
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e307b23-6715-4f4e-8e81-99854b623d2d/39e8376f-22b2-35f2-8504-c32896390d85.roa
File: 39e8376f-22b2-35f2-8504-c32896390d85.roa (raw, json)
Hash identifier: cajQ5gXUQpq7fEetR8gfgvLLSB0ulzjoM2BqzsTNlEs=
Subject key identifier: A0:44:B7:E1:49:60:B5:B2:F1:2D:41:76:5E:77:F2:32:F3:2B:1C:71
Certificate issuer: /CN=0e307b23-6715-4f4e-8e81-99854b623d2d
Certificate serial: 010D0C9F4328584F0D6CEAF940662D305D4F8440
Authority key identifier: 58:34:FD:48:71:A0:77:58:13:5A:90:DF:7D:63:69:6C:60:64:5D:CE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e307b23-6715-4f4e-8e81-99854b623d2d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e307b23-6715-4f4e-8e81-99854b623d2d/39e8376f-22b2-35f2-8504-c32896390d85.roa
Signing time: Thu 03 Sep 2026 13:00:12 +0000
ROA not before: Thu 03 Sep 2026 13:00:12 +0000
ROA not after: Wed 02 Dec 2026 14:00:12 +0000
asID: 397668
IP address blocks: 23.165.56.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e307b23-6715-4f4e-8e81-99854b623d2d/0e307b23-6715-4f4e-8e81-99854b623d2d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e307b23-6715-4f4e-8e81-99854b623d2d/0e307b23-6715-4f4e-8e81-99854b623d2d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e307b23-6715-4f4e-8e81-99854b623d2d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 27 Sep 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:0d:6c:ea:f9:40:66:2d:30:5d:4f:84:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e307b23-6715-4f4e-8e81-99854b623d2d
Validity
Not Before: Sep 3 13:00:12 2026 GMT
Not After : Dec 2 14:00:12 2026 GMT
Subject: CN=b9c934be-1297-40ec-a984-93e020de1144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:89:67:69:06:01:59:28:6f:69:01:cc:7c:9d:
cf:e7:fc:20:d6:7d:6d:c3:4c:60:98:f9:13:04:13:
c1:a2:79:05:fc:4b:9d:14:44:0f:87:14:18:00:71:
9c:8a:10:05:57:ca:d1:7a:c2:b8:6e:3a:ff:f0:42:
dd:ff:36:75:47:66:7a:23:ab:46:bb:8d:22:21:6a:
d9:a3:44:f1:50:bc:fa:5f:4c:b2:69:12:55:f2:19:
37:99:b9:d5:2d:38:e5:60:f6:f0:55:b0:23:29:bc:
83:a4:76:10:1e:80:36:a5:e8:55:dc:6b:5d:31:82:
99:36:c1:e1:6d:77:07:64:0c:d5:d4:0a:05:0c:3d:
49:3a:7b:46:f0:8b:99:27:0d:7e:f2:aa:d2:29:9b:
95:da:99:08:f4:1c:fb:c1:76:3d:67:fa:1b:61:4e:
8a:42:78:27:0a:51:d5:03:f5:b7:22:36:a7:dc:b5:
56:8d:59:be:39:1b:0f:43:db:2b:d4:72:fc:ce:97:
2d:90:fd:86:00:d4:75:af:3c:b4:02:3d:a2:b2:f9:
33:81:18:a9:63:a5:5e:dd:5e:80:d8:1b:e0:f2:ec:
7e:c8:2b:57:06:08:ca:3d:cd:21:52:5c:56:06:b7:
a3:f6:a6:89:6d:2c:ea:78:14:94:ca:7f:48:9f:af:
02:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:44:B7:E1:49:60:B5:B2:F1:2D:41:76:5E:77:F2:32:F3:2B:1C:71
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e307b23-6715-4f4e-8e81-99854b623d2d/39e8376f-22b2-35f2-8504-c32896390d85.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e307b23-6715-4f4e-8e81-99854b623d2d/0e307b23-6715-4f4e-8e81-99854b623d2d.crl
X509v3 Authority Key Identifier:
keyid:58:34:FD:48:71:A0:77:58:13:5A:90:DF:7D:63:69:6C:60:64:5D:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e307b23-6715-4f4e-8e81-99854b623d2d.cer
sbgp-ipAddrBlock: critical
IPv4:
23.165.56.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:89:9d:32:6d:c2:7a:ae:71:62:6a:36:3a:43:65:d9:c7:16:
3c:3d:10:05:ab:8a:8d:55:38:7b:5e:19:1a:37:d8:ae:a9:71:
57:61:dc:95:32:29:21:b7:52:7f:4a:23:ff:61:1d:19:1b:05:
d3:f3:fc:21:44:55:be:29:a7:c7:0e:49:8d:65:68:99:18:9c:
9d:e1:8c:68:8d:30:29:62:0f:cb:af:31:8f:a8:d5:e6:a9:a0:
9a:99:09:44:3b:48:3c:98:22:39:f8:0c:8a:8e:11:a1:62:26:
db:26:18:26:6e:5d:97:ca:d0:39:55:6f:ec:10:41:bd:a6:e0:
9e:85:b0:ac:a1:2c:9e:01:91:ea:26:58:21:bf:16:be:b9:ab:
8f:09:f5:18:e1:1d:f6:d7:d9:2a:83:86:a0:1e:62:73:11:9f:
91:09:f4:09:22:52:2b:19:4c:c8:68:5a:4e:ef:e4:62:b9:1b:
db:69:0d:a4:ed:4b:9c:82:2b:2e:be:06:30:f3:87:86:52:d3:
dd:18:c2:1b:e8:a0:1e:ae:92:3d:35:98:3c:27:74:20:74:a4:
09:be:24:38:27:ee:5e:23:c3:e9:d7:cf:66:1c:65:6f:8e:69:
0f:2f:3d:9c:de:d6:0b:6d:31:a0:9c:60:26:2d:91:e7:90:84:
46:6d:bc:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:45:21 2026 by rpki-client