
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47d33a5a-ff14-4cdb-9fa3-a68c82fbf27f/87fb2e12-fbed-3501-9e6f-d3bffcc7d7fc.roa
File: 87fb2e12-fbed-3501-9e6f-d3bffcc7d7fc.roa (raw, json)
Hash identifier: n4/bP6iLlI9ygoWYaYd50OR9/rj062yE3J2SlsAHfLE=
Subject key identifier: CF:77:31:D7:11:82:78:63:E7:98:01:4B:B7:8C:86:52:CA:88:F6:27
Certificate issuer: /CN=47d33a5a-ff14-4cdb-9fa3-a68c82fbf27f
Certificate serial: 010D0C9F4328584E8DEFA65F9A08AFE05BDE1740
Authority key identifier: 2B:81:44:23:12:6E:F4:2C:6F:52:A8:3D:66:1C:06:CE:9D:1F:0E:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47d33a5a-ff14-4cdb-9fa3-a68c82fbf27f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47d33a5a-ff14-4cdb-9fa3-a68c82fbf27f/87fb2e12-fbed-3501-9e6f-d3bffcc7d7fc.roa
Signing time: Sun 19 Jul 2026 21:00:12 +0000
ROA not before: Sun 19 Jul 2026 21:00:12 +0000
ROA not after: Sat 17 Oct 2026 21:00:12 +0000
asID: 11775
IP address blocks: 23.164.104.0/24 maxlen: 24
2607:7340::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47d33a5a-ff14-4cdb-9fa3-a68c82fbf27f/47d33a5a-ff14-4cdb-9fa3-a68c82fbf27f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47d33a5a-ff14-4cdb-9fa3-a68c82fbf27f/47d33a5a-ff14-4cdb-9fa3-a68c82fbf27f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47d33a5a-ff14-4cdb-9fa3-a68c82fbf27f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:8d:ef:a6:5f:9a:08:af:e0:5b:de:17:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47d33a5a-ff14-4cdb-9fa3-a68c82fbf27f
Validity
Not Before: Jul 19 21:00:12 2026 GMT
Not After : Oct 17 21:00:12 2026 GMT
Subject: CN=f4832de4-dbe7-4165-b405-7be2fc6089bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:21:47:cb:63:a8:38:5f:0b:5c:6b:ed:21:19:
d8:09:19:9b:78:15:69:8e:b8:63:1c:b9:be:68:ae:
e3:4e:e9:24:00:71:05:70:d0:4d:a4:d8:fd:a1:8e:
85:58:70:23:8b:6a:72:56:dc:12:86:12:38:0f:9f:
81:f6:21:32:84:3f:19:4e:84:ab:8e:8a:c5:18:24:
e2:16:f6:2d:cc:4a:b8:ee:82:34:44:27:8c:e5:1e:
e5:0a:34:cb:3f:f0:51:11:d4:48:bd:7d:32:db:0d:
a9:d9:33:8a:be:13:48:56:58:fe:2e:0a:da:55:6e:
b5:6b:4a:db:09:4e:0b:eb:2f:4d:e0:9d:ae:d8:10:
5c:eb:90:61:19:98:de:ab:fd:a5:6b:f5:09:5a:bb:
0d:18:36:4a:ec:c6:45:6c:f7:ba:5c:93:7d:31:60:
bd:38:71:31:1d:17:a0:8c:29:20:9e:6e:17:31:e3:
55:e6:7f:fe:70:36:3f:13:7b:fa:f0:15:e7:54:9c:
42:e2:ea:a1:10:d4:61:06:7a:7f:01:9e:e4:12:5d:
7c:a9:35:91:49:a1:57:71:fa:15:4b:7b:84:d9:d6:
0f:51:88:2b:9a:d8:39:28:3f:70:ed:cd:c2:a2:38:
bd:9c:47:68:23:12:a5:3d:b5:4d:34:a4:1b:29:63:
be:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:77:31:D7:11:82:78:63:E7:98:01:4B:B7:8C:86:52:CA:88:F6:27
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47d33a5a-ff14-4cdb-9fa3-a68c82fbf27f/87fb2e12-fbed-3501-9e6f-d3bffcc7d7fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47d33a5a-ff14-4cdb-9fa3-a68c82fbf27f/47d33a5a-ff14-4cdb-9fa3-a68c82fbf27f.crl
X509v3 Authority Key Identifier:
keyid:2B:81:44:23:12:6E:F4:2C:6F:52:A8:3D:66:1C:06:CE:9D:1F:0E:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/47d33a5a-ff14-4cdb-9fa3-a68c82fbf27f.cer
sbgp-ipAddrBlock: critical
IPv4:
23.164.104.0/24
IPv6:
2607:7340::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:97:fa:39:5c:69:0f:48:02:64:d1:d5:21:bd:7c:25:4e:64:
78:a3:23:ed:5e:4a:a5:2a:bc:5a:08:59:db:58:a8:7b:e2:ed:
2c:c5:b9:6b:b7:23:0d:15:d6:32:ff:17:b8:85:73:b0:eb:7c:
34:4f:21:b5:a8:1d:cf:4b:c1:52:14:27:bf:9f:89:97:42:e2:
ee:73:c7:25:c4:a3:3c:00:0a:48:b1:96:91:f2:a4:2d:66:27:
bf:73:5a:ef:04:f5:b1:74:f8:76:ab:a6:7d:0a:4b:6c:cf:31:
05:88:8a:39:99:09:9f:6d:cc:34:cc:f7:e4:23:8e:c0:e2:dd:
07:30:47:7c:84:bd:2a:52:03:d6:87:b2:8d:ec:25:59:07:c5:
22:f1:16:aa:9a:cb:f3:06:15:55:98:87:26:d6:a7:df:b5:d1:
cc:67:98:1a:05:98:6a:42:9e:c6:71:32:8c:df:ed:24:f8:fb:
0c:4c:1e:b5:1b:23:30:9f:cf:2c:2c:29:a3:b1:72:24:31:a8:
22:84:c0:7b:e3:09:aa:d6:2b:bb:b7:ca:f6:bd:69:5a:9b:78:
be:5e:54:62:00:a1:5d:96:7c:85:17:86:bc:73:5d:b4:0c:3a:
87:c1:3d:84:aa:36:77:2d:80:b2:da:86:3d:3b:82:aa:23:bb:
ec:fe:1d:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:45:19 2026 by rpki-client