-8d44-862466bb0c8b
Certificate serial: 010D0C9F4328584FBED1284AE1CAFE936A7A3880
Authority key identifier: DF:A6:A8:E0:C3:72:E6:C7:0F:84:85:C6:B1:18:A0:CB:5C:3E:BD:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/c67fa2c4-805f-3152-936f-aeb5f876559b.roa
Signing time: Fri 06 Nov 2026 02:00:14 +0000
ROA not before: Fri 06 Nov 2026 02:00:14 +0000
ROA not after: Thu 04 Feb 2027 02:00:14 +0000
asID: 6079
IP address blocks: 23.153.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 16 Nov 2026 23:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:be:d1:28:4a:e1:ca:fe:93:6a:7a:38:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4e3e72e-32cb-4e83-8d44-862466bb0c8b
Validity
Not Before: Nov 6 02:00:14 2026 GMT
Not After : Feb 4 02:00:14 2027 GMT
Subject: CN=aabf84bf-0d4b-4ce3-b5ed-4a748f0e3b88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:78:36:3d:b7:c6:38:47:38:08:ed:54:92:1e:
4b:c3:0c:3a:9a:50:d3:5b:34:d1:47:43:18:ea:ca:
9d:b5:a3:94:d0:26:29:00:34:40:1b:98:ac:80:9b:
27:8c:86:94:0d:17:53:f5:4f:e4:2c:d4:44:43:24:
4e:4e:6e:ef:94:0a:77:e1:b3:81:8e:f5:52:e4:33:
be:3b:0d:13:74:01:48:30:5e:c7:a9:ad:09:2e:89:
eb:43:18:48:b4:ac:7a:1f:b7:de:e2:10:19:b4:16:
71:ac:0b:88:c5:4d:c4:0f:d6:48:b3:4b:91:3f:79:
6d:f2:62:cb:ba:7a:56:1d:c9:28:0f:57:ce:9f:08:
3e:1d:db:40:e0:b4:b7:bf:1e:f2:8f:41:ab:7d:ba:
c8:d4:36:2a:e3:6f:66:87:60:b4:0d:51:ba:e9:be:
b2:4c:1c:45:dd:8a:32:a1:ee:bc:ba:c6:3f:db:aa:
4e:13:73:4d:b8:3a:97:64:75:06:81:3c:d6:af:27:
09:6b:22:cf:6d:b4:71:45:da:41:85:b0:91:21:2d:
ff:1c:67:6a:e4:16:45:10:9c:a8:b7:0d:26:63:a1:
a3:b4:ee:07:af:ee:31:2b:9d:e0:26:30:40:0c:0f:
92:5d:11:76:9a:c6:0a:06:1b:62:d5:85:4c:d1:29:
a9:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:E8:D9:47:F5:FF:D5:58:A0:F3:66:13:84:88:11:74:A5:2A:91:A7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/c67fa2c4-805f-3152-936f-aeb5f876559b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.crl
X509v3 Authority Key Identifier:
keyid:DF:A6:A8:E0:C3:72:E6:C7:0F:84:85:C6:B1:18:A0:CB:5C:3E:BD:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer
sbgp-ipAddrBlock: critical
IPv4:
23.153.64.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ca:09:a7:9b:02:53:2e:a9:fb:3d:20:d3:2b:2a:58:76:f0:1e:
d6:9b:e9:15:16:d0:d0:db:79:25:c4:f4:60:cc:c1:f8:44:06:
79:de:88:bb:2b:47:db:49:24:f4:46:1c:7a:b5:25:32:e0:75:
0b:19:25:ce:81:f0:59:81:8d:79:44:d0:4e:fc:a3:95:fc:4a:
1c:45:ea:af:f2:e9:13:63:69:08:51:c3:58:23:0f:bd:72:db:
bf:65:50:a5:b0:82:ed:3b:d6:38:83:60:d4:c4:f2:03:2c:70:
24:1e:cd:c8:f0:d7:57:fd:cd:41:d1:75:25:f0:fd:a1:73:b1:
a0:6d:15:26:c5:d9:88:72:42:68:68:ff:0a:82:73:61:53:96:
75:89:1c:51:42:cd:c0:67:1d:d4:6d:93:3f:1a:4f:17:bd:40:
4f:df:dc:7a:5c:d7:97:19:e7:b7:64:17:98:8d:b6:5b:9a:ed:
99:c7:99:63:30:8e:25:d5:96:a0:d7:1f:79:47:cf:d7:1c:9d:
93:86:c3:25:ce:2c:00:63:ec:c4:be:29:b6:da:3f:8a:30:be:
a7:a2:f6:66:09:ae:b7:98:d5:7c:59:96:a7:71:c1:b2:05:bd:
d2:17:27:32:b2:af:75:fe:60:d5:ff:9b:40:b5:83:59:cf:2d:
e6:f4:15:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:52:42 2026 by rpki-client