
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e951a87-195b-48e6-8452-38c35bb02255/a096cadc-4c71-333b-93b8-3623bde2c855.roa
File: a096cadc-4c71-333b-93b8-3623bde2c855.roa (raw, json)
Hash identifier: 17pUgsDeib1GJhScjTtesBvwSgsoCCPaT6kpjZ3CB4s=
Subject key identifier: A3:0F:70:3F:48:C3:42:1F:89:01:1B:DF:E0:C1:D1:67:C6:B1:EF:31
Certificate issuer: /CN=8e951a87-195b-48e6-8452-38c35bb02255
Certificate serial: 010D0C9F4328584DCFDEED36D0C4D3E9284B1000
Authority key identifier: F1:EE:61:19:10:74:3C:B4:64:93:38:29:7A:2F:5E:C9:67:EA:B9:A9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e951a87-195b-48e6-8452-38c35bb02255.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e951a87-195b-48e6-8452-38c35bb02255/a096cadc-4c71-333b-93b8-3623bde2c855.roa
Signing time: Tue 12 May 2026 19:03:04 +0000
ROA not before: Tue 12 May 2026 19:03:04 +0000
ROA not after: Mon 10 Aug 2026 18:53:25 +0000
asID: 17080
IP address blocks: 23.167.176.0/24 maxlen: 24
2602:fcf3::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e951a87-195b-48e6-8452-38c35bb02255/8e951a87-195b-48e6-8452-38c35bb02255.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e951a87-195b-48e6-8452-38c35bb02255/8e951a87-195b-48e6-8452-38c35bb02255.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e951a87-195b-48e6-8452-38c35bb02255.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:cf:de:ed:36:d0:c4:d3:e9:28:4b:10:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e951a87-195b-48e6-8452-38c35bb02255
Validity
Not Before: May 12 19:03:04 2026 GMT
Not After : Aug 10 18:53:25 2026 GMT
Subject: CN=9a4a734d-7234-424c-a272-c156a9f5fb53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:2f:61:59:36:f1:86:18:00:d7:a3:d9:4c:fa:
ab:b7:11:d7:33:7c:f7:d0:8b:50:82:b8:f1:a2:4b:
e2:04:a8:50:2d:b5:80:d7:2f:9b:cd:67:0b:12:9b:
ff:1b:2c:96:30:90:a1:5d:a6:42:1f:57:9e:35:cc:
bb:1c:28:f4:dc:07:98:eb:a4:dc:39:1c:0d:8d:45:
cc:fc:3e:e3:11:9f:87:36:40:94:ff:c3:c5:cd:69:
2c:c1:a5:a2:15:cd:0f:dd:ce:1a:0e:cf:16:7b:8b:
d1:8a:a4:d0:86:7c:41:f8:0e:11:e5:21:b2:b1:ce:
30:08:9e:9f:e5:fc:e5:12:d9:10:8c:dc:64:fd:d9:
08:78:23:2d:80:66:d4:60:d2:64:1c:8a:00:c3:75:
1a:d5:3c:50:3f:68:9b:65:ae:d8:de:6b:2b:ab:ff:
cb:bd:13:3f:52:be:14:51:99:40:19:20:21:2f:88:
fd:a5:92:74:21:d9:a1:4c:a8:53:e6:2c:fc:52:46:
43:8d:26:00:a9:51:10:fd:72:71:66:49:8c:d5:f1:
39:9a:49:24:96:e3:c8:f9:1f:af:73:a5:e5:c9:f9:
e8:d4:c9:26:47:0d:4f:d9:eb:a6:56:e0:31:d4:bd:
31:c1:45:b8:c4:e5:a9:ce:eb:81:0a:31:c7:18:e8:
6f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:0F:70:3F:48:C3:42:1F:89:01:1B:DF:E0:C1:D1:67:C6:B1:EF:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e951a87-195b-48e6-8452-38c35bb02255/a096cadc-4c71-333b-93b8-3623bde2c855.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e951a87-195b-48e6-8452-38c35bb02255/8e951a87-195b-48e6-8452-38c35bb02255.crl
X509v3 Authority Key Identifier:
keyid:F1:EE:61:19:10:74:3C:B4:64:93:38:29:7A:2F:5E:C9:67:EA:B9:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8e951a87-195b-48e6-8452-38c35bb02255.cer
sbgp-ipAddrBlock: critical
IPv4:
23.167.176.0/24
IPv6:
2602:fcf3::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:52:72:ee:fc:ab:23:cf:00:af:ea:55:b5:ad:2e:dc:fb:0b:
85:3c:6a:02:3b:20:45:ae:d6:4e:e0:cd:ee:e8:51:41:99:14:
79:b7:4e:fe:8e:88:96:7b:75:68:d3:73:16:99:15:a0:8f:34:
aa:11:cc:a4:dc:b0:12:21:75:4d:33:f1:3f:10:5a:97:4d:9b:
c4:df:56:6b:a6:af:6e:0c:e3:6e:1b:d2:b4:7f:50:20:6f:65:
ba:7c:38:d7:24:90:37:d2:28:0c:54:1e:82:7c:df:3a:b2:ab:
68:4b:37:1e:02:43:75:cc:eb:1d:aa:0e:7a:f2:5e:35:78:38:
2c:70:de:01:75:1c:3f:9b:e7:11:65:c0:bb:17:69:9e:0f:93:
64:e9:51:35:07:1a:0b:12:72:7e:31:c9:0e:f1:cc:a6:3f:c8:
e7:f1:c5:44:a7:ed:18:a6:2d:5b:46:77:ca:b6:f5:36:b1:41:
3a:bf:28:c8:2a:c4:7b:f2:39:ab:c8:bd:5a:3c:95:6e:24:f9:
c1:95:88:77:f4:6e:3b:46:c0:19:36:a7:5b:0a:30:e5:55:a5:
c1:f1:e3:6b:0f:2d:48:e8:60:4a:86:a6:cd:51:af:61:48:96:
60:36:f5:1c:eb:ff:cd:e1:3e:08:68:c4:c0:44:a3:aa:30:d7:
69:6b:69:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:56:45 2026 by rpki-client